The Department of Telecommunications has barred communication infrastructure providers from storing or sharing telecom network data outside India.
The new framework covers cloud telecom networks, mobile towers, satellite gateways and other digital connectivity providers.
Highlights
- Telecom network data, logs and related information must now be stored within India.
- No copies of such data can be routed, shared or made available outside the country.
- The government can inspect telecom sites and audit systems to check compliance.
- Prior notice may be waived when immediate action is required in the public interest.
- Infrastructure providers will remain responsible for securing rollout and right-of-way permissions.
- The framework covers cloud-hosted networks, satellite gateways, internet exchanges and mobile number portability providers.
The government has introduced stricter data-localisation rules for communication infrastructure providers, requiring all telecom-related data, logs and network information to be stored within India.
Under the new authorisation framework notified by the Department of Telecommunications, authorised entities will not be allowed to route, share or make copies of telecom network data available outside the country.
The rules apply to companies operating mobile towers, cloud-based telecom networks, satellite earth station gateways, internet exchange points and other digital connectivity infrastructure.
The move is part of the government’s transition from the traditional telecom licensing system to a broader regulatory framework under the Telecommunications Act, 2023.
What changes for telecom providers?
Every newly authorised entity will have to ensure that its telecom systems and associated data remain within India. This includes operational logs, network information and other data linked to telecom infrastructure.
The government will also have the power to inspect sites where telecom equipment and networks are installed. These inspections may include facilities located on a customer’s premises.
Authorities can appoint designated agencies to audit systems, processes and compliance arrangements established by telecom providers.
In cases where immediate action is considered necessary in the public interest, the government may conduct inspections without giving prior notice.
However, the framework says the inspecting agency should not demand information whose disclosure could damage the competitive position of the telecom provider or its customer.
Network rollout responsibility
Infrastructure providers will be solely responsible for obtaining permissions needed to build and expand their networks.
The government has clarified that delays in receiving right-of-way approvals or the non-availability of such permissions will not be accepted as valid reasons for failing to meet regulatory obligations.
This means telecom infrastructure companies will need to plan permissions, land access and network deployment more carefully.
Who will come under the rules?
The framework applies to infrastructure providers, digital connectivity infrastructure companies, internet exchange point operators, satellite earth station gateway providers, cloud-hosted telecom network providers and national-level mobile number portability providers.
For consumers, the rules are aimed at improving control over sensitive telecom information and strengthening national data security. For companies, however, they could require higher investment in domestic servers, cloud systems, cybersecurity and compliance infrastructure.
