Get All Access for $5/mo

RBI Issues Clarification on Data Localisation: Can Payments Industry Breathe at Ease? For transaction that is processed abroad, the data should be deleted from the systems and needs be brought back to India within 24 hours

By Vanita D'souza

Opinions expressed by Entrepreneur contributors are their own.

You're reading Entrepreneur India, an international franchise of Entrepreneur Media.


Issuing a clarification on the directive related to data localisation, the Reserve Bank of India (RBI) said all payments-related data must be stored in India, however, under special circumstances, a copy of the data can be stored abroad.

An RBI statement said, "For cross border transaction data, consisting of a foreign component and a domestic component, a copy of the domestic component may also be stored abroad if required." The central bank further explained that there is no bar on the processing of payment transactions outside India, however, the data shall be stored only in India after the processing which should include complete end-to-end transaction details.

For a transaction that is processed abroad, the data should be deleted from the systems and needs to be brought back to India within one business day or 24 hours after the process is completed. Having said, in case of settlement-related issues and other disputes, the data can be accessed anytime from India.

Additionally, in the case of foreign banks, they can store banking data abroad but domestic payment transaction data should be stored in India whereas, for cross border payment transactions, the data may also be stored abroad.

"The data should include end-to-end transaction details and information pertaining to payment or settlement transaction that is gathered/transmitted/processed as part of a payment message/instruction," the apex bank clarified. This data also includes customer data, payment sensitive data, payment credentials and transaction data.

So Far, So Good

Last year, in April, the banking regulator notified all the payment processing entities to start storing data in India. "All system providers shall ensure that the entire data relating to payment systems operated by them are stored in a system only in India," the RBI directive said. The service providers were given six months to execute this.

Talking about the data localisation norms, Abhishek Ray, Head Legal, ePayLater agrees with RBI's terms and supports the intent behind the measures announced.

"Data privacy and security deserve utmost attention of one and all, and the RBI taking concrete steps in this direction with crystal clear requirements from the industry helps retain the focus in addition to compliance. We believe such steps would also prepare India Inc., especially startups to design systems that are congruent with global best practices, and would boost investor confidence in the near term and ensure customer trust," he said.

Previously, the payment industry has expressed its concern related to data localisation citing innovation and customer experience-related limitations. Since then the industry has been perusing RBI to soften its outlook on data storage, however, the regulator has been showing a strong stance as a security measure.

However, clarification on cross border payments come as a relief to the industry.

Bhavin Patel from LenDenClub says RBI has made a good case out of the queries raised by payment players on data localisation. This FAQ answers the majority of the answers and removes a lot of ambiguity around the guideline. However, there are some queries revolving around data to be brought back to India within 24 hours.

"I think it's a very reasonable proposition by RBI. They have allowed players who are in overseas payment operations to use their systems and bring that data back to India so that India can fetch that data if needed in future. However, the government has allowed payment companies to share data with any other regulator if required. There are various global regulators who have set a different kind of guidelines for financial transactions incurred in their country. India is following global developed peers. Summarizing today's FAQ release, its a good step towards making things clarified and clear to all operators," he added.

Vanita D'souza

Former Senior Correspondent, Entrepreneur India

I am a Mumbai-based journalist and have worked with media companies like The Dollar Business Magazine, Business Standard, etc.While on the other side, I am an avid reader who is a travel freak and has accepted foodism as my religion.


ChatGPT is Becoming More Human-Like. Here's How The Tool is Getting Smarter at Replicating Your Voice, Brand and Personality.

AI can be instrumental in building your brand and boosting awareness, but the right approach is critical. A custom GPT delivers tailored collateral based on your ethos, personality and unique positioning factors.

Data & Recovery

10 Smart Ways to Earn or Build Backlinks to Your Website

Ever heard of the "broken-link building method"? We hadn't, either. But it sure sounds useful.

Business News

Is the AI Industry Consolidating? Hugging Face CEO Says More AI Entrepreneurs Are Looking to Be Acquired

Clément Delangue, the CEO of Hugging Face, a $4.5 billion startup, says he gets at least 10 acquisition requests a week and it's "increased quite a lot."

Growth Strategies

AMD Confident About Increasing Market Share In India

The semiconductor company is positive about the business environment in India on the back of growing investments in data centers and AI, Cloud repatriation, as well as technology refresh taking place across companies on both server side and client devices

Business News

Apple Reportedly Isn't Paying OpenAI to Use ChatGPT in iPhones

The next big iPhone update brings ChatGPT directly to Apple devices.

News and Trends

Apple Dethrones Nvidia to Regain Its Position as World's Second Most Valuable Company

Apple has reclaimed its spot as the second most valuable company in the world, overtaking Nvidia, with a market cap of $3.26 trillion.