Consider the following statements with reference to the Virtual Private Network (VPN):

a. It is a computer network in which users can access a shared pool of computing resources through a service provider.

b. In India, there are no rules and regulations for VPN companies to record the personal information of their users.

Which of the statements given above is/are correct?