On 28 April, the Indian Computer Emergency Response Team (Cert-In) issued new directives, first reported by Mint, that require Virtual Private Network (VPN) providers to store user data for five years. What does that mean? In this episode Mint explains how India’s new VPN rules change the status quo.