As India’s Data Retention Law Takes Effect, VPN Providers Exit

[dcontesti]

Under India's new law, VPN companies will be required to store users’ real names, IP addresses assigned to them, usage patterns and other identifying data for up to five years. They will also be required to hand this information over to authorities upon request.

https://www.wired.com/story/vpn-firms-flee-india-data-collection-law/

Maybe a little too stringent?  Thoughts

d

[JKWiniger]

I think this is a very bad idea for them because I believe few if any VPN provides will have any servers there. So instead of passing something that is effective they are basically passing something to drive business away. One of the main selling points on most commercial VPN services is the fact that there is no log retention. Thinking about it VPN company would have no choice but to stop doing business there because it would be in direct conflict with their existing policies.

Another thought is companies would have to have multiple policies for multiple countries they would operate in because this new law would be in direct conflict with GDPR. Many in India already have and will figure out to just use TOR to connect to the VPN server located in a different country. Never tried it but might work.

John-