{"what_this_is":"The machine-readable twin of the BankPulse page for one RBI rulebook. Same points, same dates, same paragraph references as the page a person reads. RBI's own wording is not reproduced here: each point names the RBI paragraph, the character offset into the text BankPulse read and the sha256 of that text, so the claim can be checked against RBI's own document.","schema_version":1,"release_id":"d653cdb0a5","generated_at":"2026-09-15T00:33:59.117975+00:00","id":"md12941","title":"Reserve Bank of India (Non-Banking Financial Companies – Managing Risks in Outsourcing) Directions, 2025","document_kind":"Directions","page":"https://bankpulse.ai/rule/md12941","status":"In force","importance":{"code":"MR","label":"MUST READ","weight":"Must read","why":"Binding RBI Directions naming this institution class in the title","layer":"bankpulse_inference"},"applies_to":{"shown":"Finance companies","class_code":"NBFC","from":"the document's own title","layer":"bankpulse_inference"},"dates":{"prid":"md12941","mode":"four_dates_v1","published":{"label":"Published","value":"November 28, 2025","stated":true,"why":"The day RBI put this document out."},"effective":{"label":"Starts to apply","value":"","stated":false,"why":"Not stated separately in this document. Read the rule itself before you assume a start date."},"transition":{"label":"Time to get ready","value":"","stated":false,"why":"Cannot be worked out until the day it starts to apply is known."},"deadline":{"label":"Last date to act","value":"","stated":false,"why":"No date to act by was found in this document. Other dates may sit inside single paragraphs."},"sources":{"published":"doc_date in data/highlights/md12941.json","effective":"none held","transition":"none held","deadline":"none held"}},"rbi_source":{"url":"https://rbi.org.in/Scripts/BS_ViewMasDirections.aspx?id=12941","document_date":"November 28, 2025","read_by_bankpulse":"2026-08-21 16:21:05 UTC","text_sha256":"de01444c4eaa88ce20b295c623d61d8efc300c0aa831d7c52840aa99c6673c64","word_count":null,"standing_last_checked":"Standing checked on RBI’s Master Directions index, 15 September 2026, 5:58 am IST."},"counts":{"points_shown":63,"points_naming_an_rbi_paragraph":63,"points_stored":63,"actions":0,"amendments":0},"points":[{"n":1,"claim":"md12941-4384b020","page_group":"Chapter I. Preliminary","stored_section":"WHAT CHANGES","heading":"Deadline for existing deals","plain_english":"Existing IT outsourcing deals must follow these rules by April 10, 2026, or renewal, whichever comes first.","rbi_paragraph":"Para 2","rbi_char_offset":4787,"weight":"MUST KNOW","role":"All staff","team":null,"products_covered":[],"products_excluded":[],"bankpulse_example":null,"anchor":"https://bankpulse.ai/rule/md12941#p1","layer":"bankpulse"},{"n":2,"claim":"md12941-e5c7cc99","page_group":"Chapter I. Preliminary","stored_section":"THE CORE IDEA","heading":"Outsourcing rules for NBFCs","plain_english":"This document sets the outsourcing rules for non-banking financial companies.","rbi_paragraph":"Para 1","rbi_char_offset":4291,"weight":"BACKGROUND","role":"All staff","team":null,"products_covered":[],"products_excluded":[],"bankpulse_example":null,"anchor":"https://bankpulse.ai/rule/md12941#p2","layer":"bankpulse"},{"n":3,"claim":"md12941-1840df20","page_group":"Chapter I. Preliminary","stored_section":"KEY DATES","heading":"Start date","plain_english":"These Directions came into effect on the day the Reserve Bank issued them.","rbi_paragraph":"Para 2","rbi_char_offset":4448,"weight":"BACKGROUND","role":"All staff","team":null,"products_covered":[],"products_excluded":[],"bankpulse_example":null,"anchor":"https://bankpulse.ai/rule/md12941#p3","layer":"bankpulse"},{"n":4,"claim":"md12941-fe928f50","page_group":"Chapter I. Preliminary","stored_section":"WHO IT APPLIES TO","heading":"Who is covered","plain_english":"These Directions apply to every non-banking