New Delhi: In a significant decision, govt has notified new rules under Telecom Act that puts an obligation on mobile operators to provide user traffic data - other than content of messages - to Centre to ensure cyber security, apart from stipulating that companies notify a breach within six hours of an incident. Govt will also have the power to analyse such data and pass it on to any agency engaged in law enforcement and security related activities. Govt also directed seller of mobile phones to mandatorily register International Mobile Equipment Identity (IMEI) number of devices - made in India or imported here - before their sale.
Centre, or any agency authorised by Centre, may, for the "purposes of protecting and ensuring telecom cyber security, seek from a telecommunication entity, traffic data and any other data, other than content of messages, in the form and manner as may be specified" by Centre, the notification issued said. The rules also state that govt may maintain a repository of persons and telecommunication identifiers which have been acted upon pursuant to the orders "and may direct telecommunication entities , to prohibit or limit the access to telecommunication service to such persons for a period not exceeding three years from the date of such order." The notification empowers govt to "direct a telecommunication entity" establish necessary infrastructure and equipment for collection and provision of such data from designated points to enable its processing a.
