Other providers are signaling they'll oppose the new policy in India, which will require VPN providers to collect and turn over data on customers.
India’s new policy requiring VPN services to collect and hand over data on customers is prompting NordVPN to consider pulling its servers from the country. 
“We are committed to protecting the privacy of our customers; therefore, we may remove our servers from India if no other options are left,” NordVPN told us.
India is implementing the new policy to help it fight cybercrime. But the data-collection requirement also undermines the whole point of installing a VPN, which are often designed to protect a user’s privacy. 
Under the new policy, VPN providers would need to log data on which IP addresses their customers are using and store the information for at least five years. As a result, the data could be used to map out customers’ web activities if it’s ever turned over to Indian authorities. 
NordVPN said: “At the moment, our team is investigating the new directive recently passed by the Indian government and exploring the best course of action. As there are still at least two months left until the law comes into effect, we are currently operating as usual.”
Pulling the servers would mean NordVPN users could no longer reroute their encrypted internet connections through the country. However, locals could still use NordVPN; they would just need to encrypt their connections through NordVPN servers based in East Asia or the Middle East. 
The bigger issue is if India decides to punish VPN providers that refuse to follow the data-collection policy by blocking local access to offending VPN services. 
At the moment, it appears no major VPN provider plans on going along with the new regulations, which take effect on June 27. Four other services—ExpressVPN, ProtonVPN, PureVPN, and Surfshark—told us they plan to prioritize their customers’ privacy. 
“We’re quite astonished at this policy move by the world’s largest democracy which is on the brink of becoming the world’s largest police state,” PureVPN CEO Uzair Gadit said in a statement. 
The policy from India also forces major internet services, including ISPs and data centers, to maintain logs of all their systems over a rolling 180-day period. However, several VPN services told us the data-collection requirement is fundamentally incompatible with their no-log approach when it comes to user data.  
Surfshark has a strict no-logs policy, which means that we don’t collect or share our customer browsing data or any usage information,” the VPN service said. “Thus at this moment even technically we would not be able to comply with the logging requirements.”
Meanwhile, ExpressVPN VP Harold Li said: “We are keeping a close eye on the situation as it evolves, but want to be clear that ExpressVPN is fully committed to protecting our users’ privacy, including through never logging user activity, and will adjust our operations and infrastructure to preserve this principle if and when necessary.”
Sign up for SecurityWatch newsletter for our top privacy and security stories delivered right to your inbox.

This newsletter may contain advertising, deals, or affiliate links. Subscribing to a newsletter indicates your consent to our Terms of Use and Privacy Policy. You may unsubscribe from the newsletters at any time.
Your subscription has been confirmed. Keep an eye on your inbox!
I’ve been with PCMag since October 2017, covering a wide range of topics, including consumer electronics, cybersecurity, social media, networking, and gaming. Prior to working at PCMag, I was a foreign correspondent in Beijing for over five years, covering the tech scene in Asia.
Read Michael’s full bio
PCMag.com is a leading authority on technology, delivering lab-based, independent reviews of the latest products and services. Our expert industry analysis and practical solutions help you make better buying decisions and get more from technology.
© 1996-2022 Ziff Davis. PCMag Digital Group
PCMag, PCMag.com and PC Magazine are among the federally registered trademarks of Ziff Davis and may not be used by third parties without explicit permission. The display of third-party trademarks and trade names on this site does not necessarily indicate any affiliation or the endorsement of PCMag. If you click an affiliate link and buy a product or service, we may be paid a fee by that merchant.


Write A Comment