The Centre is considering stricter compliance measures for virtual private network (VPN) service providers operating in India as part of its broader efforts to strengthen cybersecurity enforcement and improve cybercrime investigations. Officials are exploring a framework that could require VPN companies to appoint designated compliance officers or authorised representatives to coordinate with enforcement agencies and the Indian Computer Emergency Response Team (CERT-In).

The move comes amid growing concerns within the government over the alleged misuse of VPN services to conceal user identities, bypass law enforcement, and access websites or online platforms that have been blocked in the country.

Government seeks stronger compliance framework

According to government officials, the proposal is intended to ensure that VPN providers establish a clear compliance mechanism in India. Designated officials would be responsible for responding promptly to lawful requests from investigating agencies and CERT-In during cyber incident investigations.

Authorities have stressed that the objective is to improve accountability and facilitate quicker coordination during investigations involving cyber offences rather than monitor ordinary internet users.

Officials also noted that cybercriminals frequently use anonymisation tools, including VPN services, while carrying out ransomware attacks, financial fraud, phishing campaigns, and other online crimes. The proposed framework is aimed at helping investigators trace those involved in such offences through lawful procedures.

Proposal draws from existing IT Rules

The proposed compliance model is similar to the framework introduced under the Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021.

Under those rules, significant social media intermediaries are required to appoint a Chief Compliance Officer, a Nodal Contact Person for round-the-clock coordination with law enforcement agencies, and a Resident Grievance Officer. Officials believe adopting a comparable structure for VPN providers would improve accountability, particularly for companies serving Indian users from outside the country.

Existing CERT-In directions remain in focus

The renewed discussions also highlight the cybersecurity directions issued by CERT-In in April 2022.

Under these directions, VPN providers, cloud service providers, virtual private server (VPS) providers, and data centres are required to collect and retain subscriber information for at least five years, even after a customer stops using the service.

The framework requires providers to maintain verified subscriber details, including names, physical addresses, contact numbers, email addresses, IP addresses, the duration of service usage, and the purpose for which the service was obtained. These records must be made available to authorities when sought as part of a lawful cybercrime investigation.

Government officials have maintained that access to subscriber information is limited to lawful investigations and is not intended for indiscriminate surveillance.

VPN industry had opposed data retention rules

When the CERT-In directions were introduced in 2022, several VPN companies and digital rights groups opposed the requirements. They argued that mandatory retention of customer information conflicted with their “no-logs” policies, which are designed to protect user privacy.

Some providers responded by changing their operational models. ExpressVPN, for instance, removed its physical servers from India and began serving Indian users through virtual server locations outside the country. Other VPN companies adopted similar arrangements while continuing to offer services in the Indian market.

Following representations from industry associations and technology companies, the government had extended the compliance deadline from June 27 to September 25, 2022, allowing providers additional time to implement the required changes.

Focus remains on cybercrime investigations

Officials said the latest initiative is intended to place VPN providers under compliance standards comparable to those applicable to other digital intermediaries operating in India. The government believes the proposed measures will strengthen its ability to investigate cybercrimes while further expanding the country’s digital regulatory framework.

Congress MP says decades of peace initiatives have repeatedly been followed by terror attacks and calls for verifiable action against terrorism before any engagement

Congress MP Manish Tewari has questioned renewed calls to resume dialogue between India and Pakistan, saying any discussion with Islamabad must first address the issue of cross-border terrorism. Responding to an appeal by 117 eminent personalities from both countries seeking the restoration of diplomatic engagement, Tewari asked whether such talks could be meaningful without concrete action against terror infrastructure.

Speaking on Friday, the Congress leader said successive Indian governments had consistently attempted to improve relations with Pakistan, but those efforts were repeatedly undermined by terrorist attacks.

According to Tewari, governments led by P.V. Narasimha Rao, H.D. Deve Gowda, I.K. Gujral, Atal Bihari Vajpayee, Manmohan Singh and Prime Minister Narendra Modi all pursued dialogue with Pakistan through formal negotiations or backchannel diplomacy. However, he claimed that each attempt was followed by acts of terrorism.

Calls for proof of dismantling terror infrastructure

Tewari said the key issue was whether Pakistan had provided any verifiable assurance that it had dismantled its terror infrastructure.

Referring to former Pakistan President Pervez Musharraf, he said a public commitment had been made after the Parliament attack to act against terrorism, but the assurance was later withdrawn. He added that similar commitments made during the tenures of former Prime Ministers Manmohan Singh and Narendra Modi also failed to produce lasting results.

Questioning the appeal for renewed engagement, Tewari said those advocating talks should clarify what specific issues they intended to discuss while the threat of terrorism remained unresolved.

References Pahalgam terror attack and Indus Waters Treaty

The Congress MP also referred to the Pahalgam terror attack in April 2025, saying it further reinforced India’s concerns regarding terrorism.

He noted that India’s position became even more firm following the attack, pointing to the suspension of the Indus Waters Treaty as part of the government’s response.

Commenting on the timing of the letter seeking renewed dialogue, Tewari said India had consistently maintained that terrorism and bilateral talks could not proceed simultaneously. He also reiterated the government’s position that it would not differentiate between terrorists and those responsible for directing such attacks.

Peace remains desirable, but security comes first

While acknowledging that millions of people across South Asia aspire for lasting peace, Tewari argued that meaningful dialogue was not possible as long as terrorism remained a continuing threat.

He said India must first receive credible assurances from Pakistan, beginning with an end to the export of terrorism, before considering any resumption of diplomatic engagement.

Board examination marks could soon carry greater significance in admissions to medical and engineering courses, with the Centre reportedly considering a proposal to assign 50% weightage to board scores alongside entrance examinations such as NEET and JEE.

The proposal is part of a broader set of education reforms aimed at reducing the pressure associated with high-stakes examinations and making the admission process more balanced.

Education Ministry panel reviewing admission reforms

According to sources, the proposal is being examined by the Ministry of Education’s nine-member committee that was constituted last year. The panel was tasked with studying students’ growing dependence on coaching institutes, the rise of “dummy schools”, and concerns over fairness in major entrance examinations.

The committee is exploring several measures to improve the existing admission system while reducing the emphasis on a single examination.

Why the reforms are being considered

The discussions come in the wake of multiple controversies involving the examination system, including reported evaluation errors and paper leak incidents. These developments have sparked a wider debate over the credibility and reliability of high-stakes entrance examinations.

To address these concerns, the committee is considering giving 50% weightage to board examination marks in the admission merit process.

Other changes under consideration

Apart from increasing the role of board examination scores, the panel is also examining several other reforms.

These include aligning entrance examinations more closely with school syllabi to reduce students’ dependence on coaching centres, allowing multiple attempts for entrance tests, and gradually introducing adaptive, on-demand computer-based examinations.

Current admission process

At present, admissions to medical and engineering programmes are primarily based on candidates’ performance in entrance examinations such as NEET and JEE. Students are also required to secure the prescribed qualifying marks in their board examinations to become eligible for these entrance tests.

The proposed reforms are currently under consideration, and no final decision has been announced.