RRBs: KYC/AML Record Retention Extended to 10 Years
Current · Source: Reserve Bank of India · RBI/2009-10/171 · issued 29 Sep 2009 · ~2 min read
Quick answerRBI mandates Regional Rural Banks to retain transaction records for 10 years from transaction date and customer identification records for 10 years after account closure, aligning with PMLA 2009 amendments.
The rule, in the simplest words
RRBs must keep transaction records for at least 10 years from the transaction date.
Customer identification documents must be preserved for at least 10 years after the business relationship ends.
Senior management approval is required for continuing accounts of Politically Exposed Persons (PEPs) with enhanced monitoring.
How it plays out — a real example
A KYC & compliance officer in Indore, Mr. Kumar, ensures that all transaction records for a customer's gold loan are preserved for 10 years from the transaction date. He also verifies the customer's identification documents, such as their PAN card and passport, and preserves them for 10 years after the business relationship ends. If the customer becomes a PEP, Mr. Kumar requires senior management approval to continue the account with enhanced monitoring.
What changed
The Prevention of Money Laundering (Amendment) Act, 2009, effective June 1, 2009, extended record retention periods. RRBs must now keep transaction records for 10 years from the transaction date (previously shorter) and customer identification records for 10 years after business relationship ends. This modifies earlier circulars from 2005 and 2006.
What it means for you
RRBs must update their record-keeping systems to comply with the new 10-year retention mandates, ensuring all transaction and identity documents are preserved for legal evidence. The Principal Officer must have timely access to this data and report independently to senior management or the board. Enhanced due diligence for Politically Exposed Persons (PEPs) now requires senior management approval if a customer becomes a PEP post-account opening.
What you must do
Retain all transaction records (domestic and international) for at least 10 years from the transaction date, as per PMLA Rules.
Preserve customer identification documents (e.g., passports, PAN cards) for at least 10 years after the business relationship ends.
Update internal policies to require senior management approval for continuing accounts where customers become PEPs, with enhanced monitoring.
Ensure the Principal Officer has independent, timely access to all KYC/AML data and reports directly to senior management or the board.
Who it affects
Regional Rural Banks (RRBs), Principal Officers of RRBs, Senior management and board of RRBs, Compliance and AML teams at RRBs
Built from our lineage records — each fact carries its provenance; missing history simply is not shown (never guessed).
What is the new record retention period for transaction records under PMLA 2009?
RRBs must maintain all necessary transaction records for at least 10 years from the date of each transaction, as per Section 12(2)(a) of the PMLA 2009.
How should RRBs handle accounts of customers who become Politically Exposed Persons (PEPs) after account opening?
If an existing customer or beneficial owner becomes a PEP, RRBs must obtain senior management approval to continue the relationship and apply enhanced due diligence measures, including ongoing monitoring.
What are the responsibilities of the Principal Officer under this circular?
The Principal Officer must have timely access to customer identification data, transaction records, and other relevant information, and must act independently, reporting directly to senior management or the board.
📜 This document’s life story (1 recorded event, each backed by RBI’s own words)
RBI’s words: “RPCD.CO.RRB.BC.NO. 27/03.05.33(E)/2009-10 dated September 29,2009 on Know Your Customer”
📜 Read the original circular — full text as issued by RBI
RBI/2009-10/171
RPCD.CO.RRB.BC.No. 27 / 03.05.33(E)/2009-10
September 29, 2009
The Chairman
All Regional Rural Banks
Dear Sir,
Know Your Customer (KYC) Norms / Anti-Money Laundering (AML)
Standards and obligation of Regional Rural Banks (RRBS) under
PMLA, 2002
-----------------------------------------------------------------------------------
Please refer to our circulars RPCD.No.RRB.BC.81/03.05.33 (E) / 2004-05 dated February 18, 2005 and RPCD. CO.RRB.AML.BC.68/03.05.33 (E) / 2005-06 dated March 9, 2006 on the captioned subject.
2. The Prevention of Money Laundering (Amendment) Act, 2009 (No. 21 of 2009) has come into force with effect from June 01, 2009 as notified by the Government. In terms of Sub-Section 2(a) of Section 12 of The Prevention of Money Laundering (Amendment) Act, 2009 (PMLA, 2009), the records referred to in clause (a) of Sub-Section (1) of Section 12 shall be maintained for a period of ten years from the date of transaction between the clients and the banking company and in terms of Sub-Section 2(b) of Section 12 of the Act ibid , the records referred to in clause (c) of Sub-Section (1) of Section 12 shall be maintained for a period of ten years from the date of cessation of transaction between the clients and the banking company.
3. Accordingly, in modification of paragraph 5 of our circular dated March 9, 2006, RRBs are advised to maintain for at least ten years from the date of transaction between the bank and the client, all necessary records of transactions referred to at Rule 3 of the Prevention of Money-Laundering (Maintenance of Records of the Nature and Value of Transactions, the Procedure and Manner of Maintaining and Time for Furnishing Information and Verification and Maintenance of Records of the Identity of the Clients of the Banking Companies, Financial Institutions and Intermediaries) Rules, 2005 (PMLA Rules), both domestic or international, which will permit reconstruction of individual transactions (including the amounts and types of currency involved, if any) so as to provide, if necessary, evidence for prosecution of persons involved in criminal activity.
