Skip to main content

What are restrictions on storage of actual card data?

Reserve Bank of India (RBI) restricts storage of actual card data [i.e. Card-on-File (CoF)] by non-bank payment aggregators and merchants.

What is Card-on-File (CoF)?

Card-on-file (CoF) is the storing of customer card and payment information by a merchant, i.e. keeping card information “on file”.

What are the guidelines on storage of actual card data [i.e. Card-on-File (CoF)]?

No entity in the card transaction / payment chain, other than the card issuers and / or card networks, shall store Card-on-File (CoF) data, and any such data stored previously shall be purged.

From when are the restrictions on storage of actual card data [i.e. Card-on-File (CoF)] applicable?

Reserve Bank of India (RBI) had periodically extended the deadline for effecting the restriction on storage of actual card data [i.e. Card-on-File (CoF)] from June 30, 2021 to September 30, 2022, taking into account the representations received from the stakeholders.

All entities, except card issuers and card networks, are required to purge the CoF data before October 01, 2022.

What relaxations are allowed for “guest checkout transactions”?

For ease of transition to an alternate system in respect of transactions where cardholders decide to enter the card details manually at the time of undertaking the transaction (commonly referred to as “guest checkout transactions”), the following are permitted as an interim measure –

  • Other than the card issuer and the card network, the merchant or its Payment Aggregator (PA) involved in settlement of such transactions, can save the CoF data for a maximum period of T+4 days (“T” being the transaction date) or till the settlement date, whichever is earlier. This data shall be used only for settlement of such transactions, and must be purged thereafter.
  • For handling other post-transaction activities, acquiring banks can continue to store CoF data until January 31, 2023.


References

Reserve Bank of India. (2020, March 17). 'Guidelines on Regulation of Payment Aggregators and Payment Gateways (Updated as on November 17, 2020)'. Retrieved from https://www.rbi.org.in/Scripts/NotificationUser.aspx?Id=11822&Mode=0

Reserve Bank of India. (2021, December 23). 'Restriction on storage of actual card data [i.e. Card-on-File (CoF)]'. Retrieved from https://www.rbi.org.in/Scripts/NotificationUser.aspx?Id=12211&Mode=0

Reserve Bank of India. (2022, June 24). 'Restriction on Storage of Actual Card Data [i.e. Card-on-File (CoF)]'. Retrieved from https://www.rbi.org.in/Scripts/NotificationUser.aspx?Id=12345&Mode=0

Reserve Bank of India. (2022, July 28). 'Restriction on Storage of Actual Card Data [i.e. Card-on-File (CoF)]'. Retrieved from https://www.rbi.org.in/Scripts/NotificationUser.aspx?Id=12363&Mode=0


Follow at - Telegram   Instagram   LinkedIn   Twitter

Labels:

Comments

Post a Comment

Popular Posts

Credit Cards and Debit Cards

Reserve Bank of India (RBI) has issued directions on issuance of credit cards and debit cards. To whom are the directions applicable? The directions are applicable to the following Regulated Entities (REs) – Commercial Banks  Small Finance Banks (SFBs) Regional Rural Banks (RRBs) Primary (Urban) Co-operative Banks (UCBs) Non-Banking Financial Companies (NBFCs) for all layers – NBFC-Investment and Credit Companies (NBFC-ICC) NBFC-Factor  NBFC-Micro Finance Institutions (NBFC-MFI)  Housing Finance Company (HFC)  What is a credit card? Credit Card is a physical / virtual payment instrument issued with a pre-approved revolving credit limit that can be used to purchase goods and services or draw cash advances. What is a debit card? Debit Card is a physical / virtual payment instrument linked to a Savings Bank / Current Account which can be used to withdraw cash, make online payments, do Point of Sale (PoS) terminal / Quick Response (QR) code transactions, fund transfer, e...
Post a Comment
Read more

