CYBER SECURITY CROON : RULES INDIA

New Delhi : India's cyber security rules spark fears. Top tech companies call for one-year delay before rules take effect.

Indian cyber security rules due to come into force later this month will create an ''environment of fear rather than trust'', a body representing top tech companies has warned the government, calling for one-year delay before the rules take effect.

The Internet and Mobile Association of India [ IAMAI ], which represent firms including Facebook, Google and Reliance, wrote this week to India's IT ministry, criticising a directive on cyber security set out in April.

Among other changes, the directive from the Indian Computer Emergency Response Team [CERT] requires tech companies to report data breaches within six hours of noticing such incidents and to maintain IT and communications logs for six months.

In the letter seen by Reuters, IAMAI proposed to extend the six-hour window, noting the global standard for reporting cyber security incidents in generally 72 hours.

CERT, which comes under the IT ministry, has also asked cloud service providers, such as Amazon and virtual private networks [VPN] companies to retain names of their customers and IP addresses for at least five years, even after they stop using the company's services.

The cost of complying with such directives could be massive, and proposed penalties for violation including prison would lead to ''entities ceasing operations in India for fear of running afoul,'' the IAMAI letter said.

On Thursday, VPN  service provider ExpressVPN removed its servers from India, saying it ''refuses to participate in the Indian government's attempts to limit Internet freedom''.

IAMAI's letter follows one from 11 significant tech aligned industry associations earlier this week, which said the new requirements made it difficult to do business in India.

India has tightened regulation of big tech firms in recent years, prompting a pushback from the industry and in some cases, even straining trade ties between New Delhi and Washington. [Reuters]