India may require smartphone manufacturers to disclose source code

"According to information provided to Reuters, India is considering a new security requirement that could require smartphone manufacturers to share their source code with the state. The proposal is part of a package of 83 security standards designed to strengthen protection against data breaches and fraud. The requirements include that manufacturers must allow Indian authorities to review the source code in special test labs and notify the government before major software updates are released."

"Manufacturers must also allow pre-installed apps to be removed, apps to be blocked from using the camera and microphone in the background, and logs of system activity to be stored for at least one year. The industry organization MAIT, which represents companies such as Apple, Samsung, Google, and Xiaomi, is reported to have told the authorities that it is not possible for them to review the source code."

India is considering a security requirement that could obligate smartphone manufacturers to share device source code with the state as part of a package of 83 security standards. The standards aim to strengthen protection against data breaches and fraud. Requirements would allow Indian authorities to review source code in special test labs and require advance notification before major software updates. Manufacturers would be required to permit removal of pre-installed apps, prevent apps from using camera and microphone in the background, and retain logs of system activity for at least one year. MAIT told authorities that review of source code is not possible for its members. India's IT department says it is in dialogue with industry and denies formally considering mandatory source-code access.

Read at Computerworld