


Several VPN providers have expressed worries about India’s new cybersecurity rules.

The new rules, which were unveiled late last month and go into effect late June, won’t be applicable to corporate and enterprise VPNs, the government agency clarified. The Indian Computer Emergency Response Team clarified (PDF) on Wednesday that “virtual private server (VPS) providers, cloud service providers, VPN service providers, virtual asset service providers, virtual asset exchange providers, custodian wallet providers and government organisations” shall follow the directive, called Cyber Security Directions, that requires them to store customers’ names, email addresses, IP addresses, know-your-customer records and financial transactions for a period of five years. India is pushing ahead with its new cybersecurity rules that will require cloud service providers and VPN operators to maintain names of their customers and their IP addresses and suggested firms unwilling to comply to pull out of the world’s second-largest internet market.
