DIGIT-ARC read-only archive · snapshot: July 23, 2026

India Orders VPN Companies to Collect and Hand Over User Data

31 posts · originally from https://geek.digit.in/community/threads/india-orders-vpn-companies-to-collect-and-hand-over-user-data.211201/

RumbaMon19
RumbaMon19 Original post #1
May 3, 2022 at 7:30 PM
*www.cnet.com/news/privacy/india-orders-vpn-companies-to-collect-and-hand-over-user-data/
In India, virtual private network companies will be required to collect extensive customer data -- and maintain it for five years or more -- under a new national directive from the country's Computer Emergency Response Team, known as CERT-in. It's a policy that will likely make life more difficult for both VPN companies and VPN users there.


best democracy we having here :doublethumb:
W
May 3, 2022 at 8:29 PM
In simple terms, if you subscribe to any vpn provider claiming "no logs policy" then technically you are breaking the law though as a small relief the vpn provider you subscribed to will be the one facing any legal action.
SaiyanGoku
May 3, 2022 at 8:38 PM
At this point, all I can say is govt can ## #### ########## (intentionally put #s there).
RumbaMon19
May 3, 2022 at 8:58 PM
Can't this be challenged in court as internet freedom ≈ Real life freedom. Out constitution gives real life freedom, So taking internet freedom in a way is against law.
Desmond
Desmond #5
May 3, 2022 at 9:11 PM
Time to go tor.
K_akash_i
May 4, 2022 at 1:30 AM
Take this as a bonus
Nerevarine
May 4, 2022 at 2:08 AM
dafak. what if i set up AWS EC2 in another country, setup openvpn and manage my own private key. How would indian govt get access to that data ? Even amazon doesnt have access to that private key.
Nerevarine
May 4, 2022 at 2:36 AM
Can't this be challenged in court as internet freedom ≈ Real life freedom. Out constitution gives real life freedom, So taking internet freedom in a way is against law.
the babus in courts are busy ordering staff to bring them soft drinks.
Desmond
Desmond #9
May 4, 2022 at 2:49 AM
dafak. what if i set up AWS EC2 in another country, setup openvpn and manage my own private key. How would indian govt get access to that data ? Even amazon doesnt have access to that private key.
They can't. Besides this only applies to VPN companies. Since you are not one so this does not apply to you, if I understand correctly.
Nerevarine
May 4, 2022 at 2:51 AM
Then this law is such a farce. Its aim was not to stop maliciousness. Its aim was to monitor citizens.
W
May 4, 2022 at 3:03 AM
They can't. Besides this only applies to VPN companies. Since you are not one so this does not apply to you, if I understand correctly.
It basically means that any vpn provider having servers in India will have to keep logs for those servers at least or they will have to exit India by closing down their servers in India. It also means that any vpn provider based in India(thankfully no good one does) will have to keep logs for all their servers in all the countries.
@Nerevarine
Desmond
Desmond #12
May 4, 2022 at 3:30 AM
If this is true, then this would only affect those who are outside India who use servers in India. So if you are in India and use a VPN server outside of India, you should be good to go.
W
May 4, 2022 at 6:19 PM
Yes that is correct. Still one should wait for official clarification from major vpn providers having servers in India.
K_akash_i
K_akash_i #15
May 5, 2022 at 9:37 PM
well on public modes of transportation and goods transportation it would be ideal . on private vehicles its should be kept away as mandatory(it breaks ur privacy)
what if someone use a vehicle from a friend?, the friend would be charged of toll?
secondly the technology is tested in highly developed top of the class countries with top notch roads .
Roads shouldve been completely public funded, made and maintained.
To be frank , I dont like the idea of collecting toll at all(vehicles already pay road tax) as the govt is already collecting a hefty amount from taxes.
W
May 5, 2022 at 10:01 PM
To be frank , I dont like the idea of collecting toll at all(vehicles already pay road tax) as the govt is already collecting a hefty amount from taxes.
The thing is, less than 10% of the population actually pays tax in any meaningful way so the only way for govt is to raise revenue is by way of indirect taxes which everybody has to pay(gst, excise, toll etc). For a simple example, a millionaire farmer having zero taxable income(agriculture income is exempt from tax irrespective of the amt) driving an imported suv will still have to pay gst(on vehicle purchase), road tax & toll.
bssunilreddy
May 7, 2022 at 1:55 AM
Normally anything can be monitored by govt agencies even whatsapp chats for example so don't worry about our rights being trampled because we live in such atmosphere. Don't ask about terrorists coming from abroad what about those harbored by local parties like anti social elements. No offence here. Just saying.

