The government says India will not change upcoming cybersecurity rules that force social media, technology companies and cloud service providers to report data breaches swiftly, despite growing industry concerns.
The Indian Computer Emergency Response Team issued a directive in April asking tech companies to report data breaches within six hours of noticing such incidents and to maintain IT and communications logs for six months.
They also mandated cloud service providers such as Amazon and virtual private network companies to retain the names of their customers and IP addresses for at least five years, even after they stop using the company’s services.