financial company.","rbi_paragraph":"Para 3(1)","rbi_char_offset":5358,"weight":"BACKGROUND","role":"All staff","team":null,"products_covered":[],"products_excluded":[],"bankpulse_example":null,"anchor":"https://bankpulse.ai/rule/md12941#p4","layer":"bankpulse"},{"n":5,"claim":"md12941-3da69a61","page_group":"Chapter I. Preliminary","stored_section":"WHO IT APPLIES TO","heading":"Lighter rules for Base layer","plain_english":"Base layer NBFCs follow this rule less fully than Middle and Upper layer NBFCs.","rbi_paragraph":"Para 3(2)","rbi_char_offset":6765,"weight":"BACKGROUND","role":"All staff","team":null,"products_covered":[],"products_excluded":[],"bankpulse_example":null,"anchor":"https://bankpulse.ai/rule/md12941#p5","layer":"bankpulse"},{"n":1,"claim":"md12941-db266df9","page_group":"Chapter II. Role of the Board","stored_section":"THE CORE IDEA","heading":"Responsibility stays with NBFC","plain_english":"Outsourcing a task never lowers the NBFC's own responsibility for it.","rbi_paragraph":"Para 9","rbi_char_offset":13317,"weight":"MUST KNOW","role":"All staff","team":null,"products_covered":[],"products_excluded":[],"bankpulse_example":null,"anchor":"https://bankpulse.ai/rule/md12941#p6","layer":"bankpulse"},{"n":1,"claim":"md12941-71c4bdae","page_group":"Chapter III. Outsourcing of Financial Services","stored_section":"THE CORE IDEA","heading":"Contract risk named","plain_english":"There is a risk that the deal with the provider cannot be enforced.","rbi_paragraph":"Para 22","rbi_char_offset":23608,"weight":"MUST KNOW","role":"All staff","team":null,"products_covered":[],"products_excluded":[],"bankpulse_example":null,"anchor":"https://bankpulse.ai/rule/md12941#p7","layer":"bankpulse"},{"n":2,"claim":"md12941-dc39e37b","page_group":"Chapter III. Outsourcing of Financial Services","stored_section":"WHAT CHANGES","heading":"No mixing of records","plain_english":"Where a provider serves many firms, records must not be mixed.","rbi_paragraph":"Para 26","rbi_char_offset":24697,"weight":"MUST KNOW","role":"All staff","team":null,"products_covered":[],"products_excluded":[],"bankpulse_example":null,"anchor":"https://bankpulse.ai/rule/md12941#p8","layer":"bankpulse"},{"n":3,"claim":"md12941-657d52ab","page_group":"Chapter III. Outsourcing of Financial Services","stored_section":"THE CORE IDEA","heading":"Own operations must survive","plain_english":"Work must not stop if a group firm's premises or systems go down.","rbi_paragraph":"Para 48","rbi_char_offset":35353,"weight":"MUST KNOW","role":"Technology","team":null,"products_covered":[],"products_excluded":[],"bankpulse_example":null,"anchor":"https://bankpulse.ai/rule/md12941#p9","layer":"bankpulse"},{"n":4,"claim":"md12941-7f701aba","page_group":"Chapter III. Outsourcing of Financial Services","stored_section":"WHAT CHANGES","heading":"Not answerable for the group","plain_english":"No advert may say the lender stands behind a group firm's dues.","rbi_paragraph":"Para 50","rbi_char_offset":36108,"weight":"MUST KNOW","role":"All staff","team":null,"products_covered":[],"products_excluded":[],"bankpulse_example":null,"anchor":"https://bankpulse.ai/rule/md12941#p10","layer":"bankpulse"},{"n":5,"claim":"md12941-227a679b","page_group":"Chapter III. Outsourcing of Financial Services","stored_section":"WHAT CHANGES","heading":"Thirty days to complain","plain_english":"The lender must give customers a 30-day window to raise their complaints.","rbi_paragraph":"Para 57(3)","rbi_char_offset":40171,"weight":"MUST KNOW","role":"All staff","team":null,"products_covered":[],"products_excluded":[],"bankpulse_example":null,"anchor":"https://bankpulse.ai/rule/md12941#p11","layer":"bankpulse"},{"n":6,"claim":"md12941-3f06dbec","page_group":"Chapter III. Outsourcing of Financial Services","stored_section":"THE CORE IDEA","heading":"Control stays at home","plain_english":"The lender must keep full control of the work