Menu

Rules, Regulations & Compliance

Curated by FACE for members and the wider ecosystem

From laws and regulatory directions to guidance, consultations, and compliance resources, this page brings together developments that shape the operating environment for the FinTech ecosystem. Organised across key regulatory and operational areas, it is intended to make relevant requirements and reference material easier to discover, navigate, and use.

Omnibus Directions

The Digital Personal Data Protection Act, 2023

The Digital Personal Data Protection Act, 2023

Establishes a legal framework for processing digital personal data based on consent, with rights for individuals and obligations on data fiduciaries.

View on RBI Website

RBI (NBFC – Know Your Customer) Directions, 2025

Establishes KYC, customer due diligence, and risk-based frameworks for NBFCs to prevent money laundering and ensure customer identity verification.

View on RBI Website

Digital Lending

RBI (Housing Finance Companies) Directions, 2025

Provides a comprehensive regulatory framework for HFCs covering registration, capital adequacy, asset classification, governance, and deposit-taking norms.

View on RBI Website

RBI (NBFC – Asset Liability Management) Directions, 2025

Comprehensive framework for NBFCs to manage liquidity, interest rate, and currency risks.

View on RBI Website

RBI (NBFC – Classification, Valuation and Operation of Investment Portfolio) Directions, 2025

Includes accounting standards, valuation norms, and governance via Board-approved investment policies.

View on RBI Website

RBI (NBFC – Income Recognition, Asset Classification and Provisioning) Directions, 2025

Lays down prudential norms for NBFCs on income recognition, asset classification (standard/NPA), and provisioning to ensure accurate reflection of credit risk.

View on RBI Website

RBI (NBFC – Managing Risks in Outsourcing) Directions, 2025

Provides a comprehensive framework for outsourcing by NBFCs, covering governance, risk management, service provider selection, and ongoing monitoring.

View on RBI Website

RBI (NBFC – Resolution of Stressed Assets) Directions, 2025

Provides a structured framework for early stress identification, resolution plans, restructuring, and inter-creditor coordination.

View on RBI Website

RBI (NBFC – Responsible Business Conduct) Directions, 2025

Sets standards for fair, transparent, and borrower-centric lending practices, including disclosures, charges, interest resets, and customer protection norms.

View on RBI Website

RBI (NBFC – Securitisation Transactions) Directions, 2025

Comprehensive framework for NBFCs to securitise standard loan assets, ensuring risk transfer, liquidity, and investor access while restricting risky structures.

View on RBI Website

RBI (NBFC – Transfer and Distribution of Credit Risk) Directions, 2025

Creates a unified framework for loan transfers, stressed asset sales, and co-lending models to improve liquidity and risk distribution.

View on RBI Website

RBI (NBFC – Treatment of Wilful Defaulters and Large Defaulters) Directions, 2025

Defines frameworks for identifying, classifying, preventing, and reporting wilful and large defaulters.

View on RBI Website

RBI (NBFCs – Acceptance of Public Deposits) Directions, 2025

Provides regulatory framework for NBFCs accepting public deposits; covers eligibility and restrictions on deposit acceptance, maintenance of liquid assets, etc.

View on RBI Website

RBI (NBFCs – Account Aggregator) Directions, 2025

Provides a framework for registration, governance, and operations of NBFC-AAs.

View on RBI Website

RBI (NBFCs – Acquisition of Shareholding or Control) Directions, 2025

Regulates changes in ownership and control of NBFCs; mandates prior RBI approval for acquisition beyond specified thresholds.

View on RBI Website

RBI (NBFCs – Branch Authorisation) Directions, 2025

Governs branch expansion for NBFCs, introducing a deemed approval and notification model instead of case-by-case approvals for most branches.

View on RBI Website

RBI (NBFCs - Concentration Risk Management) Directions, 2025

Introduces layer-based regulation, and prevents over-concentration of exposure to a single borrower/group.

View on RBI Website

RBI (NBFCs – Credit Cards: Issuance and Conduct) Directions, 2025

Defines roles for NBFC and credit card-issuer, data sharing and customer information flows, and risk management.