Credit Derivatives

Reserve Bank of India (RBI) has issued directions on credit derivatives. What is Credit Derivative? Credit derivative means a derivative contract whose value is derived from the credit risk of an underlying debt instrument or an index of underlying debt instruments. What is Credit Default Swap (CDS) and Total Return Swap (TRS)? Credit Default Swap (CDS) means a credit derivative contract in which one counterparty (protection seller) commits to pay to the other counterparty (protection buyer) in the case of a credit event with respect to a reference entity and in return, the protection buyer makes periodic payments (premium) to the protection seller until the maturity of the contract or the credit event, whichever is earlier. Total Return Swap (TRS) means a credit derivative contract under which one counterparty (total return payer) commits to transfer the entire economic performance of a reference asset to the other counterparty (total return receiver), and, in return, receives a pre-d...
Post a Comment
Read more

Cash Reserve Ratio (CRR) and Statutory Liquidity Ratio (SLR)

Reserve Bank of India (RBI) has issued the directions on maintenance of Cash Reserve Ratio (CRR) and Statutory Liquidity Ratio (SLR) by banks. To whom are the directions applicable? The directions are applicable to the following Regulated Entities (REs) – Commercial Banks  Small Finance Banks (SFBs) Payments Banks (PBs) Local Area Banks (LABs) Regional Rural Banks (RRBs) Primary (Urban) Co-operative Banks (UCBs) Rural Co-operative Banks – State Co-operative Banks (StCBs) District Central Co-operative Banks (DCCBs) What is CRR? Every bank shall maintain in India by way of cash reserve, a sum equivalent to such percent of its Net Demand and Time Liabilities (NDTL) in India, as the RBI in terms of Section 42(1) of the RBI Act, 1934 (for scheduled banks) and Section 18(1) of the Banking Regulation Act (BR Act), 1949 (for non-scheduled banks) [including provisions of Section 18(1) of the BR Act as applicable to co-operative banks], may specify. What is incremental CRR? In terms of Secti...
Post a Comment
Read more

Special Rupee Vostro Accounts (SRVAs)

Reserve Bank of India (RBI) has consolidated the guidelines governing Special Rupee Vostro Accounts (SRVAs). Who can open and maintain Special Rupee Vostro Accounts (SRVAs)? Authorised Dealer (AD) banks in India may open Special Rupee Vostro Accounts (SRVAs) of its branch outside India or a bank resident outside India. Which transactions can be settled through SRVA? The settlement of cross-border trade transactions through SRVA is an additional arrangement for invoicing, payment and settlement of exports and imports in Indian Rupee (INR).  All permissible capital and current account transactions under Foreign Exchange Management Act (FEMA) may be settled through the SRVA.  AD banks maintaining SRVA are permitted to open additional current account for exporter / importer, exclusively for settlement of export / import transactions. What can be the source and use of funds in SRVA? SRVA may be funded by way of inward remittances or transfer from other repatriable INR accounts in t...
Post a Comment
Read more

Payment of Agency Commission to Agency Banks (ABs) and Disbursement of Government Pension by ABs

Reserve Bank of India (RBI) has issued guidelines on the conduct of Government business by Agency Banks (ABs), payment of agency commission to ABs and disbursement of Government pension by ABs. Who are ABs? ABs mean all Public Sector Banks (PSBs), scheduled Private Sector Banks (PVBs), scheduled Payments Banks (PBs), and scheduled Small Finance Banks (SFBs) appointed by the RBI under Section 45 of the RBI Act, 1934, by mutual agreement, to carry out Government banking business of the Central Government (CG) / State Governments (SGs). What is agency commission? Agency commission means the remuneration paid by the RBI to an AB in consideration of it acting as an agent of the RBI in the conduct of general banking business of the CG and the SGs at the places and in the manner specified in the agreement between the RBI and the bank, with the exception of the functions relating to the management of the public debt. What are the guidelines on appointment of ABs? Any eligible bank which intend...
Post a Comment
Read more