The Ministry of Electronics and Information Technology has ordered VPN companies to collect user data for at least 5 years. Cyber experts and commentators have expressed concerns at this as it tends to go against data privacy.