A ban on VPNs, as contemplated by Indian lawmakers, would be a blunt tool with security concerns scuttling legitimate online commerce. There are ways to get around firewalls, like the one China has built. Smart policing would have to turn its attention to the entry and exit points of these private networks, which involves multilateral coordination in law enforcement. Much like landing areas in the real world needing surveillance more than sea lanes. Coordinated action by police forces in the West is being used to take down VPN services that are used for cybercrime. That remains a continuous law enforcement endeavour.
Setting special disclosure requirements in excess of court orders in the course of criminal investigation could push VPNs beyond Indian jurisdiction, negating the original intention of the rules that are to come into force. VPNs actualise the right to be forgotten, a movement gaining currency in most liberal democracies. That involves not keeping logs in the internet’s private spaces.