By Ken Macon
India’s cybersecurity agency, the Computer Emergency Response Team (CERT-In), will require government organizations, corporations, service providers, data centers, and intermediaries to report cyber incidents within six hours.
“To effectively fight cybercrime, all companies and enterprises must mandatorily report cyber incidents to IndianCERT New CyberSecurity directions for a SafeAndTrusted Internet issued under Sec 70b of IT Act,” Rajeev Chandrasekhar, Union minister of state for electronics and IT said.
In recent years, cyberattacks in India have increased significantly. Ransomware attacks alone increased by 218% in 2021, according to Palo Alto Networks.
CERT-In will also require cloud and VPN providers to register their users. Custodial wallets, exchange, virtual asset providers, cloud providers and even VPN providers will have to keep records of their customers (KYC) and records of financial transactions for five years. Service providers will maintain logs of their systems for 180 days.
This would defeat the purpose of using a VPN and creates honeypots of data that could be misused for surveillance or stolen.
According to CERT-In, the new requirements will improve the “overall cybersecurity posture” and ensure a “safe and trusted internet” in India.
If you’re tired of censorship, cancel culture, and the erosion of civil liberties subscribe to Reclaim The Net.
Source: Reclaim the Net
Become a Patron!
Or support us at SubscribeStar
Donate cryptocurrency HERE
Subscribe to Activist Post for truth, peace, and freedom news. Follow us on SoMee, Telegram, HIVE, Flote, Minds, MeWe, Twitter, Gab, What Really Happened and GETTR.
Provide, Protect and Profit from what’s coming! Get a free issue of Counter Markets today.
Be the first to comment on "India Orders VPN Providers to Collect Data on Users"