On October 15, 2025, India Ministry of Electronics and Information Technology (MeitY) jointly with Bureau of Indian Standards (BIS) released Elevator Cybersecurity Supervision Specifications, implemented on January 1, 2026. Core contents:

1. Scope: All smart elevators with IoT, remote control, AI functions;

2. Mandatory certification: Must pass Indian BIS cybersecurity certification, testing covers data encryption, access control, vulnerability management, anti-hijacking, anti-tampering;

3. Data security: Operation data encrypted storage ≥8 years, user privacy comply with Indian DPDP Act, prohibited illegal data export;

4. Vulnerability response: Report vulnerabilities within 24 hours, release patches within 72 hours, establish security audit mechanism;

5. Implementation arrangement: Mandatory for new elevators in January 2026; Stock transformation completed by December 2027;

6. Penalties: Fine of 50 million Indian rupees for uncertified sale, 100 million Indian rupees for data leakage, product recall. Specifications improve India smart elevator cybersecurity level.