The Department of Telecommunications has introduced the Telecommunications (User Identification) Rules, 2026, mandating stricter biometric verification. While the move aims to reduce digital fraud, it creates fresh compliance burdens for small businesses with high staff turnover, as they must now frequently update end-user details to avoid service suspension.
On August 21, 2026, the Department of Telecommunications (DoT) notified the Telecommunications (User Identification) Rules, 2026. This move marks a significant update to how SIM cards are issued and managed, with the government choosing to move away from the proposed shared biometric database system in favor of e-KYC and D-KYC processes. While these changes are designed to tackle rising concerns over digital scams, they are creating new operational challenges for small and medium enterprises (SMEs).
The core issue for business owners lies in the requirement for real-time biometric verification of the end-user for every company-provided SIM card. For small businesses that operate with high staff turnover, such as logistics firms, retail shops, or service-based agencies, this means a recurring administrative task. Every time an employee leaves and a new one joins, the business must inform the telecom operator and ensure the new user's biometric details are registered within a strictly defined period. Experts note that if a business fails to keep these records updated, it risks having its services suspended.
Groups such as the Internet Freedom Foundation (IFF) and CUTS International have pointed out that the definition of a "business user" under the new rules is quite broad. It includes everything from large companies to small partnerships and trusts. Unlike large corporations that have dedicated departments to handle compliance and human resources, smaller businesses often lack the resources to manage these constant verification requests efficiently. This administrative friction could translate into increased operational costs and time for smaller firms.
There is also uncertainty regarding how telecom operators will enforce these rules. While the regulations allow operators some discretion in managing user categories, analysts suggest that telecom companies, facing potential regulatory penalties, may prefer to apply strict, uniform compliance standards to all business connections. This could limit the flexibility many small businesses were hoping for, as operators may be reluctant to grant exemptions that could later be flagged by regulators.
Telecom operators have been given a window of three to six months to upgrade their systems, with the mandate for real-time verification set to be fully implemented by November 30, 2026. For investors and business stakeholders, the next key development to track will be the actual rollout of these verification systems and whether the DoT issues any further clarifications or simplified workflows to help smaller entities manage these frequent compliance obligations without disrupting their daily operations.