4. However, records pertaining to the identification of the customer and his address (e.g. copies of documents like passports, identity cards, driving licenses, PAN card, utility bills etc.) obtained while opening the account and during the course of business relationship, as indicated in paragraph 5 of the above said circular dated March 9, 2006, would continue to be preserved for at least ten years after the business relationship is ended as required under Rule 10 of the Rules ibid .
Accounts of Politically Exposed Persons
5. Detailed guidelines on customer due diligence (CDD) measures to be made applicable to Politically Exposed Person (PEP) and their family members or close relatives are contained in Annex-I to our circular dated February 18, 2005 referred to above. It is further advised that in the event of an existing customer or the beneficial owner of an existing account, subsequently becoming a PEP, RRBs should obtain senior management approval to continue the business relationship and subject the account to the CDD measures as applicable to the customers of PEP category including enhanced monitoring on an ongoing basis.
Principal Officer
6. RRBs were advised vide paragraph 9 of the guidelines on ‘Know Your Customer’ Norms and Anti-Money Laundering measures enclosed to the circular dated February 18, 2005 referred to above that RRBs should appoint a senior management officer to be designated as Principal Officer and the role and responsibilities of the Principal Officer have been detailed therein. With a view to enable the Principal Officer to discharge his responsibilities, it is advised that the Principal Officer and other appropriate staff should have timely access to customer identification data and other CDD information, transaction records and other relevant information. Further, RRBs should ensure that the Principal Officer is able to act independently and report directly to the senior management or to the Board of Directors.
Yours faithfully,
(R.C.Sarangi)
Chief General Manager
Reproduced for reference with acknowledgment — Source: Reserve Bank of India · RBI/2009-10/171 · issued 29 Sep 2009. The plain-English explanation above is BankPulse’s own independent summary.
Example: if you are a Compliance officer at a bank this circular applies to (Regional Rural Banks (RRBs), Principal Officers of RRBs, Senior management and board of RRBs, Compliance and AML teams at RRBs), your first concrete step on “RRBs: KYC/AML Record Retention Extended to 10 Years” is: “Retain all transaction records (domestic and international) for at least 10 years from the transaction date, as per PMLA Rules.” (RBI issued this 29 Sep 2009).
Circular: RBI/2009-10/171 -- RRBs: KYC/AML Record Retention Extended to 10 Years
Issued: 29 Sep 2009
Action required: Retain all transaction records (domestic and international) for at least 10 years from the transaction date, as per PMLA Rules.
Action required: Preserve customer identification documents (e.g., passports, PAN cards) for at least 10 years after the business relationship ends.
Action required: Update internal policies to require senior management approval for continuing accounts where customers become PEPs, with enhanced monitoring.
Action required: Ensure the Principal Officer has independent, timely access to all KYC/AML data and reports directly to senior management or the board.
Owner: ____________ Target date: ____________
Board/committee approval needed? Y / N
Evidence filed in compliance register on: ____________
Built only from this circular’s own published fields — not legal advice; always confirm against the official RBI source.
💬 Banker Discussion
Discuss this circular with fellow bankers — reply, upvote what helps, report what doesn’t belong. Be professional; no client data. Views are the commenter’s own, not BankPulse’s.
BankPulse Compliance Evidence Pack — generated 03 Aug 2026 · status cross-checked against RBI’s official withdrawal register (refreshed weekly). Official RBI source: https://www.rbi.org.in/Scripts/NotificationUser.aspx?Id=5291&Mode=0 — Plain-English summary by BankPulse (bankpulse.ai), reviewed by our expert reviewer, CA Amit Jain. Independent platform, not affiliated with the Reserve Bank of India; is our own plain-English paraphrase, not RBI’s original wording.
Help us keep this accurate
Found an inaccuracy or have an improvement? Tell us. Every report is reviewed by our team before any change is made — nothing goes live unverified.
Public beta — plain-English informational summaries. Always verify against the official RBI source (circular number cited on every page) before making compliance, credit, treasury, audit, or operational decisions. · Join our WhatsApp channel ↗
BANKPULSE · FREE DAILY BRIEF
Get RBI updates for your role
Every important RBI update, decoded in plain English — for your career, exams & financial awareness.
We collect only your email, name and role, used solely to send your brief — never sold or shared. Withdraw anytime via the unsubscribe link in any email. Independent platform, not affiliated with the RBI. Information, not legal advice.
REPORT AN ERROR · BETA
Spotted an error? Earn 500 BankPulse Credits
Help us stay accurate. If your correction is verified true and approved by our founder, you earn 500 BankPulse Credits — redeemable when the platform monetises.
Reviewed by a human before any credit is awarded. We never change the site from crowd input without verification.
WANT A NEW FEATURE · BETA
What would make BankPulse more useful for you?
Tell us what to build next — a tool, a data view, a role page, anything. We read every suggestion.
Thank you — your ideas directly shape what we build.