Security News India Proposes Digital Data Rules with Tough Penalties and Cybersecurity Requirements

[Captain Awesome]

1.1.1.1 is working perfectly but their paid service is blocked. You can get 1111 from their website or any third party good website. For violating privacy.

removed Cloudflare's 1.1.1.1 from app store.

 

[Abhishek Singha]

Strange because I was in India from the end of October to early December and I couldn't connect to Proton VPN in multiple attempts. Neither from the hotel WiFi, nor from mobile data.

Even right now I'm using Proton free version on my mobile. I regularly use Kaspersky premium VPN service on my desktop. Also use AVG secure paid subscription on my laptop.
You might've had a different issue I bet.

 

[Abhishek Singha]

That is weird, Proton VPN works fine for me.

Working: Proton, Windscribe, AVG Secure, Malwarebytes, Kaspersky (working until subscription ends, but future sales are suspended)
Not Working: Norton

Haven't tested others.

Edit: Added more info about Kaspersky

From what I've seen, only Norton & Mcafee VPN are banned.
I regret because I have 3 years subscription for each one.

 

[Captain Awesome]

Even right now I'm using Proton free version on my mobile. I regularly use Kaspersky premium VPN service on my desktop. Also use AVG secure paid subscription on my laptop.
You might've had a different issue I bet.

I use proton paid regularly windscribe Free,1.1.1.1 and Kaspersky occasionally.All of them working properly.

 

[Captain Awesome]

From what I've seen, only Norton & Mcafee VPN are banned.
I regret because I have 3 years subscription for each one.

Add 1111 also ban from apps store. But 1.1.1.1 is working fine.

 

[partha_roy]

Just to clarify, VPNs are not banned in India; however, the Indian government has implemented regulations that VPN companies must comply with, particularly concerning user privacy protection.

While a few companies decided to discontinue operations in India due to these laws, numerous other providers are successfully operating within the framework of these new guidelines.

 

[partha_roy]

Hopefully, this article from Hola will shed light on the whole situation - Hola | India legislation undermines the use of VPNs.

 

[anirbandutta01]

Even right now I'm using Proton free version on my mobile. I regularly use Kaspersky premium VPN service on my desktop. Also use AVG secure paid subscription on my laptop.
You might've had a different issue I bet.

AVG Secure subscription fee how much?? Also how much Windscribe paid ?

 

[Captain Awesome]

AVG Secure subscription fee how much?? Also how much Windscribe paid ?

Windscribe pro 69 USD/Year

​

 

[anirbandutta01]

AVG Secure VPN is not working within India.

 

[Abhishek Singha]

AVG Secure VPN is not working within India.

What the hell dude! You're right.
It worked a few days ago. Mine still has 294 days remaining
I think it's the recent one to take the dust. Avast is also not working.
Crazy!

Spoiler

 

[Abhishek Singha]

AVG Secure subscription fee how much?? Also how much Windscribe paid ?

I don't use Windscribe. I bought the AVG key from Kinguin. Costed me 2.5 dollars approx for an year.

 

[brambedkar59]

AVG Secure VPN is not working within India.

Another great move by our clown-in-chief. Vishwaguru 2025

 

[Abhishek Singha]

Another great move by our clown-in-chief. Vishwaguru 2025

Well... You think those VPNs which don't have servers within India aren't logging your data? They're doing the same in some distant servers & definitely selling it to foreign Govt. Most of them are just playing ego games trying to stand different for public consumption.
I would rather want them to store data locally. There are so many countries with strict data localisation laws & have the least trust on American Govt.
Govt is right in their sense tbh. IMHO it's a right decision if petty politics is kept aside.
Nevertheless, some will go, some will stay. Won't matter much. There are never ending options.

 

[brambedkar59]

Well... You think those VPNs which don't have servers within India aren't logging your data? They're doing the same in some distant servers & definitely selling it to foreign Govt. Most of them are just playing ego games trying to stand different for public consumption.
I would rather want them to store data locally. There are so many countries with strict data localisation laws & have the least trust on American Govt.
Govt is right in their sense tbh. IMHO it's a right decision if petty politics is kept aside.
Nevertheless, some will go, some will stay. Won't matter much. There are never ending options.

I am not sure if banning VPNs is part of DPDP Act or not (see edit2 below). I am talking about this directive from CERT-in (Ministry of Electronics and Information Technology (MeitY)) from 2022. To me this seems the likely reason, i.e. VPN companies who refuse to follow these ridiculous laws are being blocked right now.

