Indian cyber agency gives VPN providers 3-months breather

New Delhi: The Indian Computer Emergency Response Team (CERT-In) has given virtual private network (VPN) providers another three months to comply with its new rules.
The new rules that were supposed to be effective from June 27 require VPN service providers along with data centres and cloud service providers, to store information such as names, email IDs, contact numbers, and IP addresses (among other things) of their customers for a period of five years.
The April 28 directive from India’s cyber agency sought additional compliance requirements for all VPN providers whose users are in the country.
Now, the new CERT-In direction will become effective on September 25.
The agency has directed data centres, virtual private server (VPS) providers, cloud service providers and VPN providers that this specific aspect of the direction will become effective on September 25.
Also Read T-Mobile sells users’ app usage data to advertisers: Report “The extension of timelines for implementation of these Cyber Security Directions of 28th April, 2022 have been urged in respect of Micro, Small and Medium Enterprises (MSMEs) for providing reasonable time for generating capacity building required for implementation of these Directions,” said the CERT-In.