The Centre is considering stricter compliance measures for virtual private network (VPN) service providers operating in India as part of its broader efforts to strengthen cybersecurity enforcement and improve cybercrime investigations. Officials are exploring a framework that could require VPN companies to appoint designated compliance officers or authorised representatives to coordinate with enforcement agencies and the Indian Computer Emergency Response Team (CERT-In).

The move comes amid growing concerns within the government over the alleged misuse of VPN services to conceal user identities, bypass law enforcement, and access websites or online platforms that have been blocked in the country.

Government seeks stronger compliance framework

According to government officials, the proposal is intended to ensure that VPN providers establish a clear compliance mechanism in India. Designated officials would be responsible for responding promptly to lawful requests from investigating agencies and CERT-In during cyber incident investigations.

Authorities have stressed that the objective is to improve accountability and facilitate quicker coordination during investigations involving cyber offences rather than monitor ordinary internet users.

Officials also noted that cybercriminals frequently use anonymisation tools, including VPN services, while carrying out ransomware attacks, financial fraud, phishing campaigns, and other online crimes. The proposed framework is aimed at helping investigators trace those involved in such offences through lawful procedures.

Proposal draws from existing IT Rules

The proposed compliance model is similar to the framework introduced under the Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021.

Under those rules, significant social media intermediaries are required to appoint a Chief Compliance Officer, a Nodal Contact Person for round-the-clock coordination with law enforcement agencies, and a Resident Grievance Officer. Officials believe adopting a comparable structure for VPN providers would improve accountability, particularly for companies serving Indian users from outside the country.

Existing CERT-In directions remain in focus

The renewed discussions also highlight the cybersecurity directions issued by CERT-In in April 2022.

Under these directions, VPN providers, cloud service providers, virtual private server (VPS) providers, and data centres are required to collect and retain subscriber information for at least five years, even after a customer stops using the service.

The framework requires providers to maintain verified subscriber details, including names, physical addresses, contact numbers, email addresses, IP addresses, the duration of service usage, and the purpose for which the service was obtained. These records must be made available to authorities when sought as part of a lawful cybercrime investigation.

Government officials have maintained that access to subscriber information is limited to lawful investigations and is not intended for indiscriminate surveillance.

VPN industry had opposed data retention rules

When the CERT-In directions were introduced in 2022, several VPN companies and digital rights groups opposed the requirements. They argued that mandatory retention of customer information conflicted with their “no-logs” policies, which are designed to protect user privacy.

Some providers responded by changing their operational models. ExpressVPN, for instance, removed its physical servers from India and began serving Indian users through virtual server locations outside the country. Other VPN companies adopted similar arrangements while continuing to offer services in the Indian market.

Following representations from industry associations and technology companies, the government had extended the compliance deadline from June 27 to September 25, 2022, allowing providers additional time to implement the required changes.

Focus remains on cybercrime investigations

Officials said the latest initiative is intended to place VPN providers under compliance standards comparable to those applicable to other digital intermediaries operating in India. The government believes the proposed measures will strengthen its ability to investigate cybercrimes while further expanding the country’s digital regulatory framework.

Congress MP says decades of peace initiatives have repeatedly been followed by terror attacks and calls for verifiable action against terrorism before any engagement

Congress MP Manish Tewari has questioned renewed calls to resume dialogue between India and Pakistan, saying any discussion with Islamabad must first address the issue of cross-border terrorism. Responding to an appeal by 117 eminent personalities from both countries seeking the restoration of diplomatic engagement, Tewari asked whether such talks could be meaningful without concrete action against terror infrastructure.

Speaking on Friday, the Congress leader said successive Indian governments had consistently attempted to improve relations with Pakistan, but those efforts were repeatedly undermined by terrorist attacks.

According to Tewari, governments led by P.V. Narasimha Rao, H.D. Deve Gowda, I.K. Gujral, Atal Bihari Vajpayee, Manmohan Singh and Prime Minister Narendra Modi all pursued dialogue with Pakistan through formal negotiations or backchannel diplomacy. However, he claimed that each attempt was followed by acts of terrorism.

Calls for proof of dismantling terror infrastructure

Tewari said the key issue was whether Pakistan had provided any verifiable assurance that it had dismantled its terror infrastructure.

Referring to former Pakistan President Pervez Musharraf, he said a public commitment had been made after the Parliament attack to act against terrorism, but the assurance was later withdrawn. He added that similar commitments made during the tenures of former Prime Ministers Manmohan Singh and Narendra Modi also failed to produce lasting results.

Questioning the appeal for renewed engagement, Tewari said those advocating talks should clarify what specific issues they intended to discuss while the threat of terrorism remained unresolved.

References Pahalgam terror attack and Indus Waters Treaty

The Congress MP also referred to the Pahalgam terror attack in April 2025, saying it further reinforced India’s concerns regarding terrorism.

He noted that India’s position became even more firm following the attack, pointing to the suspension of the Indus Waters Treaty as part of the government’s response.

Commenting on the timing of the letter seeking renewed dialogue, Tewari said India had consistently maintained that terrorism and bilateral talks could not proceed simultaneously. He also reiterated the government’s position that it would not differentiate between terrorists and those responsible for directing such attacks.

Peace remains desirable, but security comes first

While acknowledging that millions of people across South Asia aspire for lasting peace, Tewari argued that meaningful dialogue was not possible as long as terrorism remained a continuing threat.

He said India must first receive credible assurances from Pakistan, beginning with an end to the export of terrorism, before considering any resumption of diplomatic engagement.

The southwest monsoon has expanded into more parts of the country, bringing fresh rainfall activity to several regions. According to the India Meteorological Department (IMD), moderate rain is expected to continue in Mumbai and Delhi on Friday, while heavy rainfall is likely in parts of Uttarakhand under an orange alert.

The weather agency said the monsoon advanced further on Thursday, covering additional parts of Gujarat, the remaining areas of Uttar Pradesh, the entire Delhi region, most parts of Madhya Pradesh, Haryana and Punjab, along with some areas of Rajasthan. Conditions remain favourable for the monsoon to progress further in the coming days.

Orange alert issued for Mumbai and neighbouring districts

The IMD has issued an orange alert for Mumbai, Thane, Raigad and Palghar, indicating the possibility of moderate to intense spells of rainfall across these districts.

Residents have been advised to remain cautious as intermittent heavy showers could affect daily life in the region.

Strong winds to continue till July 8

The weather department said strong westerly winds are expected to persist over southern peninsular India and central India until July 8. It also noted the likelihood of an easterly wind anomaly over the north Bay of Bengal, eastern India, central India and adjoining northwestern parts of the country, which could support continued monsoon activity.

Heavy rainfall likely in parts of Uttarakhand

An orange alert has also been issued for Uttarakhand’s Nainital and Bageshwar districts, where heavy to very heavy rainfall is forecast for Friday.

The monsoon entered Uttarakhand on June 30 and became active across the entire state by Wednesday. According to the Meteorological Centre in Dehradun, several parts of the state recorded light to moderate rainfall on Thursday.

With the southwest monsoon remaining active over large parts of India, several regions are expected to witness continued rainfall over the next few days.