The 13-rule cascade is the practical face of the 2023 Act. The Act itself is 62 sections. The Rules are where you find the obligations that actually govern your operator. When a compliance calendar for a mid-size ISP lists 47 line items across the year, roughly 40 of them trace to a specific Rule notified between August 2024 and August 2026. This lesson gives you the complete map with every G.S.R. number and gazette date verified against primary sources (DoT press releases, gazette PDFs, and independent legal commentary triangulated three ways).
The complete cascade
| # | Date | Rule set | G.S.R. / reference | Course module |
|---|---|---|---|---|
| 1 | 20 Aug 2024 | Digital Bharat Nidhi Rules 2024 | G.S.R. 530(E) | M8 |
| 2 | 17 Sep 2024 | Right of Way Rules 2024 (in force 1 Jan 2025) | n/a | M3 |
| 3 | 21 Nov 2024 | Telecom Cyber Security Rules 2024 | G.S.R. 720(E) | M4 |
| 4 | 22 Nov 2024 | Critical Telecommunication Infrastructure Rules 2024 | n/a | M5 |
| 5 | 22 Nov 2024 | Temporary Suspension of Services Rules 2024 | n/a | M6 |
| 6 | 6 Dec 2024 | Lawful Interception Rules 2024 | n/a | M6 |
| 7 | 2025 | Adjudication and Appeal Rules 2025 (draft 18 Jul 2024) | n/a | M8 |
| 8 | 22 Oct 2025 | TCS Amendment Rules 2025 | G.S.R. 771(E) (republished G.S.R. 796(E) dated 29 Oct 2025) | M4 |
| 9 | 28 Nov 2025 | DoT SIM Binding Directive to OTT apps | Circular | M4 |
| 10 | 24 Jun 2026 | Principal Telecom Services Rules 2026 | G.S.R. 513(E) | M2 |
| 11 | 25 Jun 2026 | Migration Rules 2026 (portal opens) | n/a | M2 |
| 12 | 20 Jul 2026 | Network Authorisation Rules 2026 | n/a | M3 |
| 13 | 21 Aug 2026 | User Identification Rules 2026 | n/a | M7 |
Two rows to note. Row 8: the TCS Amendment Rules 2025 were notified vide G.S.R. 771(E) dated 22 October 2025 and republished vide G.S.R. 796(E) dated 29 October 2025 due to an inadvertent error in the original notification. The DoT clarified via PIB press release that the 22 October 2025 notification continues to be in force and enforceable [L3-C1]. When you cite this Rule in a filing, cite the 22 October 2025 date with a footnote noting the 29 October 2025 republication for completeness. Row 9: the 28 November 2025 SIM binding directive is a circular, not a gazetted rule. Its enforceability rides on the TCS Amendment Rules 2025 that it operationalises.
The four Rules that will consume most of your time
Not all 13 Rules are equally intensive. Four of them will consume the bulk of your operational compliance work.
Rule set 3 + 8: Telecom Cyber Security Rules 2024 as amended in 2025
G.S.R. 720(E) dated 21 November 2024 (base TCS Rules) plus G.S.R. 771(E) dated 22 October 2025 (Amendment Rules) together define your day-to-day cyber posture. They apply to every telecommunication entity: service providers, network operators, equipment manufacturers, importers, and (post-Amendment) the Telecommunication Identifier User Entity category that pulls in banks, fintechs and e-commerce platforms [L3-C2]. Every telecommunication entity must appoint a Chief Telecommunication Security Officer who is an Indian citizen and resident. Every cyber incident must be reported to the Central Government within 6 hours of detection, with a detailed report within 24 hours. Manufacturers and importers must register IMEI numbers pre-first-sale. Module 4 walks each obligation with a working runbook.
Rule set 10: Principal Telecom Services Rules 2026
G.S.R. 513(E) dated 24 June 2026 is the migration engine. If you hold a Unified Licence, an ISP licence, an Access Service Licence or any category under the Indian Telegraph Act 1885 that maps to one of the five principal service categories (Unified Service, Access Service, Wireline Access Service, Internet Service, Long Distance Service), this is the Rule that governs your migration to a Principal Telecom Services Authorisation. The migration portal opened on the DoT eServices platform on 25 June 2026 [L3-C3]. Module 2 walks the five categories, the Network Service Operator versus Virtual Network Operator choice, and the portal navigation.
