RBI Proposes Strict Data Governance Rules for Banks, NBFCs

RBI’s New Data Rules Aim to Plug Reporting Gaps

The Reserve Bank of India (RBI) has circulated a draft framework on data governance for commercial banks and non-banking financial companies (NBFCs). The proposed rules are designed to ensure that financial institutions maintain accurate, consistent, and auditable data.

The central bank's move follows repeated instances of data discrepancies and reporting lapses in the financial sector. Under the new framework, lenders will have to appoint a Chief Data Officer (CDO) and set up a dedicated data governance committee at the board level.

Key Requirements for Banks and NBFCs

The draft mandates that every regulated entity must define clear data ownership and data stewardship roles. The CDO will be responsible for the overall data governance framework, including data quality, data lineage, and compliance with regulatory reporting standards.

Institutions will also need to maintain a data dictionary and a data quality scorecard. The RBI wants lenders to put in place systems that can trace data from its origin to its final use in reports. This is expected to reduce errors and make audits smoother.

The rules apply to all scheduled commercial banks, including regional rural banks, as well as all NBFCs. Small finance banks and payment banks will also have to comply.

Quarterly Compliance Reports

Under the draft, banks and NBFCs must submit a quarterly data governance compliance report to the RBI. The report should detail any data quality issues, steps taken to resolve them, and updates on the institution’s data governance maturity.

The board-level committee will have to review these reports and ensure that the data used for regulatory submissions is accurate and complete. Non-compliance could invite regulatory action, though the RBI has not specified penalties in the draft.

Why the RBI is Tightening Norms

Data integrity has become a priority for the RBI after several instances where lenders submitted incorrect or inconsistent data. Inaccurate data can distort the central bank’s assessment of financial stability and risk exposure.

The draft framework also aligns with global best practices on data governance, such as the Basel Committee’s principles for effective risk data aggregation. The RBI wants Indian financial institutions to be ready for more data-intensive supervision in the future.

Industry experts say the move will increase compliance costs initially but will improve trust in the system over time. Smaller NBFCs, in particular, may find it challenging to set up the required infrastructure and appoint a CDO.

Next Steps

The RBI has invited public comments on the draft rules until August 15, 2026. After reviewing feedback, the central bank will issue the final circular with an implementation timeline.

Banks and NBFCs will need to start preparing now if they want to meet the new standards without last-minute rush.