India MNRE mandates cybersecurity compliance for wind turbine OEMs

India’s Ministry of New and Renewable Energy (MNRE) has issued a directive requiring wind turbine original equipment manufacturers (OEMs) listed under the Approved List of Models and Manufacturers (ALMM) to comply with new cybersecurity and data localisation mandates.

Under the revised rules, manufacturers must submit evidence of compliance by August 31, 2026. The requirements include localising data centres and servers within India and prohibiting the transfer of real-time operational data outside the country. Additionally, operational control of wind turbines must be managed exclusively from facilities located within India.

The mandate also requires OEMs to establish research and development (R&D) centres within India. The MNRE stated that these measures will allow the ministry to conduct random inspections and checks to ensure adherence to the updated procedures.