HomeCirculars › RBI/2009-10/171

RRBs: KYC/AML Record Retention Extended to 10 Years

Current · Source: Reserve Bank of India · RBI/2009-10/171 · issued 29 Sep 2009 · ~2 min read
Quick answerRBI mandates Regional Rural Banks to retain transaction records for 10 years from transaction date and customer identification records for 10 years after account closure, aligning with PMLA 2009 amendments.
The rule, in the simplest words
How it plays out — a real example

A KYC & compliance officer in Indore, Mr. Kumar, ensures that all transaction records for a customer's gold loan are preserved for 10 years from the transaction date. He also verifies the customer's identification documents, such as their PAN card and passport, and preserves them for 10 years after the business relationship ends. If the customer becomes a PEP, Mr. Kumar requires senior management approval to continue the account with enhanced monitoring.

What changed

The Prevention of Money Laundering (Amendment) Act, 2009, effective June 1, 2009, extended record retention periods. RRBs must now keep transaction records for 10 years from the transaction date (previously shorter) and customer identification records for 10 years after business relationship ends. This modifies earlier circulars from 2005 and 2006.

What it means for you

RRBs must update their record-keeping systems to comply with the new 10-year retention mandates, ensuring all transaction and identity documents are preserved for legal evidence. The Principal Officer must have timely access to this data and report independently to senior management or the board. Enhanced due diligence for Politically Exposed Persons (PEPs) now requires senior management approval if a customer becomes a PEP post-account opening.

What you must do

Who it affects

Regional Rural Banks (RRBs), Principal Officers of RRBs, Senior management and board of RRBs, Compliance and AML teams at RRBs

❓ Common questions

Regulatory timeline

Built from our lineage records — each fact carries its provenance; missing history simply is not shown (never guessed).

What is the new record retention period for transaction records under PMLA 2009?

RRBs must maintain all necessary transaction records for at least 10 years from the date of each transaction, as per Section 12(2)(a) of the PMLA 2009.

How should RRBs handle accounts of customers who become Politically Exposed Persons (PEPs) after account opening?

If an existing customer or beneficial owner becomes a PEP, RRBs must obtain senior management approval to continue the relationship and apply enhanced due diligence measures, including ongoing monitoring.

What are the responsibilities of the Principal Officer under this circular?

The Principal Officer must have timely access to customer identification data, transaction records, and other relevant information, and must act independently, reporting directly to senior management or the board.

