Rejecting all speculations around a change in upcoming cybersecurity rules, the Union government has clarified that there is no relook on the upcoming cybersecurity rules that are set to come into force from the end of June.
The new cybersecurity rules mandate social media, technology companies, and cloud service providers to report data breaches swiftly. The Indian Computer Emergency Response Team issued a directive in April asking tech companies to report data breaches within six hours of “noticing such incidents” and to maintain IT and communications logs for six months.
The new rules also mandate cloud service providers such as Amazon and virtual private network (VPN)companies to retain the names of their customers and IP addresses for at least five years, even after they stop using the company’s services.
Advertisement
EVENT
Saksham Bharat 2026
A multi-stakeholder dialogue on skilling gap in Cybersecurity, Data Resilience and AI — and the roadmap to a Saksham Bharat.
Infosec Reimagined 2026 is the premier information security summit where top leaders—CISOs, CROs, CIOs, CTOs and risk executives—converge to redefine cyber resilience.
Digital Senate is a premier conference uniting government leaders, technologists and innovators to share ideas, success stories and strategies on digital governance, public sector transformation, cybersecurity and emerging technologies in India.
CIO Prism unites forward-thinking technology leaders to exchange transformative insights, shape digital strategies, and foster innovation, empowering enterprises to excel in an era of rapid technological change.
Meanwhile, the Industry players have complained of a growing compliance burden and higher costs. Union MoS for IT Rajeev Chandrasekhar said that there will be no changes to the rules, arguing that technology companies have an obligation to know who is using their services.
Chandrasekhar, however, said India was being generous, as some countries mandate immediate reporting. “If you don’t want to go by these rules, and if you want to pull out, then frankly, you have to pull out,” Chandrasekhar said.
Tech Observer Desk at TechObserver.in is a team of technology reporters led by a senior editor who brings latest updates and developments from the world of technology.
India will chair the Common Criteria Development Board from April 2026, gaining influence over international IT security certification standards recognised by 38 countries.