Rule set 12: Network Authorisation Rules 2026
Notified 20 July 2026, this Rule set restructures the infrastructure regime into six categories: Infrastructure Provider (IP), Digital Connectivity Infrastructure Provider (DCIP), Internet Exchange Point (IXP), Satellite Earth Station Gateway (SESG), Cloud-hosted Telecommunication Network (CTN), and Mobile Number Portability (MNP). Rule 25(3) mandates that every system of a telecommunication network sit inside India along with all associated data, logs and information. This is the data-localisation rule that reshapes cloud architecture for CTN providers and gateway architecture for satcom operators [L3-C4]. Module 3 walks each category and the localisation implication.
Rule set 13: User Identification Rules 2026
Notified 21 August 2026, this Rule set mandates live biometric verification (face, fingerprint or iris) for every SIM issuance, replacement, change of subscriber details or surrender. Every authorised telecommunication entity must operate a Biometric Identity Verification System (BIVS) with parallel Aadhaar e-KYC and non-Aadhaar D-KYC paths [L3-C5]. The Rule was preceded by a draft opened for public consultation on 19 September 2025. Module 7 walks the BIVS architecture, the exclusion-risk mitigation protocol for elderly and disabled subscribers, and the DPDP Act 2023 Section 8 reasonable-security-safeguards overlap.
The nine remaining Rules and where they land
The other nine Rules on the list fall into three groups.
Group A: infrastructure and access rules that hit only when a specific event occurs
Right of Way Rules 2024 (17 September 2024, in force 1 January 2025) matter when you file for right of way for new infrastructure via the sugam.gov.in single-window portal. Digital Bharat Nidhi Rules 2024 (G.S.R. 530(E) dated 20 August 2024) matter when you owe your 5 percent of AGR Universal Service Levy or when you bid for an implementation contract. Both are covered in Module 3 (RoW) and Module 8 (DBN).
Group B: designation-triggered rules that only kick in if the Central Government designates you
Critical Telecommunication Infrastructure Rules 2024 (22 November 2024) apply only if the Central Government designates your telecommunication network as CTI based on the assessment that its disruption would have a debilitating impact on national security, economy, public health or safety. Module 5 walks the designation process and the first-30-days response playbook.
Group C: powers-of-the-state rules that come to you rather than the other way round
Temporary Suspension of Services Rules 2024 (22 November 2024) and Lawful Interception Rules 2024 (6 December 2024) both operationalise Section 20 of the Act. You do not apply for anything under these Rules. You respond when an order lands. Module 6 walks the Nodal Officer regime, the Central Review Committee workflow, the Anuradha Bhasin v Union of India (2020) doctrine, and the telecom-entity SOP for the moment the order is served.
Group D: adjudication rules that only matter when things go wrong
Adjudication and Appeal Rules 2025 govern what happens if a Show-Cause Notice lands on your desk under Section 48 of the Act. Adjudicating Officer is Joint Secretary rank or above. Complaint fee is Rs 5,000. Appeal fee is Rs 10,000. Appeals must be resolved within 60 days. Module 8 walks the defence workflow and the Section 33 voluntary undertaking mechanism.
The two draft rules you should be watching
Two draft Rules are open for consultation as of 6 September 2026 and could land as gazetted rules in the next six months.
Draft Telecommunications (Television, Radio and Associated Services) Rules 2026. Published by the Ministry of Information and Broadcasting on 12 June 2026. Consolidates six existing guidelines (Uplinking and Downlinking, Direct-to-Home, Headend-in-the-Sky, FM Radio Broadcasting Phase III, Community Radio Stations, Internet Protocol Television) into a single unified framework [L3-C6]. Public consultation until 2 October 2026. If you operate a cable, DTH, IPTV or FM Radio service, this draft affects your migration path.
Draft Telecommunications (Authorisation for Captive Telecommunication Services) Rules. Draft under consideration as of 6 September 2026. Will govern captive telecom services operated by large enterprises for their own use (industrial campuses, private LTE, campus Wi-Fi at scale). Status VERIFY.
Bookmark this table
If you take one artefact from Module 1, take this table. Print it and tape it to the wall behind your desk. Every time a compliance question comes up, look at the table first. Which Rule governs? What is its G.S.R. and gazette date? Which module of this course walks it? The answer is on the wall.
Next lesson: the 11-category authorisation map. Five principal service authorisations, six network authorisations, and which operator sits in which box.