Scope: |
This ESSENTIAL describes the regulatory requirements of Cybersecurity for electrical and electronic devices in India.
On a high level:
- a regime to protect personal data,
- a legal framework for Information Technology, which introduces provisions related to data protection and privacy,
In more detail:
- security requirements which need to be applied during mandatory testing and certification of telecom equipment
Not in scope of this ESSENTIAL are sector specific requirements (e.g. automotive equipment, medical devices) and organizational requirements for certain entities (e.g. critical infrastructure).
|
Legislation in force: |
Indian Telegraph Act 1885
[Act]
With the notification of Indian Telegraph (Amendment) Rules 2017 enabling mandatory testing and certification of telecom equipment (MTCTE), TEC has been designated as the Telegraph Authority for the purpose of administration of MTCTE procedure and Surveillance Procedure, and for formulation of Essential Requirements under MTCTE.
‘Communication Security Certification Scheme’ [ComSec]
2019
Digital Personal Data Protection Act, 2023.
[DPDPA]
(No. 22 of 2023)
11-AUG-2023
|
Comment on the comparability to EU legislation: |
Currently is no Indian legislative act applicable, which would be comparable to EU's ... |