Why Are Industry Players Unhappy with India’s New Cybersecurity Directives? | Dezan Shira & Associates

On April 28, 2022, the Indian Computer Emergency Response Team (CERT-In) released a circular containing cybersecurity directives to government and private agencies, mandating the reporting of cybersecurity incidents. The directives have a direct bearing on the functioning of data centers, virtual private server (VPS) providers, cloud service providers (CSPs), and virtual private network (VPN) providers in India. These new directives aim to augment incident reporting in India and prevent cybercrime. However, they come as a jolt to user privacy and industry players have expressed defiance in accepting these directives, even hinting a country exit.

While the previous compliance deadline was June 27, it has been now been extended for the micro, small and medium enterprises (MSMEs) till September 25, 2022 in order to enable them to build capacity required for the implementation of the directions. In addition, data centres, VPS providers, cloud service providers and VPN Service providers are also provided with additional time till September 25, 2022 for implementation of mechanisms relating to the validation aspects of the of subscribers/customers details. This extension comes as a response to foreign providers who have been planning to remove their servers from India post these directives. 

• Read full Article here
• Receive All the Latest Asia Business Updates to Your Inbox
• Learn more about Asia Briefing
• Learn more about Dezan Shira & Associates