Skip to main content

Draft Directions on Outsourcing of Financial Services

Reserve Bank of India (RBI) had issued draft directions on managing risks and code of conduct in outsourcing of financial services.

What is the objective of the directions?

The purpose of the directions on 'managing risks and code of conduct in outsourcing of financial services' is to ensure that outsourcing arrangements neither diminish the ability of the regulated entity (RE) to fulfil its obligations to customers nor impede effective supervision by the supervisory authority. 

What is outsourcing?

“Outsourcing” refers to an RE’s use of a third party (either an affiliated entity within a group or an external entity) to perform activities that would normally be undertaken by the RE itself on a continuing basis, now or in the future.

‘Continuing basis’ would include agreements for a limited period. This means REs shall not enter into perpetual agreements.

What is material outsourcing?

“Material outsourcing arrangement” means an outsourcing arrangement which –

  • In the event of failure of service or breach of security, has the potential to either materially impact an RE’s –
    • business operations, reputation, strategies, or profitability; or
    • ability to manage risk and comply with applicable laws and regulations, or
  • In the event of any unauthorised access or disclosure, loss or theft of customer information, may have a material impact on the RE’s customers.

To whom will the directions be applicable?

The directions will be applicable to the following entities –

  • Commercial Banks [including Local Area Banks (LABs), Regional Rural Banks (RRBs), Payments Banks (PBs), and Small Finance Banks (SFBs)]
  • All-India Financial Institutions (AIFIs) [viz. Exim Bank, National Bank for Agriculture and Rural Development (NABARD), National Housing Bank (NHB), Small Industries Development Bank of India (SIDBI), and National Bank for Financing Infrastructure and Development (NaBFID)]
  • Non-Banking Financial Companies (NBFCs) including Housing Finance Companies (HFCs)
  • Urban Co-operative Banks (UCBs), State Co-operative Banks (StCBs), and Central Co-operative Banks (CCBs)
  • Credit Information Companies (CICs)

Which are the supervisory authorities?

Supervisory authorities include –

  • RBI in case of Commercial Banks (including LABs, PBs, SFBs, and UCBs), NBFCs, CICs, and AIFIs.
  • NABARD in case of StCBs, CCBs, and RRBs
  • NHB in case of HFCs

What are the major directions?

