A parliamentary panel has raised red flags over privacy implications in the newly notified telecom cybersecurity regulations, urging the Department of Telecommunications (DoT) to refine the rules for greater clarity and accountability.
In a report tabled in the Rajya Sabha, the Committee on Subordinate Legislation reviewed the Telecommunications (Critical Telecommunication Infrastructure) Rules, 2024 and Telecommunications (Telecom Cyber Security) Rules, 2024. It noted the use of vague language and recommended that ambiguous terms be clearly defined to prevent misuse.
One of the key concerns flagged was the provision allowing the government to collect traffic data and any other data from telecom operators. The panel said the broad phrasing of this clause could lead to potential privacy violations.
It also criticised the undefined use of the term “fraudulent” in the cybersecurity rules, cautioning that without clear guidelines, there is a risk of misclassification. The report warned that individuals could be penalised for unwittingly forwarding messages that are later deemed fraudulent, and called for tighter definitions to avoid such scenarios.
