Skip to main content

Draft Directions on Outsourcing of Financial Services

Reserve Bank of India (RBI) had issued draft directions on managing risks and code of conduct in outsourcing of financial services.

What is the objective of the directions?

The purpose of the directions on 'managing risks and code of conduct in outsourcing of financial services' is to ensure that outsourcing arrangements neither diminish the ability of the regulated entity (RE) to fulfil its obligations to customers nor impede effective supervision by the supervisory authority. 

What is outsourcing?

“Outsourcing” refers to an RE’s use of a third party (either an affiliated entity within a group or an external entity) to perform activities that would normally be undertaken by the RE itself on a continuing basis, now or in the future.

‘Continuing basis’ would include agreements for a limited period. This means REs shall not enter into perpetual agreements.

What is material outsourcing?

“Material outsourcing arrangement” means an outsourcing arrangement which –

  • In the event of failure of service or breach of security, has the potential to either materially impact an RE’s –
    • business operations, reputation, strategies, or profitability; or
    • ability to manage risk and comply with applicable laws and regulations, or
  • In the event of any unauthorised access or disclosure, loss or theft of customer information, may have a material impact on the RE’s customers.

To whom will the directions be applicable?

The directions will be applicable to the following entities –

  • Commercial Banks [including Local Area Banks (LABs), Regional Rural Banks (RRBs), Payments Banks (PBs), and Small Finance Banks (SFBs)]
  • All-India Financial Institutions (AIFIs) [viz. Exim Bank, National Bank for Agriculture and Rural Development (NABARD), National Housing Bank (NHB), Small Industries Development Bank of India (SIDBI), and National Bank for Financing Infrastructure and Development (NaBFID)]
  • Non-Banking Financial Companies (NBFCs) including Housing Finance Companies (HFCs)
  • Urban Co-operative Banks (UCBs), State Co-operative Banks (StCBs), and Central Co-operative Banks (CCBs)
  • Credit Information Companies (CICs)

Which are the supervisory authorities?

Supervisory authorities include –

  • RBI in case of Commercial Banks (including LABs, PBs, SFBs, and UCBs), NBFCs, CICs, and AIFIs.
  • NABARD in case of StCBs, CCBs, and RRBs
  • NHB in case of HFCs

What are the major directions?

  • REs desirous of outsourcing of financial services shall not require prior approval from RBI. However, such arrangements shall be subject to on-site / off- site monitoring and inspection / scrutiny by the supervisory authority.
  • REs shall not outsource core management functions including policy formulation, decision-making functions like determining compliance with KYC norms, according sanction for loans (i.e. decision to lend shall be solely taken by the RE and the role of the service provider shall only be that of a facilitator), management of investment portfolio, compliance function, and internal audit function.
  • REs shall be responsible not only for the actions of their service provider but also of their sub-agents engaged in the context of outsourced activity. 
  • REs shall also be responsible for the confidentiality of customer information available with the service provider.
  • Access to customer information by staff of the service provider shall be on ‘need to know’ basis, i.e., limited to those areas where the information is required in order to perform the outsourced function.
  • The responsibility for redressal of customers’ grievances related to outsourced services shall rest with the RE. If a complainant does not get any reply from the RE within 30 days after the RE received the complaint or is not satisfied with the reply of the RE, he / she will have the following options for redressal of his / her grievances.
    • RBI’s Ombudsman in case of REs to which RBI’s Integrated Ombudsman Scheme, 2021 applies, or
    • Consumer Education and Protection Cell (CEPC) of respective Regional Office of RBI in case of RBI supervised REs to which RBI’s Integrated Ombudsman Scheme, 2021 does not apply, or
    • Grievance Redressal mechanism of the respective supervisory authority in case of REs supervised by an authority other than RBI.
  • REs shall ensure that the service provider shall neither impede / interfere with the ability of the RE to effectively oversee and manage its activities nor impede the supervisory authority in carrying out the supervisory functions and objectives.
  • In considering or renewing an outsourcing arrangement, REs shall undertake appropriate due diligence to assess the capability of the service provider to comply with obligations in the outsourcing agreement. 
  • The event of termination of any outsourcing agreement, on account of the below-mentioned reasons (indicative in nature), where the service provider deals with customers, shall be publicised by publishing in the leading local newspaper with sufficient circulation in the locality, displaying at a prominent place in the branches, and posting it on the RE’s website so as to ensure that the customers do not continue to deal with the service provider.
    • Fraud committed by the service provider
    • Leakage of information / data
    • Breach of confidentiality or code of conduct by the service provider
    • Blacklisting of the service provider by GoI, RBI, SEBI, or any other regulator / supervisory authority
  • If a service provider’s contract is terminated prematurely prior to the completion of the contracted period of service, on account of the reasons mentioned below (indicative in nature), Indian Banks' Association (IBA) / respective RBI-recognised Self-Regulatory Organizations (SROs) would have to be informed of the reasons for termination. IBA / respective RBI-recognised SROs would be maintaining a caution list of such service providers for sharing among themselves and the respective member REs.
    • Fraud committed by the service provider
    • Leakage of information / data
    • Breach of confidentiality or code of conduct by the service provider
    • Blacklisting of the service provider by GoI, RBI, SEBI, or any other regulator / supervisory authority
  • Some of the key risks in outsourcing that need to be evaluated by the REs are - Compliance Risk, Concentration and Systemic Risk, Contractual Risk, Counterparty Risk, Country Risk, Exit Strategy Risk, Legal Risk, Operational Risk, Reputation Risk, Strategic Risk.
What are the reporting requirements for REs?
  • REs shall immediately notify the supervisory authority in the event of any significant problems that have the potential to materially affect the outsourcing arrangement and, as a consequence, materially affect the business operations, profitability, reputation or strategies of the RE.
  • REs shall report all material financial outsourcing arrangements (including arrangements involving extensive data sharing across geographic locations as part of process outsourcing and when data pertaining to Indian operations are processed abroad) to the supervisory authority on a quarterly basis.
  • REs shall submit an Annual Compliance Certificate giving the particulars of outsourcing contracts, the prescribed periodicity of audit by internal / external auditor, major findings of the audit and action taken through the Board, to their respective supervisory authorities.