it gives out.","rbi_paragraph":"Para 17","rbi_char_offset":19136,"weight":"DO IT","role":"All staff","team":null,"products_covered":[],"products_excluded":[],"bankpulse_example":null,"anchor":"https://bankpulse.ai/rule/md12941#p12","layer":"bankpulse"},{"n":7,"claim":"md12941-7d26431f","page_group":"Chapter III. Outsourcing of Financial Services","stored_section":"WHO SHOULD ACT","heading":"Nine risks to weigh","plain_english":"Nine named risks must be weighed before work is given out.","rbi_paragraph":"Para 22","rbi_char_offset":22150,"weight":"DO IT","role":"All staff","team":null,"products_covered":[],"products_excluded":[],"bankpulse_example":null,"anchor":"https://bankpulse.ai/rule/md12941#p13","layer":"bankpulse"},{"n":8,"claim":"md12941-0b7b2ef6","page_group":"Chapter III. Outsourcing of Financial Services","stored_section":"WHO SHOULD ACT","heading":"Guard the customer data","plain_english":"Customer data held by the provider must be kept safe.","rbi_paragraph":"Para 23","rbi_char_offset":24008,"weight":"DO IT","role":"Technology","team":null,"products_covered":[],"products_excluded":[],"bankpulse_example":null,"anchor":"https://bankpulse.ai/rule/md12941#p14","layer":"bankpulse"},{"n":9,"claim":"md12941-07b1ff76","page_group":"Chapter III. Outsourcing of Financial Services","stored_section":"WHO SHOULD ACT","heading":"Watch their security","plain_english":"The lender must check the provider's safety steps often, and note any breach.","rbi_paragraph":"Para 25","rbi_char_offset":24355,"weight":"DO IT","role":"All staff","team":null,"products_covered":[],"products_excluded":[],"bankpulse_example":"A bank hires an outside firm to host its records. Signing the contract is not the end of it. The bank must review and monitor that provider's security practices and control processes on a regular basis.","anchor":"https://bankpulse.ai/rule/md12941#p15","layer":"bankpulse"},{"n":10,"claim":"md12941-cf7fca02","page_group":"Chapter III. Outsourcing of Financial Services","stored_section":"WHAT CHANGES","heading":"Keep our records separable","plain_english":"The provider must be able to pick out our records and assets.","rbi_paragraph":"Para 27","rbi_char_offset":24824,"weight":"DO IT","role":"All staff","team":null,"products_covered":[],"products_excluded":[],"bankpulse_example":null,"anchor":"https://bankpulse.ai/rule/md12941#p16","layer":"bankpulse"},{"n":11,"claim":"md12941-917f0563","page_group":"Chapter III. Outsourcing of Financial Services","stored_section":"WHO SHOULD ACT","heading":"Due diligence each renewal","plain_english":"The provider must be checked when hired and again at each renewal.","rbi_paragraph":"Para 29","rbi_char_offset":25272,"weight":"DO IT","role":"All staff","team":null,"products_covered":[],"products_excluded":[],"bankpulse_example":"A bank's outsourcing arrangement comes up for renewal after three years. Due diligence is done again, not only when it was first signed. The question each time is whether the service provider can still meet the obligations.","anchor":"https://bankpulse.ai/rule/md12941#p17","layer":"bankpulse"},{"n":12,"claim":"md12941-fb64df1e","page_group":"Chapter III. Outsourcing of Financial Services","stored_section":"WHO SHOULD ACT","heading":"Look outside as well","plain_english":"Outside reviews and market feedback should back up our own checks.","rbi_paragraph":"Para 31","rbi_char_offset":26667,"weight":"DO IT","role":"All staff","team":null,"products_covered":[],"products_excluded":[],"bankpulse_example":"A bank's own checks on a provider are not the whole picture. It also obtains independent reviews and market feedback on that service provider. Those supplement the findings of its own due diligence.","anchor":"https://bankpulse.ai/rule/md12941#p18","layer":"bankpulse"},{"n":13,"claim":"md12941-4248b12c","page_group":"Chapter III. Outsourcing of Financial Services","stored_section":"WHO SHOULD