  • REs desirous of outsourcing of financial services shall not require prior approval from RBI. However, such arrangements shall be subject to on-site / off- site monitoring and inspection / scrutiny by the supervisory authority.
  • REs shall not outsource core management functions including policy formulation, decision-making functions like determining compliance with KYC norms, according sanction for loans (i.e. decision to lend shall be solely taken by the RE and the role of the service provider shall only be that of a facilitator), management of investment portfolio, compliance function, and internal audit function.
  • REs shall be responsible not only for the actions of their service provider but also of their sub-agents engaged in the context of outsourced activity. 
  • REs shall also be responsible for the confidentiality of customer information available with the service provider.
  • Access to customer information by staff of the service provider shall be on ‘need to know’ basis, i.e., limited to those areas where the information is required in order to perform the outsourced function.
  • The responsibility for redressal of customers’ grievances related to outsourced services shall rest with the RE. If a complainant does not get any reply from the RE within 30 days after the RE received the complaint or is not satisfied with the reply of the RE, he / she will have the following options for redressal of his / her grievances.
    • RBI’s Ombudsman in case of REs to which RBI’s Integrated Ombudsman Scheme, 2021 applies, or
    • Consumer Education and Protection Cell (CEPC) of respective Regional Office of RBI in case of RBI supervised REs to which RBI’s Integrated Ombudsman Scheme, 2021 does not apply, or
    • Grievance Redressal mechanism of the respective supervisory authority in case of REs supervised by an authority other than RBI.
  • REs shall ensure that the service provider shall neither impede / interfere with the ability of the RE to effectively oversee and manage its activities nor impede the supervisory authority in carrying out the supervisory functions and objectives.
  • In considering or renewing an outsourcing arrangement, REs shall undertake appropriate due diligence to assess the capability of the service provider to comply with obligations in the outsourcing agreement. 
  • The event of termination of any outsourcing agreement, on account of the below-mentioned reasons (indicative in nature), where the service provider deals with customers, shall be publicised by publishing in the leading local newspaper with sufficient circulation in the locality, displaying at a prominent place in the branches, and posting it on the RE’s website so as to ensure that the customers do not continue to deal with the service provider.
    • Fraud committed by the service provider
    • Leakage of information / data
    • Breach of confidentiality or code of conduct by the service provider
    • Blacklisting of the service provider by GoI, RBI, SEBI, or any other regulator / supervisory authority
  • If a service provider’s contract is terminated prematurely prior to the completion of the contracted period of service, on account of the reasons mentioned below (indicative in nature), Indian Banks' Association (IBA) / respective RBI-recognised Self-Regulatory Organizations (SROs) would have to be informed of the reasons for termination. IBA / respective RBI-recognised SROs would be maintaining a caution list of such service providers for sharing among themselves and the respective member REs.
    • Fraud committed by the service provider
    • Leakage of information / data
    • Breach of confidentiality or code of conduct by the service provider
    • Blacklisting of the service provider by GoI, RBI, SEBI, or any other regulator / supervisory authority
  • Some of the key risks in outsourcing that need to be evaluated by the REs are - Compliance Risk, Concentration and Systemic Risk, Contractual Risk, Counterparty Risk, Country Risk, Exit Strategy Risk, Legal Risk, Operational Risk, Reputation Risk, Strategic Risk.
What are the reporting requirements for REs?
  • REs shall immediately notify the supervisory authority in the event of any significant problems that have the potential to materially affect the outsourcing arrangement and, as a consequence, materially affect the business operations, profitability, reputation or strategies of the RE.
  • REs shall report all material financial outsourcing arrangements (including arrangements involving extensive data sharing across geographic locations as part of process outsourcing and when data pertaining to Indian operations are processed abroad) to the supervisory authority on a quarterly basis.
  • REs shall submit an Annual Compliance Certificate giving the particulars of outsourcing contracts, the prescribed periodicity of audit by internal / external auditor, major findings of the audit and action taken through the Board, to their respective supervisory authorities.

References

Reserve Bank of India. (2023, October 26). 'Draft Master Direction on Managing Risks and Code of Conduct in Outsourcing of Financial Services'. Retrieved from https://www.rbi.org.in/scripts/bs_viewcontent.aspx?Id=4334

Reserve Bank of India. (2023, October 26). 'RBI invites comments on draft Master Direction on Managing Risks and Code of Conduct in Outsourcing of Financial Services'. Retrieved from https://rbi.org.in/Scripts/BS_PressReleaseDisplay.aspx?prid=56630


Follow at - Telegram   Instagram   LinkedIn   X   Facebook

Labels:

Comments

Post a Comment

Popular Posts

Highlights of RBI Annual Report 2025-26 – Chapter 1 to 3

Reserve Bank of India (RBI) has published its annual report for the financial year 2025-26. In a series of articles, we will go through the highlights of the report. This is the first article in the series.  Legal framework for publication of Annual Report by the RBI Report of the Central Board of Directors on the working of RBI for the year is submitted to the Central Government in terms of Section 53(2) of the RBI Act, 1934. The letter of transmittal is signed by the RBI Governor and addressed to the Finance Secretary, Ministry of Finance, Government of India. Documents submitted by the RBI to the Central Government In pursuance of Section 53(2) of the RBI Act, 1934, the following documents have been submitted to the Central Government – A copy of the Annual Accounts for the year ended March 31, 2026 certified by the RBI’s Auditors and signed by Chief General Manager-in-charge, all the Deputy Governors and Governor. 2 copies of the Annual Report of the Central Board on the workin...
Post a Comment
Read more