(v) Data Centres, Virtual Private Server (VPS) providers, Cloud Service providers and Virtual Private Network Service (VPN Service) providers, shall be required to register the following accurate information which must be maintained by them for a period of 5 years or longer duration as mandated by the law after any cancellation or withdrawal of the registration as the case may be:
a. Validated names of subscribers/customers hiring the services
b. Period of hire including dates
c. IPs allotted to / being used by the members
d. Email address and IP address and time stamp used at the time of registration / on-boarding
e. Purpose for hiring services
f. Validated address and contact numbers
g. Ownership pattern of the subscribers / customers hiring services

Why are the VPNs required by law to keep data for 5 freaking years? Do you see the long list of things govt. want to keep log of? How does that help in maintaining privacy of Indian citizens? This is just utter madness; no upstanding citizen who cares about his privacy will stand for it.

https://www.cert-in.org.in/PDF/CERT-In_Directions_70B_28.04.2022.pdf

Edit1: added more context

Edit2: DPDP Act draft seems like a step in right direction. I gave it a quick read, some of the language used is too broad, but I am not a legal guy. If you want to read it there is a link below. (It is both in Hindi and English). I don't think it has anything to do with VPN ban because it's only a draft (and not law or advisory) at this point and govt is asking for feedback/comments.

https://static.mygov.in/innovateindia/2025/01/03/mygov-999999999568142946.pdf

 

[Captain Awesome]

I don't use Windscribe. I bought the AVG key from Kinguin. Costed me 2.5 dollars approx for an year.

Avast is very well known for data manipulation and selling data to companies. So no wonder why its ban. If any one not following local government laws and keep their indian data within india, its bound to happen.Government tring to tell every company to store their indian data in india nothing wrong with that. Every country do that.

 

[Captain Awesome]

I am not sure if banning VPNs is part of DPDP Act or not (see edit2 below). I am talking about this directive from CERT-in (Ministry of Electronics and Information Technology (MeitY)) from 2022. To me this seems the likely reason, i.e. VPN companies who refuse to follow these ridiculous laws are being blocked right now.

Why are the VPNs required by law to keep data for 5 freaking years? Do you see the long list of things govt. want to keep log of? How does that help in maintaining privacy of Indian citizens? This is just utter madness; no upstanding citizen who cares about his privacy will stand for it.

https://www.cert-in.org.in/PDF/CERT-In_Directions_70B_28.04.2022.pdf

Edit1: added more context

Edit2: DPDP Act draft seems like a step in right direction. I gave it a quick read, some of the language used is too broad, but I am not a legal guy. If you want to read it there is a link below. (It is both in Hindi and English). I don't think it has anything to do with VPN ban because it's only a draft (and not law or advisory) at this point and govt is asking for feedback/comments.

https://static.mygov.in/innovateindia/2025/01/03/mygov-999999999568142946.pdf

Nothing is perfect in this world.. it takes time to improve over the time. At least government trying to make big companies to work with in India for our good. DPDP act. is not perfect at the moment but over the time it will improve. Look at "Truecaller" 2020 data leaks as an example Truecaller denied and move on. And famous "META" Leak.Truecaller data of 4.75 cr Indian users leaked on dark web: Report

https://www.google.com/amp/s/www.financialexpress.com/life/technology-massive-data-breach-targeting-1-2-crore-whatsapp-17-lakh-facebook-india-users-unearthed-details-3021310/lite/

 

[partha_roy]

I am not sure if banning VPNs is part of DPDP Act or not (see edit2 below). I am talking about this directive from CERT-in (Ministry of Electronics and Information Technology (MeitY)) from 2022. To me this seems the likely reason, i.e. VPN companies who refuse to follow these ridiculous laws are being blocked right now.

Why are the VPNs required by law to keep data for 5 freaking years? Do you see the long list of things govt. want to keep log of? How does that help in maintaining privacy of Indian citizens? This is just utter madness; no upstanding citizen who cares about his privacy will stand for it.

See, the 5-year data retention period is intended to assist law enforcement agencies in investigations related to national security, cybercrime, and other serious offenses.

It's important to understand that this information will be sought only on a case-by-case basis, with proper legal authorization, to aid in specific investigations.

 

[brambedkar59]

See, the 5-year data retention period is intended to assist law enforcement agencies in investigations related to national security, cybercrime, and other serious offenses.

It's important to understand that this information will be sought only on a case-by-case basis, with proper legal authorization, to aid in specific investigations.

I can't tell if you are actually this naive or joking. You sound like EU politicians who want no/weak encryption to fight terrorism/crime. If you don't understand why VPN storing logs (and other very private details) for 5 years by law is an issue then this discussion is pointless, I won't reply anymore to this thread.
Have a good day.

 

[Abhishek Singha]

I can't tell if you are actually this naive or joking. You sound like EU politicians who want no/weak encryption to fight terrorism/crime. If you don't understand why VPN storing logs (and other very private details) for 5 years by law is an issue then this discussion is pointless, I won't reply anymore to this thread.
Have a good day.

The point is to restrict outsider's access to your personal data. That's why Russia & China have such strict localisation laws. I would rather be efficient like China than the USA.
Indian govt already has access to your data at every level. It won't change much. Let's not use Western politicians as a metric. It's not a smart thing to do.