Just look at this for once:Pak Missile Misfire: IAF Probe Blames More Than One Official; ‘Severe Punishment’ to be Meted Out

On the very same day evening when BJP won or results were announced that it won in 4 states.
Now tell me whose responsible for this?

India Says Reviewing Policy After Misfiring of Missile Into Pakistan

Indian missile misfire prompted Pakistan for retaliatory strike

I think what led to the above action might be this. Anybody who can use any VPN or any other of software by which they received orders to such above things.

Then should we chant Hare Ram or Jai Sri Ram if Pakistan retaliated.
W
May 7, 2022 at 2:23 AM
I think what led to the above action might be this. Anybody who can use any VPN or any other of software by which they received orders to such above things.
You are completely wrong. Professional armies don't run like your typical company with employees opening emails to read & follow orders, there are multiple levels of checks.
bssunilreddy
May 7, 2022 at 3:02 AM
You are completely wrong. Professional armies don't run like your typical company with employees opening emails to read & follow orders, there are multiple levels of checks.
Then how this happened if multiple checks were needed.

Sent from my SM-M317F using Tapatalk
Nerevarine
May 7, 2022 at 12:30 PM
Perhaps we should write a guide on digit forums on how to setup openvpn VPS on free servers on aws/gcp/oracle. It should get more people into setting up their own servers once indian servers of good vpn providers start dissapearing.

I can do it in weekends if there is interest.
bssunilreddy
May 7, 2022 at 12:34 PM
Perhaps we should write a guide on digit forums on how to setup openvpn VPS on free servers on aws/gcp/oracle. It should get more people into setting up their own servers once indian servers of good vpn providers start dissapearing.

I can do it in weekends if there is interest.
Indians web hosting or VPNs won't disappear because this is the age of cloud computing. This is a increasing trend that we will notice.

India is the next big thing after China so don't fret man. Good times are ahead for all of us.

Sent from my SM-M317F using Tapatalk
Nerevarine
May 7, 2022 at 1:55 PM
You clearly didn't read the requirement proposed in the original law. Not all VPN companies will agree to storing and collecting data in servers kept in India.
bssunilreddy
May 7, 2022 at 1:58 PM
You clearly didn't read the requirement proposed in the original law. Not all VPN companies will agree to storing and collecting data in servers kept in India.
Why so? Why because of costs maybe and any servers work the same way unless like in northern hemispheres since they might not need more cooling towers.



Sent from my SM-M317F using Tapatalk
Nerevarine
May 7, 2022 at 2:22 PM
*windscribe.com/features/no-logs#:~:text=TLDR; We don't keep,tier limitations and prevent abuse.

*windscribe.com/privacy
Nerevarine
May 7, 2022 at 2:25 PM

This is windscribe's representative's reply on discord.

Hey, that was me. This answer was strictly related to how we view the legalities of the situation. No one can answer that in a practical sense just yet so it's too soon to say what will happen. We're actively investigating though you better believe it.

I responded in another thread that the OP deleted but like with any demand like this we're not choosing to comply. We will most likely just have to add India as a country our founders can't visit any time soon because of ethically troubling behaviour.

China and Russia have less stringent requirements for VPNs, and those are dictatorships. It's highly unfortunate that India decided to go down this route while being the "biggest democracy in the world".
That might sound harsh but these are words from our founder and I agree with him. India should not make these moves to echo Russia & China's police state.
RumbaMon19
May 7, 2022 at 8:00 PM
I guess the "Decision Makers of the people" went to website of some VPN (to Bypass something they banned few years ago), and they saw the title "Browse the web privately" or something in the likes of privacy and untraceability, so as boomers always have been against the idea of privacy, they took this action. They can't ban VPN as offices use it so they demand tracking.
W
May 8, 2022 at 1:30 AM
Why so? Why because of costs maybe and any servers work the same way unless like in northern hemispheres since they might not need more cooling towers.
It is not a matter of cost but a matter of privacy. The whole point of using vpn is to have more privacy compared to using regular connection. If vpn servers in India are keeping logs for 5 years then it is no different from using your typical net connection where ISPs are anyway keeping records of your connection activity so why would anyone pay extra to use a vpn.
Desmond
Desmond #31
May 10, 2022 at 10:13 AM
@K_akash_i Replying to your deleted message:

Tor is safe in the sense that your ISP will know that you are using Tor, but they won't know what you are accessing. However, it is possible for the government to restrict access to Tor as some countries already do. Though IIRC there are workarounds in Tor to circumvent that but I am not sure how that works.