ACT","heading":"Systems must fit","plain_english":"The provider's systems must work with ours, and their service must be good enough.","rbi_paragraph":"Para 32","rbi_char_offset":26814,"weight":"DO IT","role":"Technology","team":null,"products_covered":[],"products_excluded":[],"bankpulse_example":null,"anchor":"https://bankpulse.ai/rule/md12941#p19","layer":"bankpulse"},{"n":14,"claim":"md12941-cd95ce17","page_group":"Chapter III. Outsourcing of Financial Services","stored_section":"WHO SHOULD ACT","heading":"Lawyer must vet it","plain_english":"A lawyer must check the written deal and say it will hold.","rbi_paragraph":"Para 33","rbi_char_offset":27172,"weight":"DO IT","role":"All staff","team":null,"products_covered":[],"products_excluded":[],"bankpulse_example":null,"anchor":"https://bankpulse.ai/rule/md12941#p20","layer":"bankpulse"},{"n":15,"claim":"md12941-dec65ace","page_group":"Chapter III. Outsourcing of Financial Services","stored_section":"WHAT CHANGES","heading":"Agreement must handle risk","plain_english":"The deal must name the risks and say how they will be held down.","rbi_paragraph":"Para 33","rbi_char_offset":27253,"weight":"DO IT","role":"All staff","team":null,"products_covered":[],"products_excluded":[],"bankpulse_example":null,"anchor":"https://bankpulse.ai/rule/md12941#p21","layer":"bankpulse"},{"n":16,"claim":"md12941-84bbcbbb","page_group":"Chapter III. Outsourcing of Financial Services","stored_section":"WHAT CHANGES","heading":"Room to step in","plain_english":"The deal must leave room to step in to meet the law.","rbi_paragraph":"Para 33","rbi_char_offset":27516,"weight":"DO IT","role":"All staff","team":null,"products_covered":[],"products_excluded":[],"bankpulse_example":null,"anchor":"https://bankpulse.ai/rule/md12941#p22","layer":"bankpulse"},{"n":17,"claim":"md12941-eccbc0f6","page_group":"Chapter III. Outsourcing of Financial Services","stored_section":"WHAT CHANGES","heading":"Say what the relationship is","plain_english":"The deal must say whether the tie is agent and principal, or not.","rbi_paragraph":"Para 33","rbi_char_offset":27642,"weight":"DO IT","role":"All staff","team":null,"products_covered":[],"products_excluded":[],"bankpulse_example":null,"anchor":"https://bankpulse.ai/rule/md12941#p23","layer":"bankpulse"},{"n":18,"claim":"md12941-515542cc","page_group":"Chapter III. Outsourcing of Financial Services","stored_section":"WHO SHOULD ACT","heading":"A structure to watch it","plain_english":"There must be a team in place to watch and steer the work given out.","rbi_paragraph":"Para 35","rbi_char_offset":29931,"weight":"DO IT","role":"All staff","team":null,"products_covered":[],"products_excluded":[],"bankpulse_example":null,"anchor":"https://bankpulse.ai/rule/md12941#p24","layer":"bankpulse"},{"n":19,"claim":"md12941-b6f33016","page_group":"Chapter III. Outsourcing of Financial Services","stored_section":"KEY DATES","heading":"A yearly financial review","plain_english":"The provider's money and work health must be checked at least once a year.","rbi_paragraph":"Para 38","rbi_char_offset":30705,"weight":"DO IT","role":"All staff","team":null,"products_covered":[],"products_excluded":[],"bankpulse_example":null,"anchor":"https://bankpulse.ai/rule/md12941#p25","layer":"bankpulse"},{"n":20,"claim":"md12941-62c18f4b","page_group":"Chapter III. Outsourcing of Financial Services","stored_section":"WHAT CHANGES","heading":"Report any slippage","plain_english":"The review must bring out any drop in service, secrecy or safety.","rbi_paragraph":"Para 38","rbi_char_offset":30988,"weight":"DO IT","role":"Compliance","team":null,"products_covered":[],"products_excluded":[],"bankpulse_example":null,"anchor":"https://bankpulse.ai/rule/md12941#p26","layer":"bankpulse"},{"n":21,"claim":"md12941-8cc5e832","page_group":"Chapter III. Outsourcing of Financial Services","stored_section":"WHO SHOULD ACT","heading":"Reconcile in