RBI data governance draft could push up compliance costs for banks

The Reserve Bank of India's (RBI) latest draft on data governance is set to force banks into a fresh round of compliance spending. The central bank has proposed stricter norms around data classification, storage, and reporting, aiming to bring uniformity and security to the vast amounts of financial data handled by lenders.

What the draft proposes

The draft framework requires banks to maintain a detailed data dictionary, classify data based on sensitivity, and ensure periodic audits of data quality. It also mandates that lenders have a clear data governance policy approved by their boards.

Banks will need to appoint a chief data officer (CDO) who will be responsible for implementing the policy. The CDO will report directly to the board or a board-level committee. The framework also pushes for standardised data formats to make regulatory reporting smoother.

Compliance costs on the rise

Industry sources indicate that meeting these norms will require significant investment in technology and manpower. Smaller banks, in particular, may feel the pinch as they upgrade legacy systems to handle the new requirements.

Experts suggest the spending could run into crores for many lenders. This includes costs for data classification tools, audit software, and training staff. Some banks may also need to hire additional data specialists, adding to salary bills.

"The intent is good, but the costs cannot be ignored," said a banking analyst. "Banks are already dealing with tight margins. Any extra compliance spending will hit profitability."

Why the RBI is acting

The RBI has been pushing for better data governance for years. Instances of data leaks and misreporting have prompted the central bank to tighten rules. The draft is part of a broader effort to make the financial system more resilient and trustworthy.

Regulators globally are moving in a similar direction. The European Union's General Data Protection Regulation (GDPR) and similar laws elsewhere have set benchmarks. The RBI wants Indian banks to match those standards.

The draft also aims to reduce the risk of data being misused or lost. With digital transactions growing rapidly, the volume of sensitive customer data held by banks has exploded. The RBI believes stricter governance is essential to protect that data.

What banks are saying

Bankers have not yet reacted publicly to the draft. However, informal feedback suggests mixed feelings. While most agree on the need for better data management, many are concerned about the timeline and costs.

A senior banker, speaking on condition of anonymity, said: "We are all for better data governance, but the RBI needs to give us enough time to comply. Implementing these changes will take at least two to three years."

Some lenders have already started investing in data governance. They may have a head start, but others will need to play catch-up. The RBI is expected to release the final framework after reviewing comments from stakeholders.

What happens next: The RBI will likely finalise the norms in the coming months. Banks will then have a set deadline to comply. Watch for the central bank's timeline — a shorter window could mean a bigger scramble and higher costs for lenders.