Background Indian Computer Emergency Response Team (CERT-In), India’s cybersecurity watchdog, has issued new directives for companies offering Virtual Private networks (VPN). Under the new directive, VPN provider companies are required to store user data for at least five years, amongst other rules. These companies are now mandated to collect specific…