the China Internet Security Law and National Intelligence Law. There were reports that Xiaomi's Cloud messaging service sends some private data, including call logs and contact information, to Xiaomi servers. Xiaomi later released an MIUI update that made cloud messaging optional and that no private data was sent to Xiaomi servers if the cloud messaging service was turned off. On 23 October 2014, Xiaomi announced that it was setting up servers outside of China for international users, citing improved services and compliance to regulations in several countries. On 19 October 2014, the Indian Air Force issued a warning against Xiaomi phones, stating that they were a national threat as they sent user data to an agency of the Chinese government. In April 2019, researchers at Check Point found a security breach in Xiaomi phone apps. The security flaw was reported to be preinstalled. On 30 April 2020, Forbes reported that Xiaomi extensively tracks use of its browsers, including private browser activity, phone metadata and device navigation, and more alarmingly, without secure encryption or anonymization, more invasively and to a greater extent than mainstream browsers. Xiaomi disputed the claims, while confirming that it did extensively collect browsing data, and saying that the data was not linked to any individuals and that users had consented to being tracked. Xiaomi posted a response stating that the collection of aggregated usage statistics data is used for internal analysis, and would not link any personally identifiable information to any of this data. However, after a followup by Gabriel Cirlig, the writer of the report, Xiaomi added an option to completely stop the information leak when using its browser in incognito mode. Censorship In September 2021, amidst a political spat between China and Lithuania, the Lithuanian Ministry of National Defence urged people to dispose the Chinese-made mobile phones and avoid buying new ones, after the National Cyber Security Centre of Lithuania claimed that Xiaomi devices have built-in censorship capabilities that can be turned on remotely. Xiaomi denied the accusations, saying that it "does not censor communications to or from its users", and that they would be engaging a third-party to assess the allegations. They also stated that regarding data privacy, it was compliant with two frameworks for following Europe's General Data Protection Regulation (GDPR), namely its ISO/IEC 27001 Information Security Management Standards and the ISO/IEC 27701 Privacy Information Management System. Legal actions State administration of radio,