On 28 April, the Indian Computer Emergency Response Team issued guidance on information security practices, procedure, prevention, response and reporting of cyber incidents under the Information Technology Act. Effective 60 days after issue, the guidance includes mandatory cyber-incident reporting to CERT-In and follows the agency’s identification of gaps and issues in facilitating incident-response measures. “These directions shall enhance overall cyber security posture and ensure safe & trusted Internet in the country,” the news release stated. According to CNET, virtual private network companies will be required to collect and store customer data for up to five years.
CERT-In releases guidance on cyber-incident reporting
Related stories
Notes from the IAPP Canada: Take a deep breath and dive in on AI training
Notes from the Asia-Pacific region: More new problems to solve as AI, data march forward
Notes from the IAPP Europe: It's a GDPR week
Proposed moratorium on state-level AI regulation heads to US Senate
'We cannot be left behind:' How Canada is balancing AI regulation, innovation