Credit Facilities – Lending against Gold and Silver Collateral

Reserve Bank of India (RBI) has issued directions on credit facilities offered by various regulated entities. This article summarises the directions applicable to lending against gold and silver collateral. To whom are the directions applicable? The directions are applicable to the following Regulated Entities (REs) – Commercial Banks  Small Finance Banks (SFBs) Local Area Banks (LABs) Regional Rural Banks (RRBs) Primary (Urban) Co-operative Banks (UCBs) Rural Co-operative Banks – State Co-operative Banks (StCBs) Central Co-operative Banks (CCBs) Non-Banking Financial Companies (NBFCs) for all layers – Deposit taking NBFC (NBFC-D) NBFC-Investment and Credit Companies (NBFC-ICC) NBFC-Factor  NBFC-Micro Finance Institutions (NBFC-MFI)  NBFC-Infrastructure Finance Company (NBFC-IFC)  Infrastructure Debt Fund-NBFC (IDF-NBFC)  Housing Finance Company (HFC)  To whom are the directions partially applicable? The prudential regulations are not applicable to ‘NBFCs-B...
Post a Comment
Read more

Credit Facilities – Digital Lending Guidelines

Reserve Bank of India (RBI) has issued directions on credit facilities offered by various regulated entities. This article summarises the directions applicable to digital lending. To whom are the directions applicable? The directions are applicable to the following Regulated Entities (REs) – Commercial Banks  Small Finance Banks (SFBs) Local Area Banks (LABs) Regional Rural Banks (RRBs) Primary (Urban) Co-operative Banks (UCBs) Rural Co-operative Banks – State Co-operative Banks (StCBs) Central Co-operative Banks (CCBs) All India Financial Institutions (AIFIs) regulated by RBI – Export Import Bank of India (EXIM Bank) National Bank for Agriculture and Rural Development (NABARD) National Housing Bank (NHB) Small Industries Development Bank of India (SIDBI) National Bank for Financing Infrastructure and Development (NaBFID) Non-Banking Financial Companies (NBFCs) for all layers – Deposit taking NBFC (NBFC-D) NBFC-Investment and Credit Companies (NBFC-ICC) NBFC-Factor  NBFC-Micro...
Post a Comment
Read more

Credit Facilities – Finance to Non-Banking Financial Companies (NBFCs)

Reserve Bank of India (RBI) has issued directions on credit facilities offered by various regulated entities. This article summarises the directions applicable in respect of finance to Non-Banking Financial Companies (NBFCs). To whom are the directions applicable? The directions are applicable to the following Regulated Entities (REs) – Commercial Banks  Small Finance Banks (SFBs) Primary (Urban) Co-operative Banks (UCBs) All India Financial Institutions (AIFIs) regulated by RBI – Export Import Bank of India (EXIM Bank) National Bank for Agriculture and Rural Development (NABARD) National Housing Bank (NHB) Small Industries Development Bank of India (SIDBI) National Bank for Financing Infrastructure and Development (NaBFID) What are the conditions on finance to NBFCs? Commercial Banks and SFBs The bank shall extend need based working capital facilities as well as term loans to NBFCs registered with the RBI and engaged in infrastructure financing, equipment leasing, hire-purchase, l...
Post a Comment
Read more

Credit Facilities – Gold Metal Loans

Reserve Bank of India (RBI) has issued directions on credit facilities offered by various regulated entities. This article summarises the directions applicable to gold metal loans. To whom are the directions applicable? The directions are applicable to the following Regulated Entities (REs) – Commercial Banks  Small Finance Banks (SFBs) What is Gold Metal Loans’ (GML)? Gold Metal Loans (GML) mean loans extended by eligible banks to specified borrowers in the form of gold metal. GMS-linked GML – means GML extended by designated banks under the Gold Monetization Scheme, 2015 (GMS), utilising – (i) the gold deposit accepted by them as Short-term Bank Deposit under the GMS, or (ii) gold borrowed from other designated banks under GMS, and where the repayment can be either in gold or in cash or in a combination of both. Import-linked GML – means GML extended by nominated banks authorized to import gold, where the source of gold metal lent is gold imported by them, and where repayment h...
Post a Comment
Read more