Archive · 11 Jan 2026
China and India Tighten Data Privacy Rules
China and India are both making new rules to protect people's data.
China wants apps to ask for permission before collecting data and to keep data safe, especially for kids.
They also want to limit when apps can use the camera or microphone.
India wants smartphone companies to share their secret code with the government and make changes to their software.
This includes letting people uninstall pre-installed apps and stopping apps from using the camera or microphone in the background.
Tech companies like Apple and Samsung are worried because they think these rules are too strict and have no precedent in other countries.
Both countries are doing this to make sure people's data is safe and to prevent bad things from happening online.
China proposes stricter rules for online personal data collection, storage, and usage, including informed consent, data usage limits, and accountability for app operators.
India proposes requiring smartphone makers to share source code with the government and make several software changes as part of security measures.
Tech companies oppose India's proposals, citing lack of global precedent and concerns over revealing proprietary details.
Both countries aim to enhance the security of user data and prevent online fraud and data breaches.
Public consultation and discussions with tech companies are ongoing in both countries.
- Who
- China's Cyberspace Administration, India's IT Ministry, app operators, platform/device manufacturers, tech companies (Apple, Samsung, Xiaomi, Google)
- What
- Draft regulations for online personal data collection, storage, and usage (China); Proposed security measures for smartphones (India)
- When
- Draft released on Saturday (China), public consultation until 9 February 2026 (China); Ongoing discussions (India), with a meeting scheduled for Tuesday
- Where
- China and India
- Why
- To address privacy concerns, prevent data misuse, and protect user rights (China); To boost security of user data and prevent online fraud and data breaches (India)
Government
Tech Companies
Source Code Sharing
Government
Government requires access to source code for security analysis and testing in designated labs.
Tech Companies
Tech companies argue that sharing source code is not feasible due to secrecy and privacy concerns, and there is no global precedent for such requirements.
Software Updates and Malware Scanning
Government
Government mandates automatic malware scanning and pre-approval for software updates to enhance security.
Tech Companies
Tech companies state that regular malware scanning drains battery life and seeking government approval for updates is impractical as they need to be issued promptly.
Data Storage Requirements
Government
Government proposes storing phone logs for at least 12 months on the device.
Tech Companies
Tech companies argue that there is not enough storage space on devices to retain logs for a year.
- Draft Release Date (China)
- Saturday, date not specified
- Public Consultation Deadline (China)
- 9 February, 2026
- Key Requirements (China)
- Informed consent, data usage limits, accountability, minor protection, compliance audits, restricted access to camera/microphone
- Recent Penalty Example (China)
- Dior's Shanghai unit fined for data privacy violations in September 2023
- India's Data Protection Framework
- Implemented in November 2025, compliance deadline 12-18 months
- Market Share in India
- Xiaomi: 19%, Samsung: 15%, Apple: 5%
- Number of Security Standards (India)
- 83
- Smartphone Market Size in India
- Nearly 750 million phones
Sources
China steps up scrutiny of personal data gathering practice online — here's what the new rules propose
India proposes forcing smartphone makers to give source code in security overhaul
India Proposes Forcing Smartphone Makers To Give Source Code In Security Overhaul