View on RBI Website

RBI (NBFCs – Credit Facilities) Directions, 2025

Comprehensive framework for NBFC lending activities; covers NBFC–LSP arrangements, and detailed norms on specific lending verticals

View on RBI Website

RBI (NBFCs – Credit Information Reporting) Directions, 2025

Defines how credit data is collected, shared, managed, and governed between NBFCs and credit bureaus.

View on RBI Website

RBI (NBFCs – Credit Risk Management) Directions, 2025

Establishes comprehensive framework for managing credit risk in NBFCs; includes board-approved policies, independent credit appraisal norms, restrictions on lending, etc.

View on RBI Website

RBI (NBFCs – Governance) Directions, 2025

Establishes corporate governance framework for NBFCs based on scale-based regulation (BL, ML, UL).

View on RBI Website

RBI (NBFCs - Internal Ombudsman) Directions, 2026

Strengthens internal grievance redressal mechanism of NBFCs, mandates appointment for independent IO and fully traceable complaints workflow.

View on RBI Website

RBI (NBFCs – Miscellaneous) Directions, 2025

Covers residual and cross-cutting regulatory instructions for NBFCs across layers, including specific provisions for NBFC-Factors, IDF-NBFCs, and others.

View on RBI Website

RBI (NBFCs – Peer to Peer Lending Platform) Directions, 2025

Provides a regulatory framework for NBFC-P2Ps covering registration, permissible activities, prudential norms, and governance.

View on RBI Website

RBI (NBFCs – Prudential Norms on Capital Adequacy) Directions, 2025

Establishes capital adequacy framework for NBFCs, including composition of regulatory capital (CET1, Tier 1, Tier 2), leverage ratio, risk-weighted assets, and ICAAP requirements (for upper layers).

View on RBI Website

RBI (NBFCs – Registration, Exemptions and Framework for Scale Based Regulation) Directions, 2025

Covers registration, classification, and prudential layering of NBFCs.

View on RBI Website

RBI (NBFCs – Undertaking of Financial Services) Directions, 2025

Governs the scope and conditions under which NBFCs can undertake financial services beyond core lending.

View on RBI Website

RBI (NBFCs – Voluntary Amalgamation) Directions, 2025

Establishes the regulatory framework for mergers involving NBFCs.

View on RBI Website

RBI (Standalone Primary Dealers) Directions, 2025

Provides a regulatory framework for SPDs covering registration, capital adequacy, governance, and permitted activities in government securities markets.

View on RBI Website

Payments

Framework for Outsourcing of Payment and Settlement-related Activities by Payment System Operators

Mandates that PSOs manage risks when outsourcing payment and settlement activities by adhering to minimum standards on governance, security, and oversight.

View on RBI Website

Master Direction – Reserve Bank of India (Bharat Bill Payment System) Directions, 2024

Streamlines bill payment ecosystem through a tiered structure (BBPCU, BBPOUs, agents), expands participation, standardises roles and settlement via escrow accounts, and strengthens consumer protection.

View on RBI Website

Master Direction on Regulation of Payment Aggregator (PA)

Comprehensive framework for regulation of Payment Aggregators (online, physical, and cross-border); covers authorisation, capital requirements, governance, merchant due diligence (KYC), escrow-based fund settlement, etc.

View on RBI Website

Master Directions on Access Criteria for Payment Systems

Establishes eligibility and access framework for banks and authorised PSPs to participate in payment systems (RTGS, NEFT, clearing houses).

View on RBI Website

Master Directions on Cyber Resilience and Digital Payment Security Controls for non-bank Payment System Operators

Establishes comprehensive cyber security and resilience framework for non-bank payment system operators.

View on RBI Website

Master Directions on Prepaid Payment Instruments (PPIs)

Comprehensive framework for issuance and operation of PPIs (wallets/cards) by banks and non-banks.

View on RBI Website

RBI (Authentication mechanisms for digital payment transactions) Directions, 2025

Establishes principles for secure authentication in digital payments; mandates minimum two-factor authentication (with one dynamic factor), and enables alternative authentication methods beyond OTP.

View on RBI Website