time","plain_english":"Deals with the provider and its helpers must be matched up on time.","rbi_paragraph":"Para 39","rbi_char_offset":31363,"weight":"DO IT","role":"All staff","team":null,"products_covered":[],"products_excluded":[],"bankpulse_example":null,"anchor":"https://bankpulse.ai/rule/md12941#p27","layer":"bankpulse"},{"n":22,"claim":"md12941-24dd5b73","page_group":"Chapter III. Outsourcing of Financial Services","stored_section":"WHO SHOULD ACT","heading":"Continuity must be tested","plain_english":"The provider must write down, keep and test its plans to keep work going.","rbi_paragraph":"Para 40","rbi_char_offset":31632,"weight":"DO IT","role":"All staff","team":null,"products_covered":[],"products_excluded":[],"bankpulse_example":null,"anchor":"https://bankpulse.ai/rule/md12941#p28","layer":"bankpulse"},{"n":23,"claim":"md12941-7c0417aa","page_group":"Chapter III. Outsourcing of Financial Services","stored_section":"WHO SHOULD ACT","heading":"Test it together","plain_english":"The provider must test the plan from time to time, and joint drills may be held.","rbi_paragraph":"Para 40","rbi_char_offset":31784,"weight":"DO IT","role":"All staff","team":null,"products_covered":[],"products_excluded":[],"bankpulse_example":null,"anchor":"https://bankpulse.ai/rule/md12941#p29","layer":"bankpulse"},{"n":24,"claim":"md12941-a44e5502","page_group":"Chapter III. Outsourcing of Financial Services","stored_section":"WHO SHOULD ACT","heading":"Have a way back","plain_english":"The backup plan must look at another provider, or taking the work back.","rbi_paragraph":"Para 41","rbi_char_offset":32069,"weight":"DO IT","role":"All staff","team":null,"products_covered":[],"products_excluded":[],"bankpulse_example":null,"anchor":"https://bankpulse.ai/rule/md12941#p30","layer":"bankpulse"},{"n":25,"claim":"md12941-b85417a1","page_group":"Chapter III. Outsourcing of Financial Services","stored_section":"WHAT CHANGES","heading":"Shared premises, clear identity","plain_english":"Where a group firm shares the premises, its name must be clear to customers.","rbi_paragraph":"Para 49","rbi_char_offset":35653,"weight":"DO IT","role":"All staff","team":null,"products_covered":[],"products_excluded":[],"bankpulse_example":null,"anchor":"https://bankpulse.ai/rule/md12941#p31","layer":"bankpulse"},{"n":26,"claim":"md12941-afc1b170","page_group":"Chapter III. Outsourcing of Financial Services","stored_section":"WHAT CHANGES","heading":"Say who is selling","plain_english":"Leaflets and staff must make clear how the group firm is tied to the lender.","rbi_paragraph":"Para 49","rbi_char_offset":35841,"weight":"DO IT","role":"All staff","team":null,"products_covered":[],"products_excluded":[],"bankpulse_example":null,"anchor":"https://bankpulse.ai/rule/md12941#p32","layer":"bankpulse"},{"n":27,"claim":"md12941-4e9178c9","page_group":"Chapter III. Outsourcing of Financial Services","stored_section":"THE CORE IDEA","heading":"Group party, same rules","plain_english":"Work given to a group firm must follow the same rules as work given outside.","rbi_paragraph":"Para 51","rbi_char_offset":36228,"weight":"DO IT","role":"All staff","team":null,"products_covered":[],"products_excluded":[],"bankpulse_example":null,"anchor":"https://bankpulse.ai/rule/md12941#p33","layer":"bankpulse"},{"n":28,"claim":"md12941-ce827836","page_group":"Chapter III. Outsourcing of Financial Services","stored_section":"WHO SHOULD ACT","heading":"Watch the host country","plain_english":"Where a provider is abroad, its country's rule and politics must be watched.","rbi_paragraph":"Para 53","rbi_char_offset":36630,"weight":"DO IT","role":"All staff","team":null,"products_covered":[],"products_excluded":[],"bankpulse_example":null,"anchor":"https://bankpulse.ai/rule/md12941#p34","layer":"bankpulse"},{"n":29,"claim":"md12941-af4b7f59","page_group":"Chapter III. Outsourcing of Financial Services","stored_section":"WHAT