MANU/TRAI/0065/2017

Department/Board : Telecom Regulatory Authority of India

Press Release No. : 61/2017

Date : 16.08.2017

TRAI Releases Recommendations on "Cloud Services"

The Telecom Regulatory Authority of India (TRAI) has today issued its Recommendations on "Cloud Services".

DoT vide its letter dated 31.12.2012 sought recommendations from TRAI on Cloud Services on broad eight categories namely Regulatory framework, Security over the cloud, Cost benefit Analysis, Quality of Service, Inter-operability, Incentivisation, Legal framework, Implementation Strategies of Cloud Services in Government. DoT subsequently clarified on 22.06.2015 that recommendations on Cloud Services need not be too specific on Implementation Strategies of Cloud Services in Government.

2. In pursuance of above reference from DOT, TRAI released consultation paper on "cloud computing" on 10th June 2016 seeking the comments from the stakeholders and an Open House Discussion (OHD) was held on 3rd April 2017.

3. Based on the comments received, extensive discussions from stakeholders and further analysis, recommendations on "Cloud Services" have been issued and the same have also been placed on TRAI's website http: / /www.trai.gov.in/release-publication/recommendation. Some of the main features of recommendations are mentioned below:-

a) Light touch regulatory approach has been adopted to regulate cloud services.

b) DOT shall prescribe a framework for registration of Cloud Service Providers (CSPs) industry bod(y) (ies), which are not for profit. All CSPs above the threshold to be notified by the Government have to become member of one of such industry body.

c) Industry body will prescribe Code of Conduct (CoC) for its functioning which have to be followed by their members. In addition to CoC, their will be a governance structure of the Industry body aimed to support effective and transparent implementation, management and evolution of the CoC. Industry body, not for profit, may charge fee from its members, which is fair, reasonable and non-discriminatory.

d) Industry body will also have a disclosure mechanism to promote transparency regarding interoperability, billing, data security and other related matters.

e) A Cloud Service Advisory Group (CSAG) to be created to function as ove........