India Tightens Cyber Grip: CERT-In Issues Strict New Data Laws for VPN Providers

India is strictly tightening its digital surveillance and cybersecurity framework. The Indian Computer Emergency Response Team (CERT-In), operating under the Ministry of Electronics and Information Technology (MeitY), has issued strict mandates for Virtual Private Network (VPN) service providers. Under these new structural guidelines, all VPN companies operating in India must record and store critical customer data, including validated IP addresses, usage patterns, and personal details, for a minimum duration of five years.

This policy shift comes after recommendations from a parliamentary committee aimed at curbing cybercrimes such as digital fraud, identity masking, and the spread of misinformation during local emergencies. The government clarifies that while everyday citizens use VPNs for standard privacy, anti-national elements and internet bad actors actively abuse these masked networks to bypass geo-restrictions and trackable protocols. VPN networks failing to maintain these customer logs will face strict penalties or operational bans within the country.

Related Categories

Explore more Trending story, and World News, on Alramika.

Leave a Comment