DoT Mandates Telecom Data Localisation, Bars Infra Providers from Sharing Data Abroad

Political and Constitutional Dimensions Telecommunications falls under Entry 31 of the Union List (List I) — "Posts and telegraphs; telephones, wireless, broadcasting and other like forms of communication" — placing this regulatory action squarely within Parliament's and the Union executive's domain. The shift from the 1885 Telegraph Act framework to the Telecommunications Act, 2023-based authorisation regime also reflects a broader legislative trend of replacing colonial-era statutes with modern, purpose-built laws across digital and infrastructure sectors.

Economic and Financial Dimensions Mandating in-India data storage for telecom infrastructure has direct implications for data-centre investment, potentially accelerating demand for domestic data-centre capacity among telecom infrastructure providers and cloud-hosted network operators. The low-cost entry structure for the new Cloud-Hosted Telecommunication Network Provider category (₹10 lakh entry fee, zero annual charges) is designed to lower barriers for smaller and domestic players, though compliance costs for storage, auditing, and inspection readiness will still fall on all authorised entities.

Social Dimensions Data-localisation rules are frequently justified on grounds of protecting citizens' communications metadata from foreign surveillance or commercial exploitation, and this notification extends that logic beyond personal data (already covered under the Digital Personal Data Protection Act, 2023) to network-level infrastructure data and logs, which can reveal sensitive information about communication patterns even without exposing message content.

Governance and Administrative Dimensions The rules give the Centre significant administrative powers — site inspection and system audits, potentially through a designated third-party agency — raising governance questions about the scope, frequency, and oversight of such audits, and about safeguards against overreach while still ensuring effective compliance monitoring across a large and technically complex telecom infrastructure ecosystem.

International Perspective India's move mirrors data-localisation trends in other jurisdictions, including the European Union's data-sovereignty debates and China's Cybersecurity Law-driven localisation regime, reflecting a global trend of states asserting greater control over telecommunications infrastructure data amid rising concerns about foreign surveillance, cross-border data flows, and critical-infrastructure security.