On April 28, 2022, the Indian Computer Emergency Response Team (CERT-In) issued fresh directions (No. 20(3)/2022-CERT-In) under section 70B of the Information Technology (IT) Act, 2000 in relation to the information security practices, procedure, prevention, response, and reporting of cyber incidents. These directions have raised concerns in the industry related to state sponsored surveillance and data retention beyond need or purpose. Therefore, this NASCAP think tank session provides for interaction between Government and industry to share their view points.