India Orders VPN Companies to Collect and Hand Over User Data

In India, virtual private network companies will be required to collect extensive customer data — and maintain it for five years or more — under a new national directive from the country’s Computer Emergency Response Team, known as CERT-in. It’s a policy that will likely make life more difficult for both VPN companies and VPN users there.