WhatsApp: Government Softens Stance on Messaging App Rules After Industry Resistance. A regulatory stir that once threatened to reshape how millions of Indians use messaging platforms has quietly cooled down.
A tough directive from India’s DoT has now been relaxed. Industry groups, backed by major players such as Google and Meta, called the proposal intrusive and questionable. Their resistance appears to have worked.
Table of Contents
Indian Government WhatsApp Web Logout: Details
A Mandate That Sparked Alarm
The directive was blunt. Messaging apps like WhatsApp, Telegram, and Signal were told to automatically log out web sessions every 6 hours. Companies also had to submit compliance reports by March.
Had this rule been passed, it would have disrupted the daily routines of people who rely on WhatsApp Web for work and communication.
WhatsApp: The Quiet Retreat
Now, the tone has shifted.
Officials from the DoT have confirmed that the rigid six-hour logout rule has been scrapped. Instead, a more ambiguous framework based on “risk-based analysis” will take its place. This means that platforms may tailor their security measures based on the perceived risk level of user sessions, though specific details or criteria for this assessment have not been provided. Both users and companies remain in a state of cautious speculation.
This rollback feels familiar. Earlier, the government withdrew the requirement for the Sanchar Saathi app after public pushback. History repeats.
What Still Stands
While one half of the directive has been shelved, the other remains intact.
The SIM-binding requirement continues to loom. Under this rule, messaging apps must verify that a user’s registered phone number is actively linked to a SIM card within the same device. However, the compliance deadline has been extended to December 31, 2026, giving companies a longer runway to adapt.
Why the Industry Pushed Back
The resistance wasn’t casual grumbling. It was coordinated and pointed.
The Broadband India Forum, with members like Meta and Google, warned that the measures were unconstitutional. IAMAI said forced logouts would harm millions of workflows with little security gain.
The Technical Grey Area
Even with the extended timeline, questions linger.
UPI apps like PhonePe and Google Pay do SIM verification with SMS checks. This is easier because financial apps have looser rules. Messaging apps face stricter limits. Android and iOS restrict direct SIM data access, making compliance hard.
A Pause, Not a Full Stop
For now, the six-hour logout rule is gone. A softer, less clear approach has replaced it. But the policy’s intent remains.
The goals, to curb spam, fraud, and security risks, remain. The policy is reshaped, maybe temporarily, by industry pushback.
Next steps depend on how the “risk-based” model is used. Messaging platforms have more time but lack certainty.