CHANGES","heading":"Tell the customer","plain_english":"Where a customer must deal with a provider, the leaflet must say so.","rbi_paragraph":"Para 55","rbi_char_offset":38584,"weight":"DO IT","role":"Branch","team":null,"products_covered":[],"products_excluded":[],"bankpulse_example":null,"anchor":"https://bankpulse.ai/rule/md12941#p35","layer":"bankpulse"},{"n":30,"claim":"md12941-5bf1b3df","page_group":"Chapter III. Outsourcing of Financial Services","stored_section":"WHO SHOULD ACT","heading":"Grievances without delay","plain_english":"The named officer must see that real customer complaints are put right fast.","rbi_paragraph":"Para 57(2)","rbi_char_offset":39921,"weight":"DO IT","role":"Branch","team":null,"products_covered":[],"products_excluded":[],"bankpulse_example":null,"anchor":"https://bankpulse.ai/rule/md12941#p36","layer":"bankpulse"},{"n":31,"claim":"md12941-4c35fca9","page_group":"Chapter III. Outsourcing of Financial Services","stored_section":"THE CORE IDEA","heading":"Duties do not move out","plain_english":"Giving work out does not cut what the lender owes its customers or RBI.","rbi_paragraph":"Para 17","rbi_char_offset":18660,"weight":"BACKGROUND","role":"All staff","team":null,"products_covered":[],"products_excluded":[],"bankpulse_example":null,"anchor":"https://bankpulse.ai/rule/md12941#p37","layer":"bankpulse"},{"n":32,"claim":"md12941-406369b8","page_group":"Chapter III. Outsourcing of Financial Services","stored_section":"WHO SHOULD ACT","heading":"Suspicious reports stay ours","plain_english":"Cash and suspicious deal reports stay the lender's own job.","rbi_paragraph":"Para 19","rbi_char_offset":20493,"weight":"BACKGROUND","role":"Compliance","team":null,"products_covered":[],"products_excluded":[],"bankpulse_example":null,"anchor":"https://bankpulse.ai/rule/md12941#p38","layer":"bankpulse"},{"n":33,"claim":"md12941-54d538c1","page_group":"Chapter III. Outsourcing of Financial Services","stored_section":"THE CORE IDEA","heading":"Compliance risk named","plain_english":"There is a risk that giving work out breaks privacy or other law.","rbi_paragraph":"Para 22","rbi_char_offset":22576,"weight":"BACKGROUND","role":"All staff","team":null,"products_covered":[],"products_excluded":[],"bankpulse_example":null,"anchor":"https://bankpulse.ai/rule/md12941#p39","layer":"bankpulse"},{"n":34,"claim":"md12941-c328d2b4","page_group":"Chapter III. Outsourcing of Financial Services","stored_section":"WHAT CHANGES","heading":"Need to know only","plain_english":"A provider's staff may see customer data only where the job needs it.","rbi_paragraph":"Para 24","rbi_char_offset":24208,"weight":"BACKGROUND","role":"Technology","team":null,"products_covered":[],"products_excluded":[],"bankpulse_example":null,"anchor":"https://bankpulse.ai/rule/md12941#p40","layer":"bankpulse"},{"n":35,"claim":"md12941-ca44080f","page_group":"Chapter III. Outsourcing of Financial Services","stored_section":"WHAT CHANGES","heading":"Only confidential jurisdictions","plain_english":"Work may go abroad only to a country that upholds secrecy terms.","rbi_paragraph":"Para 52","rbi_char_offset":36479,"weight":"BACKGROUND","role":"All staff","team":null,"products_covered":[],"products_excluded":[],"bankpulse_example":null,"anchor":"https://bankpulse.ai/rule/md12941#p41","layer":"bankpulse"},{"n":36,"claim":"md12941-17573a9a","page_group":"Chapter III. Outsourcing of Financial Services","stored_section":"IMPACT","heading":"Complaint responsibility","plain_english":"The NBFC alone is responsible for fixing complaints about outsourced services.","rbi_paragraph":"Para 56","rbi_char_offset":38991,"weight":"BACKGROUND","role":"All staff","team":null,"products_covered":[],"products_excluded":[],"bankpulse_example":null,"anchor":"https://bankpulse.ai/rule/md12941#p42","layer":"bankpulse"},{"n":1,"claim":"md12941-39368fa7","page_group":"Chapter IV. Outsourcing of