Doda Orders Total VPN Ban Under BNSS Section 163

Doda District Issues Sweeping VPN Ban

Authorities in Doda district, Jammu and Kashmir, have ordered a complete ban on the use of Virtual Private Networks, citing concerns that the technology is being used to circumvent existing cyber restrictions. The order was issued by District Magistrate Krishan Lal on September 6, 2026, and it applies broadly across the district.

According to the order, the ban covers individuals, institutions, cyber cafés, businesses, and internet service providers operating within Doda. The only carve-out is for VPN use that has been explicitly authorized by the government, meaning most residents, students, and workers in the district lose access to a tool many rely on for everyday privacy and security. Officials tied the order to Section 163 of the Bharatiya Nagarik Suraksha Sanhita (BNSS) 2023, a provision commonly used to issue emergency public order directives in India.

This is not the first time Doda has restricted VPN access. As we covered when Doda imposed a two-month VPN ban in Jammu and Kashmir, local officials previously justified similar restrictions by pointing to cybersecurity threats and concerns about unlawful online activity. The latest order suggests that rather than treating VPN restrictions as a temporary, one-off measure, authorities in the district are prepared to reissue and extend bans as they see fit.

Why VPN Bans Keep Resurfacing in Jammu and Kashmir

VPN bans are not new to this region. Jammu and Kashmir has a long history of internet restrictions tied to security concerns, and VPNs sit at an uncomfortable intersection for regulators: the same encryption and IP-masking features that protect ordinary users' privacy can also be used to bypass content blocks, access restricted platforms, or obscure illegal activity.

From a policy standpoint, officials frame these bans as necessary tools for maintaining public order and preventing misuse of encrypted or anonymized connections. From a digital rights standpoint, blanket bans raise concerns because they do not distinguish between someone using a VPN to protect their banking details on public Wi-Fi and someone using one for genuinely harmful purposes. The exception for government-authorized use in the Doda order technically leaves a door open, but it also means ordinary residents and small businesses must seek approval simply to use a widely available consumer technology.

This pattern, where a district imposes a VPN ban, lets it lapse, and then reissues a new or expanded order, has become increasingly familiar in parts of India. It reflects a broader tension seen in many countries: governments trying to balance cybersecurity enforcement and content control against the legitimate privacy needs of citizens, remote workers, and businesses that rely on secure connections.

What This Means For You

If you live in, work in, or travel through Doda district, this order has immediate practical consequences. VPN use outside of a government-authorized exception is now prohibited under the current directive, and that applies to individuals, cyber cafés, businesses, and ISPs alike. Continuing to use a VPN without authorization could put you at odds with a legally enforceable district order.

For remote workers, freelancers, and businesses in the region that depend on VPNs for secure access to company networks or client data, this creates a genuine operational challenge. Encrypted connections are a standard part of modern data protection practices, and losing access to them, even temporarily, can affect everything from client confidentiality to compliance with data handling agreements.

More broadly, this case is a reminder that VPN legality is not uniform. It can vary not just by country, but by state, district, or even specific administrative order, and it can change quickly. What is legal and routine in one region can become restricted in another, sometimes with little advance notice.

Staying Informed and Compliant

Anyone affected by or traveling to a jurisdiction with active VPN restrictions should take a few practical steps. First, check for official notices from local district administration or state government websites before assuming a VPN is safe to use, especially in regions with a history of connectivity restrictions like Jammu and Kashmir. Second, businesses operating in affected districts should review whether their VPN use qualifies for government authorization and pursue that approval through proper channels rather than continuing unauthorized use. Third, remote workers should have a contingency plan, such as alternative secure access methods, in case VPN access becomes unavailable or restricted.

The Doda order is a clear example of how quickly VPN regulations can shift at the local level, even within a single country. Staying informed about regional rules, rather than assuming national norms apply everywhere, is the most reliable way to avoid running afoul of orders like this one while still protecting your data and privacy wherever possible.