References

Reserve Bank of India. (2023, October 26). 'Draft Master Direction on Managing Risks and Code of Conduct in Outsourcing of Financial Services'. Retrieved from https://www.rbi.org.in/scripts/bs_viewcontent.aspx?Id=4334

Reserve Bank of India. (2023, October 26). 'RBI invites comments on draft Master Direction on Managing Risks and Code of Conduct in Outsourcing of Financial Services'. Retrieved from https://rbi.org.in/Scripts/BS_PressReleaseDisplay.aspx?prid=56630


Follow at - Telegram   Instagram   LinkedIn   X   Facebook

Labels:

Comments

Post a Comment

Popular Posts

Reserve Bank of India Act, 1934 – Part-II – Section 17 to 19

The Reserve Bank of India Act, 1934 provides the statutory basis of the functioning of the Reserve Bank of India (RBI). In a series of articles, we will briefly go through the provisions of RBI Act, 1934. This is the second article in the series.  Section 17 – Business which the Bank may transact RBI shall be authorized to carry on and transact the several kinds of business hereinafter specified, namely – 17(1) – Accept deposit without interest from the Central / State Government, local authorities, banks and any other persons. 17(1A) – Accept deposit, repayable with interest, from banks or any other person under the Standing Deposit Facility Scheme, as approved by the Central Board, for the purposes of liquidity management.   Bills of Exchange (B/E) & Promissory Note (PN) Bearing 2 or more good signatures, one of which shall be of B/E & PN arising out of Maturing within 17(2)(a) Purchase, sale and rediscou...
Post a Comment
Read more

Reserve Bank of India Act, 1934 – Part-I – Preamble and Section 1 to 13

The Reserve Bank of India Act, 1934 provides the statutory basis of the functioning of the Reserve Bank of India (RBI). In a series of articles, we will briefly go through the provisions of RBI Act, 1934. This is the first article in the series. Preamble of the Act RBI to – Regulate the issue of bank notes. Keep reserves for monetary stability in India. Operate currency and credit system of the country to its advantage. The primary objective of the monetary policy is to maintain price stability while keeping in mind the objective of growth. Chapter I – Preliminary Section 1 – Short title, extent and commencement 1(1) – This Act may be called the Reserve Bank of India Act, 1934. 1(2) – The Act extends to whole of India. Chapter II - Incorporation, Capital, Management and Business Section 3 – Establishment and incorporation of Reserve Bank 3(1) – RBI to take over management of the currency from the Central Government. 3(2) – RBI to have perpetual succession, common seal, and shall by...
Post a Comment
Read more

Reserve Bank of India Act, 1934 – Part-III – Section 20 to 40

The Reserve Bank of India Act, 1934 provides the statutory basis of the functioning of the Reserve Bank of India (RBI). In a series of articles, we will briefly go through the provisions of RBI Act, 1934. This is the third article in the series.  Chapter III - Central Banking Functions Section 20 – Obligation of the Bank to transact Government business RBI shall undertake – To accept monies for account of the Central Government and to make payments up to the amount standing to the credit of its account, and to carry out its exchange, remittance and other banking operations. Management of the public debt of the Union. Section 21 – Bank to have the right to transact Government business in India The Central Government shall entrust RBI with – All its money, remittance, exchange and banking transactions in India, and shall deposit free of interest all its cash balances with RBI. The Central Government may carry on money transactions at places where RBI has no branches or agencies and m...
Post a Comment
Read more

Reserve Bank of India Act, 1934 – Part-IV – Section 42 to 45

The Reserve Bank of India Act, 1934 provides the statutory basis of the functioning of the Reserve Bank of India (RBI). In a series of articles, we will briefly go through the provisions of RBI Act, 1934. This is the fourth article in the series.  Section 42 – Cash reserves of scheduled banks to be kept with the Bank 42(1) – Every bank included in the Second Schedule shall maintain with RBI an average daily balance at a percent (notified by RBI) of its total demand and time liabilities in India. 42(1A) – RBI may direct every scheduled bank to maintain with RBI, in addition to the balance prescribed under Section 42(1), an additional average daily balance at a rate (specified by RBI). 42(1C) – RBI may specify any transaction or class of transactions to be regarded as liability in India of a scheduled bank. If any question arises as to whether any transaction or class of transactions shall be regarded as liability in India of a schedule bank, the decision of RBI thereon shall be fina...
Post a Comment
Read more

Reserve Bank of India Act, 1934 – Part-V – Section 45B to 45JA

The Reserve Bank of India Act, 1934 provides the statutory basis of the functioning of the Reserve Bank of India (RBI). In a series of articles, we will briefly go through the provisions of RBI Act, 1934. This is the fifth article in the series.  Chapter IIIA - Collection and Furnishing of Credit Information Section 45B – Power of Bank to collect credit information RBI may collect credit information from banking companies and furnish it to any banking company in accordance with section 45D. Section 45C – Power to call for returns containing credit information RBI may direct any banking company to submit statements relating to credit information. Section 45D – Procedure for furnishing credit information to banking companies A banking company may apply to RBI to provide credit information. RBI shall furnish the requested credit information without disclosing the names of the banking companies which have submitted the information. RBI may levy fees of up to Rs.25 for furnishing credit...
Post a Comment
Read more