(1) The Central Government may put in place digital and other mechanisms as it may consider necessary to identify, or for enabling any person to identify and report, acts that may endanger telecom cyber security.
(2) The Central Government shall, after examination of the information received under sub-rule (1), identify the telecommunication identifier, the use of which is alleged to have endangered telecom cyber security and the person to whom such telecommunication identifier has been issued, by the telecommunication entity, and issue a notice to such person, with details thereof.
(3) The person to whom notice is issued under sub-rule (2), shall send a written response to the Central Government within seven days of receipt of such notice, and if no response is received within such period, the Central Government shall proceed to issue an order under subrule (5).
(4) If a response is received from the recipient of the notice under sub-rule (2) within the time specified in sub-rule (3), the Central Government shall, after giving such person a reasonable opportunity of being heard, make an order thereon as it thinks fit under sub-rule (5).
(5) The Central Government shall, based on its assessment of facts and submissions, if any, made by the person to whom notice is issued under sub-rule (2), pass an order, with reasons to be recorded in writing, which may include directions to the telecommunication entity to —
(a) temporarily suspend use of the relevant telecommunication identifier, in the manner and for a duration as may be specified in such order; or
(b) permanently disconnect the use of the relevant telecommunication identifier.
1 (6) Where the Central Government considers that immediate action under sub-rule (5) is necessary or expedient in the public interest, it shall without issuing a notice under sub-rule (2), pass an order recording the reasons thereof, with appropriate direction—
(a) to the telecommunication entity to temporarily suspend use of the relevant telecommunication identifier; and
(b) to the TIUE to temporarily suspend use of the relevant telecommunication identifier for identification of or for delivery of message or services to its customers or users.]
1 Subs. by G.S.R. 771(E), dated 22.10.2025. Sub-rule (6), before substitution, stood as under:
“(6) Where the Central Government considers that immediate action under sub-rule (5) is necessary or expedient in the public interest, it shall without issuing a notice under sub-rule (2), pass an order recording the reasons thereof, with appropriate directions to the telecommunication entity to temporarily suspend use of the relevant telecommunication identifier.”
(7) A copy of the order under sub-rule (5) or sub-rule (6), as the case may be, shall be provided to the person referred to in sub-rule (2) or the telecommunication entity 1 or TIUE] referred to in sub-rule (6) or such person affected by the order, and such person or, as the case may be, the telecommunication entity 2 or TIUE], may, within a period of thirty days from the date of issuance of the order, represent to the Central Government in writing, with reasons why such action should not be taken.
(8) The Central Government shall, after giving the person to whom copy of the order has been provided under sub-rule (7), a reasonable opportunity of being heard and for reasons to be recorded in writing, pass an order, either upholding, or modifying, or revoking the order passed under sub-rule (5) or sub-rule (6):
3 Provided that any modification of the order under sub-rule (6) may also include an order directing:
(a) the telecommunication entity to permanently disconnect the use of the relevant telecommunication identifier as specified under clause (b) of sub-rule (5); and
(b) the TIUE to prohibit or circumscribe the use of relevant telecommunication identifiers for identification of its customers or users, or for delivery of message or services, in the manner as may be specified in such order to enable the reuse of relevant telecommunication identifiers.]
(9) Any order of suspension or permanent disconnection of use of the relevant telecommunication identifier under sub-rule (5), sub-rule (6) or sub-rule (8) may also be extended to the other telecommunication equipment or telecommunication identifier linked to the person whose telecommunication identifier has been identified under sub-rule (2) or other telecommunication identifier issued to the person identified under sub-rule (2).
(10) The Central Government may maintain a repository of persons and telecommunication identifiers which have been acted upon pursuant to the orders under sub-rule (5), or sub-rule
(6), or sub-rule (8), or sub-rule (9), and may direct telecommunication entities, to prohibit or limit the access to telecommunication service to such persons for a period not exceeding three years from the date of such order.
(11) The Central Government may, if it considers necessary, or pursuant to any request made by 4 a TIUE], share the list of telecommunication identifiers that have been acted upon pursuant to orders under sub-rule (5), or sub-rule (6), or sub-rule (8), or sub-rule (9), with such persons and, by order, direct such persons to also prohibit or circumscribe the use of such 1 Ins. by G.S.R. 771(E), dated 22.10.2025..
2 Ins. by ibid.
3 Subs. by ibid. Proviso to sub-rule (8), before substitution, stood as under:
“Provided that any modification of the order under sub-rule (6) may also include an order directing the telecommunication entity to permanently disconnect the use of the relevant telecommunication identifier as specified under clause (b) of sub-rule (5).” 4 The words “any person providing services that are linked to telecommunication identifiers” substituted by ibid.
telecommunication identifiers for identification of their customers 1 or users] or for delivery of services, in the manner as may be specified in such order.
(12) Any telecommunication identifier, which is subject to suspension or permanent disconnection under this rule, shall not be reallocated to any other person for a period of one year from the date of issuance of the order of suspension or permanent disconnection which may be extended upto three years, for reasons to be recorded in writing, in specific cases.