113 entrieslast append amendments 0register open

dcentralmind

A public register on decentralization: why power should move from the few to the many
← register
№ 24 · appended

MNRE orders all PM Surya Ghar inverter data, and the control servers behind it, kept on Indian soil

The ministry has said out loud, in a compliance circular, that the risk it is managing is unauthorised control of the devices. That is not a privacy concern; it is an acknowledgement that a subsidised rooftop fleet is a population of remotely operable switches rather than passive generators. Relocating the servers changes the jurisdiction of that control channel without removing it or narrowing who may use it. Every obligation the order creates runs one way: manufacturer to REC Limited, manufacturer to the National Portal, portal to MNRE and to DISCOMs. Nothing reported runs back to the household that part-funded the asset, whether as a right of access to its own data or as a limit on what may be commanded of its inverter. In PJM the fight is over who may read the meter. India has gone straight to who may write to the inverter, and on present evidence has settled it without asking the consumer.

India's rooftop solar ministry has ordered inverter data, and the servers that control the inverters, onto domestic soil. Its stated reason is the risk of unauthorised control of the devices, which is a description of what a subsidised rooftop fleet has become.

On 17 August 2026 the Rooftop Solar Division of India's Ministry of New and Renewable Energy directed inverter manufacturers supplying systems under PM Surya Ghar: Muft Bijli Yojana to keep inverter-level data on servers or cloud platforms located inside India. Two trade reports published on 21 August 2026, by SolarQuarter and Energetica India, describe the same scope and are independent of each other: the requirement covers not only generation data but the applications, the associated monitoring and control servers, and real-time data, all to be held in an encrypted and protected environment resident in India.

Manufacturers must file a written confirmation and undertaking with REC Limited, copied to MNRE, within 30 days of the order, which places the deadline in mid-September 2026. Those who do not file will not be permitted to install their systems under the scheme. Separately, and until state-level systems become operational, every inverter manufacturer must keep sending daily cumulative generation to the National Portal through an application programming interface that is uniform across manufacturers, restricted to a minimum set of parameters, and mapped to each inverter's serial number.

[UNVERIFIED: the office memorandum or circular number and the text of the order. Neither trade report cites a number or reproduces the order, and MNRE's public notices page, checked on 13 September 2026, carried no August 2026 item. Everything below rests on two paraphrases of a document this piece has not read.]

This is the fourth step, not the first

Energetica's account places the directive in a sequence. The PM Surya Ghar central financial assistance guidelines of June 2024 required inverters with inbuilt data communication capability, by SIM or dongle. A July 2025 mandate specified machine-to-machine SIM communication. A December 2025 prescription set out a vendor-neutral, secure and interoperable communication and security architecture. The August 2026 directive adds the location of the servers.

Taken together, the ministry has spent roughly two years establishing that every subsidised rooftop inverter in India is remotely addressable, then standardising how it is addressed, and has now fixed the jurisdiction it is addressed from. Each step is individually reasonable. The cumulative object is a nationally instrumented, nationally reportable, remotely reachable distributed generation fleet.

The fleet is large enough for the question to be live. MNRE reported crossing 50 lakh installed households on 4 August 2026, with July 2026 the highest month since the scheme began. [UNVERIFIED: the milestone figure is taken from wire and trade coverage of MNRE's announcement; the corresponding PIB release returned HTTP 403 and was not read.] [NEEDS DATA: how many empanelled inverter OEMs are affected, and what share of installed PM Surya Ghar inverters currently report to servers outside India.]

Why it matters

The obvious reading is data sovereignty, and the obvious objection is that localisation on its own buys little security. A badly secured server in Pune is a badly secured server. If the threat model is intrusion, the control that matters is the encryption and access architecture, which the December 2025 prescription already covers, not the latitude of the rack.

But the ministry's stated rationale, as both reports render it, is more specific than privacy and more interesting. It names two risks: exposure of generation data, and unauthorised control of the devices. The second is not a data protection concern at all. It is an acknowledgement, in a compliance circular, that a rooftop solar fleet is not a population of passive generators. It is a population of remotely operable switches, and whoever reaches the control server can act on them together.

That reframes what the directive does. Relocating the servers changes the jurisdiction of the control channel. It does not remove the channel, and nothing in either report suggests it narrows who may use it. The household bought a share of the asset, received a subsidy for the rest, and owns the panel on its roof. The obligations the order creates all run in one direction: from the manufacturer to REC Limited, from the manufacturer to the National Portal, from the portal to MNRE and, per Energetica, to DISCOMs wanting regional visibility of rooftop generation. Neither report describes an obligation running the other way. No stated right for the householder to access their own inverter's data in a usable form, no stated limit on what commands may be sent to their inverter or by whom, no stated consent step. Such provisions may exist in the order. This piece cannot confirm they do, and that gap is the story.

It is worth setting this beside the argument currently running in the United States, where demand-response aggregators spent two years litigating at FERC for permission to work around utilities that would not hand over household smart meter readings. That fight is about who may read the meter. India, with a younger and more centrally specified rooftop fleet, has arrived directly at the layer above it: who may write to the inverter. On the available evidence the consumer is not a party to either question, and in the Indian case the question has been settled without being asked.

The Indian context

There is a real instrumentation gap this addresses. DISCOM-level visibility of behind-the-meter generation is poor, and it is load-bearing for things that are already contentious: net metering settlement, feeder-level load forecasting, and the recurring fight over how much of a DISCOM's fixed cost a solar household should still carry. A daily, serial-number-keyed generation feed into a national portal is a genuine improvement on inference, and it is the kind of measurement that arguments about tariff design usually lack.

The question is what else the same pipe carries, and to whom. A monitoring server and a control server are different things, and the directive as reported covers both. [NEEDS DATA: whether the directive grants DISCOMs read access, control access, or neither, and under what authority any curtailment instruction to a household inverter would be issued.]

What is still unknown

  • The office memorandum number and the order text. Everything here is trade-press paraphrase.
  • Whether the 30-day clock runs from 17 August 2026, and therefore whether the deadline is 16 September 2026.
  • Whether the requirement is retrospective, reaching inverters already commissioned and already reporting to overseas clouds.
  • Whether "control servers" is meant to cover remote firmware update and remote curtailment, or monitoring alone.
  • Who may issue a control command to a household inverter through these servers, and under what statutory authority.
  • Whether the consumer gets any right of access to data generated by an asset they part-funded, and how the Digital Personal Data Protection framework applies to it, if at all.
  • What compliance costs affected OEMs, and whether any will exit the scheme rather than pay it.

Sources

Recomputes the content hash in your browser and compares it with the stamp.

Public comments

Loading…