Skip to main content

What are restrictions on storage of actual card data?

Reserve Bank of India (RBI) restricts storage of actual card data [i.e. Card-on-File (CoF)] by non-bank payment aggregators and merchants.

What is Card-on-File (CoF)?

Card-on-file (CoF) is the storing of customer card and payment information by a merchant, i.e. keeping card information “on file”.

What are the guidelines on storage of actual card data [i.e. Card-on-File (CoF)]?

No entity in the card transaction / payment chain, other than the card issuers and / or card networks, shall store Card-on-File (CoF) data, and any such data stored previously shall be purged.

From when are the restrictions on storage of actual card data [i.e. Card-on-File (CoF)] applicable?

Reserve Bank of India (RBI) had periodically extended the deadline for effecting the restriction on storage of actual card data [i.e. Card-on-File (CoF)] from June 30, 2021 to September 30, 2022, taking into account the representations received from the stakeholders.

All entities, except card issuers and card networks, are required to purge the CoF data before October 01, 2022.

What relaxations are allowed for “guest checkout transactions”?

For ease of transition to an alternate system in respect of transactions where cardholders decide to enter the card details manually at the time of undertaking the transaction (commonly referred to as “guest checkout transactions”), the following are permitted as an interim measure –

  • Other than the card issuer and the card network, the merchant or its Payment Aggregator (PA) involved in settlement of such transactions, can save the CoF data for a maximum period of T+4 days (“T” being the transaction date) or till the settlement date, whichever is earlier. This data shall be used only for settlement of such transactions, and must be purged thereafter.
  • For handling other post-transaction activities, acquiring banks can continue to store CoF data until January 31, 2023.


References

Reserve Bank of India. (2020, March 17). 'Guidelines on Regulation of Payment Aggregators and Payment Gateways (Updated as on November 17, 2020)'. Retrieved from https://www.rbi.org.in/Scripts/NotificationUser.aspx?Id=11822&Mode=0

Reserve Bank of India. (2021, December 23). 'Restriction on storage of actual card data [i.e. Card-on-File (CoF)]'. Retrieved from https://www.rbi.org.in/Scripts/NotificationUser.aspx?Id=12211&Mode=0

Reserve Bank of India. (2022, June 24). 'Restriction on Storage of Actual Card Data [i.e. Card-on-File (CoF)]'. Retrieved from https://www.rbi.org.in/Scripts/NotificationUser.aspx?Id=12345&Mode=0

Reserve Bank of India. (2022, July 28). 'Restriction on Storage of Actual Card Data [i.e. Card-on-File (CoF)]'. Retrieved from https://www.rbi.org.in/Scripts/NotificationUser.aspx?Id=12363&Mode=0


Follow at - Telegram   Instagram   LinkedIn   Twitter

Labels:

Comments

Post a Comment

Popular Posts

Policies to be formulated by NBFC-BL

Non-Banking Financial Companies (NBFCs) are required to formulate various policies for effective corporate governance and operations. This article lists out some of the important policies to be formulated by the Base Layer NBFCs (NBFC-BL). Business Model Master Direction – Reserve Bank of India (Non-Banking Financial Company – Scale Based Regulation) Directions, 2023 dated October 19, 2023 Para 1.1 of Annex II – In view of the criticality of the nature of the business model in determining the classification of financial assets and restrictions on subsequent reclassification, NBFCs are advised to put in place Board approved policies that clearly articulate and document their business models and portfolios. Para 1.2 of Annex II – NBFCs shall frame their policy for sales out of amortised cost business model portfolios. Expected Credit Losses (ECL) Policy Master Direction – Reserve Bank of India (Non-Banking Financial Company – Scale Based Regulation) Directions, 2023 dated October 19, 202...
Post a Comment
Read more

Special Rupee Vostro Accounts (SRVAs)

Reserve Bank of India (RBI) has consolidated the guidelines governing Special Rupee Vostro Accounts (SRVAs). Who can open and maintain Special Rupee Vostro Accounts (SRVAs)? Authorised Dealer (AD) banks in India may open Special Rupee Vostro Accounts (SRVAs) of its branch outside India or a bank resident outside India. Which transactions can be settled through SRVA? The settlement of cross-border trade transactions through SRVA is an additional arrangement for invoicing, payment and settlement of exports and imports in Indian Rupee (INR).  All permissible capital and current account transactions under Foreign Exchange Management Act (FEMA) may be settled through the SRVA.  AD banks maintaining SRVA are permitted to open additional current account for exporter / importer, exclusively for settlement of export / import transactions. What can be the source and use of funds in SRVA? SRVA may be funded by way of inward remittances or transfer from other repatriable INR accounts in t...
Post a Comment
Read more

Cash Reserve Ratio (CRR) and Statutory Liquidity Ratio (SLR)

Reserve Bank of India (RBI) has issued the directions on maintenance of Cash Reserve Ratio (CRR) and Statutory Liquidity Ratio (SLR) by banks. To whom are the directions applicable? The directions are applicable to the following Regulated Entities (REs) – Commercial Banks  Small Finance Banks (SFBs) Payments Banks (PBs) Local Area Banks (LABs) Regional Rural Banks (RRBs) Primary (Urban) Co-operative Banks (UCBs) Rural Co-operative Banks – State Co-operative Banks (StCBs) District Central Co-operative Banks (DCCBs) What is CRR? Every bank shall maintain in India by way of cash reserve, a sum equivalent to such percent of its Net Demand and Time Liabilities (NDTL) in India, as the RBI in terms of Section 42(1) of the RBI Act, 1934 (for scheduled banks) and Section 18(1) of the Banking Regulation Act (BR Act), 1949 (for non-scheduled banks) [including provisions of Section 18(1) of the BR Act as applicable to co-operative banks], may specify. What is incremental CRR? In terms of Secti...
Post a Comment
Read more

Unique Transaction Identifier (UTI) for OTC Derivative Transactions

Reserve Bank of India (RBI) has issued directions on Unique Transaction Identifier (UTI) for over-the-counter (OTC) derivative transactions. What are the existing norms for reporting of OTC derivative transactions? At present, all transactions in OTC markets for rupee interest rate derivatives, forward contracts in Government securities, foreign currency derivatives, foreign currency interest rate derivatives, and credit derivatives are reported to the Trade Repository managed by Clearing Corporation of India Limited (CCIL-TR).  What are the directions on Unique Transaction Identifier (UTI) for OTC derivative transactions? Unique Transaction Identifier (UTI), a unique identifier assigned to an OTC derivative transaction, shall be generated / reported for all transactions in OTC derivatives market.  The directions shall be applicable to OTC derivative transactions entered into on or after January 01, 2027. UTI shall be generated in accordance with the UTI Technical Guidanc...
Post a Comment
Read more

Committees to be constituted by NBFC-BL

Non-Banking Financial Companies (NBFCs) are required to constitute various committees for effective corporate governance. This article lists out some of the important committees to be constituted by the Base Layer NBFCs (NBFC-BL). Board of Directors Applicability Companies Act, 2013 Section 149(1) – Every company shall have a Board of Directors. Composition of the Board Companies Act, 2013 Section 149(1) – The Board of Directors shall consist of individuals as directors – Public company – minimum 3 directors Private company – minimum 2 directors One Person Company – minimum 1 director  Maximum 15 directors (more than 15 directors may be appointed after passing a special resolution) Section 149(4) – Every listed public company shall have at least 1/3rd of the total number of directors as independent directors. Companies (Appointment and Qualifications of Directors) Rules, 2014 Rule 3 – The following companies shall appoint at least 1 woman director – Every listed company Every other...
Post a Comment
Read more