DoT Updates Interception Rules, Exempts Govt Tests from Penalties

The Department of Telecom (DoT) has recently updated the rules for lawful interception of messages, removing penalties for telecom entities that violate interception norms. The new regulations, known as the Telecommunications Procedures and Safeguards for Lawful Interception of Messages Rules, 2024, were notified on Wednesday. These rules do not apply to demonstrations and testing of interception systems by the central government.

Representative image

Internal Safeguards and Responsibilities

Telecom entities must now ensure robust internal safeguards to prevent unauthorised interception and maintain confidentiality. The notification specifies that telecom companies are responsible for any unauthorised interception by their employees or vendors. This change aims to enhance accountability within telecom organisations.

The 2007 notification under the Indian Telegraph Act required telecom entities to exercise utmost care in intercepting messages due to privacy concerns. The new rules continue this requirement but exempt demonstration and testing of interception systems from these regulations. "Nothing in these rules shall apply to the demonstration and testing of lawful interception systems and monitoring facilities that the Central Government may require telecommunication entities to put in place," the notification stated.

Issuance and Validity of Interception Orders

The process for issuing interception orders remains unchanged. The union home secretary or state home secretary retains the authority to issue such orders. In urgent situations, a joint secretary level officer at the Centre may also be authorised. For remote areas or operational reasons, an Inspector General of Police (IG) level officer can issue an order, but it must be approved by a competent authority within seven working days.

If an IG-level officer issues an interception order, a copy must be submitted to the competent authority within three working days. If not confirmed within seven working days, the interception must cease immediately. Any intercepted messages cannot be used as evidence in court and must be destroyed within two working days if not approved.

Duration and Destruction of Records

Interception orders are valid for 60 days and can be renewed but cannot exceed 180 days in total. Records related to interception orders and intercepted messages must be destroyed every six months unless needed for functional requirements. Both DoT and telecom operators must destroy records within two months after discontinuing interception.

A review committee will continue to operate under the Cabinet Secretary at the Centre and the chief secretary at the state level. This committee will meet every two months to review interception orders, ensuring compliance with the rules and ordering destruction of improperly intercepted messages.

The updated rules reflect a balance between national security needs and individual privacy rights. By removing penalties but enforcing strict internal safeguards, the DoT aims to ensure lawful interceptions are conducted responsibly while protecting citizens' privacy.