Code of Conduct for Internet Service Providers (ISPs) in India

Internet Service Providers play a critical role as the gateway to digital connectivity for millions of Indians. As these intermediaries control access to information and online services, establishing ethical standards for their operations becomes essential. The Internet Service Providers Association of India (ISPAI), established in 1998, developed a voluntary Code of Conduct that sets expectations for how ISPs should operate in India’s digital landscape.

Understanding ISPAI and its role 🔗

ISPAI was founded with the mission to “Promote Internet for the benefit of all” and represents the collective voice of the ISP industry in India. Over the years, the association has influenced telecom policies and helped create an environment where ISPs can establish and grow their services. One of ISPAI’s significant achievements includes establishing the National Internet Exchange of India (NIXI) to facilitate neutral exchange of internet traffic between ISPs.

The voluntary Code of Conduct emerged from the recognition that self-regulation in this rapidly evolving sector could complement the regulatory framework established by the Department of Telecommunications (DoT) and the Telecom Regulatory Authority of India (TRAI). While ISPs must comply with mandatory regulations, the Code sets higher ethical standards that go beyond mere legal compliance.

Core principles guiding ISP operations 🔗

Technology neutrality 🔗

The Code emphasizes that ISPs should avoid discriminating between different technologies for internet access. This means service quality must remain consistent whether users connect through fiber optics in urban areas or wireless solutions in rural regions. ISPs are expected to support innovation by remaining open to emerging technologies and avoiding practices that artificially favor one technological solution over others. This principle is particularly important in India’s diverse digital landscape where users access the internet through various means.

Fairness in service delivery 🔗

Fairness requires ISPs to provide services equitably to all users. This includes transparent pricing structures without hidden charges, honest representation of connection speeds and service capabilities, and equal treatment of data packets regardless of their source or destination. These principles align with India’s net neutrality regulations, which came into effect in July 2018 and prohibit discriminatory tariffs or treatment of content.

User data protection 🔗

Protecting user data forms a cornerstone of the Code. ISPs handle vast amounts of personal information, from browsing histories to communication logs. The Code mandates implementing robust security measures to safeguard this data, obtaining proper consent before collecting personal information, and limiting data collection to what is necessary for service provision. These commitments complement requirements under the Information Technology Act, 2000 and the emerging Digital Personal Data Protection Act, 2023.

Content provider responsibility 🔗

ISPs must balance their role as neutral conduits with responsibilities to prevent misuse of their networks. The Code recognizes that while ISPs should not act as censors, they have obligations to block access to illegal content when directed by competent authorities, implement measures to prevent the spread of harmful material, and cooperate with law enforcement agencies in investigating cybercrimes.

Legal compliance obligations 🔗

The Code emphasizes adherence to India’s complex legal framework governing ISPs. This includes maintaining valid licenses from the Department of Telecommunications, complying with the Information Technology Act and related cybersecurity rules, adhering to consumer protection regulations regarding service provision, and implementing court-ordered or legally mandated content blocking.

ISPs must also comply with data localization requirements, which mandate storing certain categories of data within India. They are required to maintain logs and records for specified periods to assist in cybercrime investigations. According to DoT regulations, ISPs must retain Call Detail Records (CDRs) and Internet Protocol Detail Records for at least two years.

Public service obligations 🔗

Beyond commercial operations, the Code encourages ISPs to embrace their role in national development. This includes expanding internet access to underserved areas, particularly rural regions where connectivity remains limited. ISPs are expected to participate in digital literacy initiatives that help users navigate the online world safely and effectively.

The Code also promotes corporate social responsibility, recognizing that ISPs contribute to bridging the digital divide and promoting inclusive development. These obligations reflect the understanding that internet access has become essential for education, healthcare, governance, and economic opportunity.

Professional ethics and industry relations 🔗

Fair competition 🔗

ISPs must avoid anti-competitive practices that harm other service providers. This means refraining from predatory pricing, ensuring interoperability with other networks, and participating in collaborative efforts to address common industry challenges. The Code encourages knowledge sharing and contribution to the development of industry best practices.

Truthful advertising 🔗

Marketing claims must accurately represent service capabilities. ISPs should not mislead customers about connection speeds, data limits, or service coverage. When advertising “unlimited” data plans or specific speeds, these claims must be substantiated and clearly explained.