📜 This document’s life story (1 recorded event, each backed by RBI’s own words)
Clarified by RRBs: Enhanced KYC/AML norms for PEPs, STR filing, and CDD
RBI’s words: “RPCD.CO.RRB.BC.NO. 27/03.05.33(E)/2009-10 dated September 29,2009 on Know Your Customer”
📜 Read the original circular — full text as issued by RBI
RBI/2009-10/171 RPCD.CO.RRB.BC.No. 27 / 03.05.33(E)/2009-10 September 29, 2009 The Chairman All Regional Rural Banks Dear Sir, Know Your Customer (KYC) Norms / Anti-Money Laundering (AML) Standards and obligation of Regional Rural Banks (RRBS) under PMLA, 2002 ----------------------------------------------------------------------------------- Please refer to our circulars RPCD.No.RRB.BC.81/03.05.33 (E) / 2004-05 dated February 18, 2005 and RPCD. CO.RRB.AML.BC.68/03.05.33 (E) / 2005-06 dated March 9, 2006 on the captioned subject. 2. The Prevention of Money Laundering (Amendment) Act, 2009 (No. 21 of 2009) has come into force with effect from June 01, 2009 as notified by the Government. In terms of Sub-Section 2(a) of Section 12 of The Prevention of Money Laundering (Amendment) Act, 2009 (PMLA, 2009), the records referred to in clause (a) of Sub-Section (1) of Section 12 shall be maintained for a period of ten years from the date of transaction between the clients and the banking company and in terms of Sub-Section 2(b) of Section 12 of the Act ibid , the records referred to in clause (c) of Sub-Section (1) of Section 12 shall be maintained for a period of ten years from the date of cessation of transaction between the clients and the banking company. 3. Accordingly, in modification of paragraph 5 of our circular dated March 9, 2006, RRBs are advised to maintain for at least ten years from the date of transaction between the bank and the client, all necessary records of transactions referred to at Rule 3 of the Prevention of Money-Laundering (Maintenance of Records of the Nature and Value of Transactions, the Procedure and Manner of Maintaining and Time for Furnishing Information and Verification and Maintenance of Records of the Identity of the Clients of the Banking Companies, Financial Institutions and Intermediaries) Rules, 2005 (PMLA Rules), both domestic or international, which will permit reconstruction of individual transactions (including the amounts and types of currency involved, if any) so as to provide, if necessary, evidence for prosecution of persons involved in criminal activity. 4. However, records pertaining to the identification of the customer and his address (e.g. copies of documents like passports, identity cards, driving licenses, PAN card, utility bills etc.) obtained while opening the account and during the course of business relationship, as indicated in paragraph 5 of the above said circular dated March 9, 2006, would continue to be preserved for at least ten years after the business relationship is ended as required under Rule 10 of the Rules ibid . Accounts of Politically Exposed Persons 5. Detailed guidelines on customer due diligence (CDD) measures to be made applicable to Politically Exposed Person (PEP) and their family members or close relatives are contained in Annex-I to our circular dated February 18, 2005 referred to above. It is further advised  that in the event of an existing customer or the beneficial owner of an existing account, subsequently becoming a PEP, RRBs should obtain senior management approval to continue the business relationship and subject the account to the CDD measures as applicable to the customers of PEP category including enhanced monitoring on an ongoing basis. Principal Officer 6. RRBs were advised vide paragraph 9 of the guidelines on ‘Know Your Customer’ Norms and Anti-Money Laundering measures enclosed to the circular dated February 18, 2005 referred to above that RRBs should appoint a senior management officer to be designated as Principal Officer and the role and responsibilities of the Principal Officer have been detailed therein. With a view to enable the Principal Officer to discharge his responsibilities, it is advised that the Principal Officer and other appropriate staff should have timely access to customer identification data and other CDD information, transaction records and other relevant information. Further, RRBs should ensure that the Principal Officer is able to act independently and report directly to the senior management or to the Board of Directors. Yours faithfully, (R.C.Sarangi) Chief General Manager
Reproduced for reference with acknowledgment — Source: Reserve Bank of India · RBI/2009-10/171 · issued 29 Sep 2009. The plain-English explanation above is BankPulse’s own independent summary.
🧰 Tools — save, print, templates & related
Worked example & action-note template

Example: if you are a Compliance officer at a bank this circular applies to (Regional Rural Banks (RRBs), Principal Officers of RRBs, Senior management and board of RRBs, Compliance and AML teams at RRBs), your first concrete step on “RRBs: KYC/AML Record Retention Extended to 10 Years” is: “Retain all transaction records (domestic and international) for at least 10 years from the transaction date, as per PMLA Rules.” (RBI issued this 29 Sep 2009).

  1. Circular: RBI/2009-10/171 -- RRBs: KYC/AML Record Retention Extended to 10 Years
  2. Issued: 29 Sep 2009
  3. Action required: Retain all transaction records (domestic and international) for at least 10 years from the transaction date, as per PMLA Rules.
  4. Action required: Preserve customer identification documents (e.g., passports, PAN cards) for at least 10 years after the business relationship ends.
  5. Action required: Update internal policies to require senior management approval for continuing accounts where customers become PEPs, with enhanced monitoring.
  6. Action required: Ensure the Principal Officer has independent, timely access to all KYC/AML data and reports directly to senior management or the board.
  7. Owner: ____________ Target date: ____________
  8. Board/committee approval needed? Y / N
  9. Evidence filed in compliance register on: ____________
Built only from this circular’s own published fields — not legal advice; always confirm against the official RBI source.

💬 Banker Discussion

Discuss this circular with fellow bankers — reply, upvote what helps, report what doesn’t belong. Be professional; no client data. Views are the commenter’s own, not BankPulse’s.

Loading comments…
BankPulse Compliance Evidence Pack — generated 03 Aug 2026 · status cross-checked against RBI’s official withdrawal register (refreshed weekly).
Official RBI source: https://www.rbi.org.in/Scripts/NotificationUser.aspx?Id=5291&Mode=0 — Plain-English summary by BankPulse (bankpulse.ai), reviewed by our expert reviewer, CA Amit Jain. Independent platform, not affiliated with the Reserve Bank of India; is our own plain-English paraphrase, not RBI’s original wording.
Public beta — plain-English informational summaries. Always verify against the official RBI source (circular number cited on every page) before making compliance, credit, treasury, audit, or operational decisions. · Join our WhatsApp channel ↗