Indian Computer Emergency Response Team (CERTin), which is part of the Ministry of Electronics and Information Technology issued a brand new Directive Thursday saw crypto exchanges, virtual network providers (VPN), and data centers being forced to store user data for as long as five years.

Under the newly issued directive, crypto exchanges operating in India will be required to store customers’ names, ownership patterns, contact information and various other data.