The new framework allows eligible companies, startups, researchers and individuals to test innovative telecom products and services under defined regulatory conditions, with provisions for exemptions, user protection, reporting and government oversight.
The Union government has notified the Telecommunications (Regulatory Sandbox) Rules, 2026, creating a formal framework for testing emerging telecommunications technologies, services, products and business models in a controlled environment. The rules came into force on October 21, 2026, following their publication in the Official Gazette.
The framework is intended to provide eligible innovators with a structured way to test new ideas before potential commercial deployment, while allowing the government to monitor risks and enforce safeguards. It also permits exemptions from certain requirements under the Telecommunications Act, 2023, and the Telecom Regulatory Authority of India (TRAI) Act, 1997, subject to specified conditions.
The final rules follow the publication of draft regulations in November 2024. The government said it considered the objections and suggestions received before notifying the final framework.
What Is a Telecom Regulatory Sandbox?
A regulatory sandbox is a controlled testing environment in which approved applicants can evaluate innovative products, services or business models under defined conditions. In telecommunications, this can help innovators assess technical performance, operational feasibility, security risks and user experience before moving towards wider deployment.
The framework establishes a process through which applicants can seek approval to conduct experiments that may require limited regulatory flexibility. Any exemptions must be specifically permitted under the rules and remain subject to the conditions imposed by the government.
The approach could support experimentation in areas such as next-generation connectivity, network management, telecom software and other emerging communications technologies. However, participation in a sandbox does not automatically grant permission for unrestricted commercial operations.
Who Can Apply Under the New Rules?
The notification identifies a broad range of eligible applicants, including authorised entities, companies, societies, partnership firms, statutory bodies and Indian citizens. Research and development institutions recognised by the Department of Science and Technology are also eligible.
Applicants must submit proposals in the prescribed format, along with supporting documents and details of the regulatory exemptions they require.
The application must include reports from limited testing already conducted in offline or laboratory environments, as well as other tests, including those carried out on experimental isolated networks where applicable.
The government will assess proposals and may approve or reject them. It can also establish a regulatory sandbox on its own initiative after evaluating the need for one.
A non-refundable processing fee of ₹10,000 applies to applications under the framework.
Testing Period Can Extend Beyond Two Years
Under the rules, a regulatory sandbox may operate for up to 24 months. The government can extend the period by up to 12 months at a time, subject to the prescribed conditions.
Applicants seeking an extension must submit their request at least 30 days before the existing validity period expires.
For each sandbox, the government will determine the scope, objectives, eligibility criteria, testing conditions, risk-management requirements and reporting obligations. These requirements are intended to ensure that experiments remain within approved boundaries.
The framework provides flexibility for complex technology trials while retaining government oversight over the duration and conduct of testing.
Regulatory Exemptions Require Government Oversight
One of the key provisions allows the government to grant exemptions from certain regulatory requirements under the Telecommunications Act, 2023, and the TRAI Act, 1997, where permitted by the rules.
However, exemptions are not automatic. Applicants must identify the requirements for which relief is sought and explain why it is necessary for the proposed experiment.
Any exemption involving provisions of the TRAI Act requires prior consultation with TRAI.
After reviewing testing reports and results, the government may allow a sandbox to continue under revised conditions, direct its closure or permit steps towards commercial deployment in accordance with applicable laws.
This means successful testing may help an innovation progress towards the market, but commercialisation remains subject to the relevant legal and regulatory requirements.
User Consent, Data Protection and Security Safeguards
The rules place emphasis on protecting participants and ensuring that experiments are conducted responsibly.
Approved applicants must comply with applicable data-protection, security and other laws. They must establish procedures for enrolling eligible participants, monitoring tests and maintaining records of testing parameters, locations and results.
Where users participate in a trial, applicants must explain its purpose and scope and obtain prior consent. Participants must not be charged for taking part in the test environment.
Products, services, technologies, processes and business models under testing must not be commercially available in the market during the testing period.
Applicants must also maintain confidentiality regarding the sandbox, its testing activities and results. The government may publish general information about sandboxes, approved applicants and participants, while protecting proprietary information.
These safeguards are intended to support innovation without compromising user rights, security or the integrity of telecom networks.
Mandatory Reporting and Record-Keeping Requirements
The framework establishes reporting obligations to help the government evaluate the results and risks of each experiment.
Approved applicants must submit a comprehensive report within 15 days of completing testing or at least 30 days before the sandbox's validity period expires, as applicable.
The report must cover:
-
Testing results and user feedback.
-
Complaints and security-related incidents.
-
Technical and operational challenges.
-
Risk-mitigation measures.
-
Closure of activities and settlement of contractual and financial obligations.
Applicants must retain testing records, including work plans, methodologies and user-consent records, for at least one year after the sandbox expires, or longer if required by the government.
These requirements can help regulators assess whether a tested innovation is technically viable, whether it creates unacceptable risks and whether further testing or additional conditions are necessary.
Government Can Suspend or Revoke Approval
The government retains broad oversight powers under the new framework. It can monitor and evaluate sandboxes, request reports and data, and issue directions to ensure compliance and protect participants.
Approval may be suspended or revoked if an applicant provides false information, fails to comply with approval conditions or does not ensure that participants follow the applicable requirements.
The government may also intervene if testing interferes with an authorised telecom entity's network or if suspension or revocation is necessary in the interests of national security or the public.
These powers establish clear consequences for non-compliance and provide a mechanism to stop experiments that create unacceptable risks.
What the New Framework Means for Startups and Telecom Companies
The rules could provide eligible innovators with a more structured route to evaluate technologies that may be difficult to test under ordinary operating conditions.
For startups and research institutions, a controlled environment can help identify technical limitations, assess user feedback and refine products before committing substantial resources to a commercial launch.
Established telecom companies may also benefit from the ability to test new services and business models under clearly defined conditions. The framework could encourage collaboration among technology developers, network operators and research organisations.
However, the practical benefits will depend on how applications are assessed, the clarity of approval conditions and the time required to obtain decisions. Innovators will also need to account for testing costs, documentation requirements, security obligations and any regulatory conditions that remain applicable.
The framework creates an avenue for experimentation, but it does not guarantee approval, commercial success or exemption from all telecom regulations.
Potential Implications for India's Digital and Telecom Ecosystem
India's telecommunications sector is undergoing continued technological change, with growing demand for faster connectivity, more efficient networks and new digital services. A formal sandbox framework could help regulators and innovators evaluate new approaches while identifying risks before technologies are introduced more widely.
For policymakers, the process can provide evidence about how emerging technologies operate in real-world or controlled settings. For businesses, it can offer an opportunity to validate technical and commercial assumptions before expanding deployment.
The framework may also help identify regulatory issues that require clarification as new business models emerge. Nevertheless, its overall impact will depend on the quality of proposals, the effectiveness of safeguards and the ability to translate successful trials into lawful commercial services.
Market Outlook
The Telecommunications (Regulatory Sandbox) Rules, 2026, establish a formal mechanism for testing emerging telecom technologies under controlled conditions, with provisions for limited regulatory exemptions, defined testing periods, user safeguards and government oversight.
For startups, research institutions and telecom companies, the framework could reduce some barriers to experimentation and provide a clearer process for evaluating innovative products and services. At the same time, strict reporting, security and compliance requirements are intended to protect users and maintain the reliability of telecom networks.
The key measure of success will be how effectively the framework balances innovation with accountability. Its longer-term contribution to India's digital economy will depend on the number and quality of experiments undertaken, the clarity of regulatory decisions and whether successful trials can progress towards commercial deployment under applicable laws.