Technical standards 🔗

Adhering to established technical standards ensures interoperability and network efficiency. According to TRAI quality standards, wired networks must maintain latency not exceeding 50 milliseconds, and subscribers must receive at minimum 80% of their subscribed broadband connection speed.

Customer service obligations 🔗

Service transparency 🔗

ISPs must provide clear information about service terms, limitations, and pricing. This includes disclosing any traffic management practices that might affect user experience, explaining data caps and throttling policies, and communicating any service interruptions or maintenance schedules in advance.

Grievance redressal 🔗

The Code mandates establishing accessible complaint resolution mechanisms. ISPs should respond to customer complaints promptly, maintain clear escalation procedures, and provide multiple channels for customers to seek assistance. This obligation supports the consumer protection framework established by DoT regulations.

Service quality commitments 🔗

ISPs must strive to deliver the quality of service promised to customers. This includes maintaining network reliability, ensuring consistent speeds, minimizing downtime, and providing adequate technical support. When service quality falls short, ISPs should offer appropriate remedies or compensation.

Implementation and monitoring mechanisms 🔗

For the Code to be effective, ISPAI has established implementation mechanisms. These include self-assessment tools that encourage ISPs to regularly evaluate their compliance with the Code’s principles. ISPs review their policies, procedures, technical measures, and customer feedback to gauge alignment with the Code’s requirements.

The Code also establishes peer review mechanisms where ISPs can evaluate each other’s practices and share feedback. This peer-to-peer accountability helps maintain industry standards and provides opportunities for learning from best practices. The review process is designed to be constructive rather than punitive, focusing on continuous improvement.

When disagreements arise regarding interpretation or application of the Code, structured dispute resolution procedures provide a pathway to resolution. These typically involve mediation or arbitration by industry peers or independent experts, helping prevent prolonged disagreements while ensuring the Code remains a living document that adapts to changing circumstances.

Challenges in implementation 🔗

Despite its comprehensive nature, implementing the Code faces several challenges. ISPs operate as businesses with profit imperatives, creating potential tensions with some ethical requirements. Investing in robust data protection systems or expanding infrastructure to underserved areas may increase costs without immediate financial returns.

The voluntary nature of the Code means compliance depends on each ISP’s commitment to ethical practices rather than legal compulsion. While this flexibility allows for adaptation, it also means enforcement mechanisms are less stringent than regulatory requirements. Balancing commercial viability with ethical obligations remains an ongoing challenge for the industry.

Additionally, the rapid pace of technological change means the Code must continuously evolve. Emerging issues like artificial intelligence in network management, Internet of Things security, and new forms of content delivery require regular updates to the Code’s provisions.

The regulatory ecosystem 🔗

The ISPAI Code operates within a broader regulatory ecosystem. The Department of Telecommunications issues licenses and enforces license conditions, while TRAI regulates tariffs, quality of service, and consumer protection measures. The Code complements these regulatory requirements by setting voluntary ethical standards that go beyond legal minimums.

ISPs must also comply with the Information Technology Act’s provisions regarding intermediary liability, data security, and lawful interception. They must report cybersecurity incidents to the Indian Computer Emergency Response Team (CERT-In) and assist law enforcement agencies when required. Violations of these regulatory requirements can result in penalties up to Rs. 50 lakh or license cancellation.

What do you think? As India’s digital economy continues to expand, how can voluntary codes of conduct complement regulatory frameworks to ensure ISPs operate ethically while remaining commercially viable? Should certain provisions of the ISPAI Code be made mandatory through regulatory action, or does voluntary adoption promote better outcomes?

References

1. https://www.ispai.in/
2. https://www.registrationwala.com/knowledge-base/telecom/telecom-consultant/know-about-india-s-isp-regulations
3. https://en.wikipedia.org/wiki/Net_neutrality_in_India
4. https://www.dlapiperdataprotection.com/?t=law&c=IN
5. https://eprocure.gov.in/cppp/rulesandprocs/kbadqkdlcswfjdelrquehwuxcfmijmuixngudufgbuubgubfugbububjxcgfvsbdihbgfGhdfgFHytyhRtMjk4NzY=
6. https://dot.gov.in/net-neutrality