Answer: Five
Notes: As per the new rule released by the Computer Emergency Response Team (CERT-in), VPN companies are asked to collect and preserve data on their clients for a period of five years. CERT-in, which is overseen by the Ministry of Electronics and Information Technology, issued a new set of guidelines to coordinate response activities as well as emergency measures with respect to cyber security incidents. For five years, data centres and crypto exchanges must keep a wide range of data about their users.
