India Mandates Caller ID Companies to Share Spam Report Data with Telecom Operators

The Indian government has introduced regulations mandating Caller ID app companies such as Truecaller to unidirectionally provide spam report data collected from users to telecom operators. This effectively forces open the flow of data regarding spam calls from app operators to telecom companies that manage communication infrastructure.

Caller ID apps are services that display "this number is suspected spam" upon incoming calls or block unwanted calls. Truecaller is the leading example, with numerous users in India and around the world. These apps increase accuracy by accumulating large amounts of data on numbers reported as spam by users, and the database itself forms the core of the service's competitive advantage.

The regulation becomes problematic because the data sharing is unidirectional. Truecaller has stated that this requirement amounts to handing over proprietary assets of commercial value to telecom operators. The telecom operators have no obligation to return the data, placing Truecaller in a position of merely providing data.

The Indian government's motivation for this measure appears to be strengthening efforts against spam calls and fraudulent solicitation calls. The logic is that if telecom operators can directly obtain lists of spam numbers, early blocking at the network level becomes possible, benefiting user protection. However, the primary beneficiaries are the telecom companies, and the impact on the app companies providing the data is unavoidable.

For services where data forms the foundation of business operations, government-mandated forced disclosure can be a serious problem. The spam data collected by Truecaller has been formed through years of user reporting behavior, and its value lies in the accumulation of data quantity and quality. Handing this over free of charge to telecom operators that could become competitors could potentially shake the entire business model.

This regulation overlaps with the broader "data as public goods" debate in the AI and data industries. Demands by government and public infrastructure entities for data access are being seen not only in India but across various countries. The question of the scope to which governments can regulate data assets independently built by private companies will be raised in increasingly diverse contexts going forward. Attention should also be paid to the possibility that this case in India may serve as a reference point for regulatory discussions in other countries.