VPN Ban in Doda District Sparks Debate Over Privacy and Digital Rights

• Doda district enforced a 2-month VPN ban, raising ethical debates.
• Several individuals reportedly detained for using VPNs post-ban.
• Experts call the move disproportionate, raising privacy concerns.

Authorities in Doda, a district in India’s Jammu and Kashmir region, have enforced a two-month ban on the use of virtual private networks (VPNs), starting from May 2, 2025. The decision was made under Section 163 of the new Bharatiya Nagarik Suraksha Sanhita (BNSS), citing national security concerns. According to the official order, the ban is aimed at stopping individuals and groups from using VPNs to bypass legal cyber restrictions and access banned applications.

The directive applies to all individuals, institutions, internet service providers, and cyber cafés operating in the region. Anyone found using a VPN during the ban period could face legal consequences. Reports have already emerged suggesting that some residents have been detained for allegedly using VPN services after the ban took effect. On May 16, local authorities confirmed that several individuals had been detained across the district for violating the order. A few days later, it was reported that others had been arrested following technical surveillance.

The move has drawn heavy criticism from digital rights experts and legal professionals, who say the ban raises serious concerns about privacy, freedom of speech, and access to information. Namrata Maheshwari, Senior Policy Counsel and Encryption Policy Lead at Access Now, spoke about the broader implications. “VPNs are not illegal,” she said. “A blanket ban on all VPNs for two months is unnecessary and disproportionate.”

Maheshwari emphasized that access to the internet and privacy are both protected under the Indian Constitution. “People have a fundamental right to information and freedom of expression,” she added. “Restrictions on these rights must be legal, necessary, and proportionate — a standard this ban does not meet.”

India has already introduced strict data retention rules for VPN providers back in 2022, requiring them to store user data for up to five years and provide access to authorities when requested. That move had prompted many major VPN companies to shut down their servers in India.

Critics also highlight how this latest ban could impact businesses and organizations that rely on VPNs for secure communication and data protection. “Even in an emergency, preventative measures cannot be this vague and overreaching,” said Maheshwari. “Especially when less intrusive options are available.”

As the VPN ban in Doda remains in effect through July 2025, debate continues around the balance between national security and individual digital rights, with experts warning that broad restrictions like these may do more harm than good in the long run.