RBI proposes Board-led data governance framework for banks, mandates 'Single Source of Truth'

The Reserve Bank of India (RBI) has proposed a new data governance framework for banks, placing the onus squarely on their boards. The central bank wants lenders to create a board-level committee to oversee data management. A key requirement: every piece of data must trace back to a single, authoritative source.

The proposal, released for public comment, marks a significant shift in how the regulator views data integrity. Banks have long struggled with fragmented data systems, where different departments report conflicting numbers. The RBI's answer is a 'Single Source of Truth'—one master record for each data point.

What the framework demands

Under the proposed rules, every bank must set up a Data Governance Committee at the board level. This committee will be responsible for approving data policies, ensuring data quality, and overseeing compliance. The framework also requires banks to appoint a Chief Data Officer, who will report directly to the committee.

The mandate extends to all data generated or used by the bank, including customer information, transaction records, and internal operational data. Banks must document how data flows between systems and ensure that any changes to the master source are logged and auditable.

Why the RBI is acting now

Regulatory sources indicate that the RBI has observed recurring discrepancies in data submitted by banks during inspections. Inaccurate or inconsistent data can mask financial stress, hinder risk assessment, and delay corrective action. The new framework is designed to fix these gaps at the root.

The move also aligns with global best practices. Banking regulators in jurisdictions like the UK and Singapore have already implemented similar data governance mandates. The RBI's proposal brings Indian banks in line with these international standards, particularly in areas like data lineage and metadata management.

Implementation timeline and compliance

The RBI has proposed a phased implementation. Large banks—those with assets over Rs 50,000 crore—will have 12 months to comply after the final notification. Smaller lenders get 18 months. The central bank has invited feedback from stakeholders, including banks, industry bodies, and technology vendors, with a 30-day comment period.

Banks that fail to meet the requirements could face penalties, including restrictions on new business lines or higher capital charges. The RBI has made it clear that data governance is no longer optional—it is a core regulatory expectation.

Challenges ahead for lenders

Implementing a single source of truth is easier said than done. Many Indian banks still rely on legacy systems that do not talk to each other. Data is often stored in silos—one for retail banking, another for corporate loans, and yet another for treasury operations. Untangling these systems will require significant investment in technology and training.

Smaller banks may find the cost prohibitive. Industry estimates suggest that a full-scale data governance overhaul could cost anywhere from Rs 50 crore to Rs 200 crore for a mid-sized bank. However, the RBI has indicated that it will consider the cost-benefit ratio for such lenders during the consultation process.

The proposal is expected to be finalised by the end of 2026. Once notified, banks will have a clear deadline to clean up their data act. For the industry, the message is unambiguous: accurate, board-verified data is now a regulatory bedrock.