Information Technology (IT) Services","stored_section":"WHAT CHANGES","heading":"Nothing deleted in transition","plain_english":"The provider may not wipe or change data while the work is being moved.","rbi_paragraph":"Para 87","rbi_char_offset":60823,"weight":"MUST KNOW","role":"Technology","team":null,"products_covered":[],"products_excluded":[],"bankpulse_example":null,"anchor":"https://bankpulse.ai/rule/md12941#p43","layer":"bankpulse"},{"n":2,"claim":"md12941-c53e9b46","page_group":"Chapter IV. Outsourcing of Information Technology (IT) Services","stored_section":"WHO SHOULD ACT","heading":"Weigh the IT case","plain_english":"The case for giving out an IT job must be weighed against its risks.","rbi_paragraph":"Para 60","rbi_char_offset":44225,"weight":"DO IT","role":"All staff","team":null,"products_covered":[],"products_excluded":[],"bankpulse_example":null,"anchor":"https://bankpulse.ai/rule/md12941#p44","layer":"bankpulse"},{"n":3,"claim":"md12941-1d593a0e","page_group":"Chapter IV. Outsourcing of Information Technology (IT) Services","stored_section":"WHO SHOULD ACT","heading":"A framework for IT risk","plain_english":"A risk plan must cover how IT risks are found, sized and reported.","rbi_paragraph":"Para 65","rbi_char_offset":48530,"weight":"DO IT","role":"Compliance","team":null,"products_covered":[],"products_excluded":[],"bankpulse_example":null,"anchor":"https://bankpulse.ai/rule/md12941#p45","layer":"bankpulse"},{"n":4,"claim":"md12941-6080f5b4","page_group":"Chapter IV. Outsourcing of Information Technology (IT) Services","stored_section":"WHO SHOULD ACT","heading":"Too much with one provider","plain_english":"The lender must weigh the risk of leaning on one provider too much.","rbi_paragraph":"Para 67","rbi_char_offset":49106,"weight":"DO IT","role":"All staff","team":null,"products_covered":[],"products_excluded":[],"bankpulse_example":null,"anchor":"https://bankpulse.ai/rule/md12941#p46","layer":"bankpulse"},{"n":5,"claim":"md12941-7d1b7932","page_group":"Chapter IV. Outsourcing of Information Technology (IT) Services","stored_section":"WHAT CHANGES","heading":"Put it in writing","plain_english":"What each side owes the other must be set out in a written deal that binds.","rbi_paragraph":"Para 73","rbi_char_offset":52281,"weight":"DO IT","role":"All staff","team":null,"products_covered":[],"products_excluded":[],"bankpulse_example":null,"anchor":"https://bankpulse.ai/rule/md12941#p47","layer":"bankpulse"},{"n":6,"claim":"md12941-ab351eb6","page_group":"Chapter IV. Outsourcing of Information Technology (IT) Services","stored_section":"WHO SHOULD ACT","heading":"Audit the provider","plain_english":"The lender must audit the provider and anyone it hires.","rbi_paragraph":"Para 76","rbi_char_offset":56536,"weight":"DO IT","role":"Audit","team":null,"products_covered":[],"products_excluded":[],"bankpulse_example":null,"anchor":"https://bankpulse.ai/rule/md12941#p48","layer":"bankpulse"},{"n":7,"claim":"md12941-57a64bad","page_group":"Chapter IV. Outsourcing of Information Technology (IT) Services","stored_section":"WHO SHOULD ACT","heading":"An inventory of IT services","plain_english":"The lender must keep a list of the IT jobs it has given out.","rbi_paragraph":"Para 82","rbi_char_offset":59231,"weight":"DO IT","role":"All staff","team":null,"products_covered":[],"products_excluded":[],"bankpulse_example":null,"anchor":"https://bankpulse.ai/rule/md12941#p49","layer":"bankpulse"},{"n":8,"claim":"md12941-d28e8205","page_group":"Chapter IV. Outsourcing of Information Technology (IT) Services","stored_section":"WHO SHOULD ACT","heading":"Map the dependency","plain_english":"The lender must map how much it leans on outside firms.","rbi_paragraph":"Para 82","rbi_char_offset":59380,"weight":"DO IT","role":"All staff","team":null,"products_covered":[],"products_excluded":[],"bankpulse_example":null,"anchor":"https://bankpulse.ai/rule/md12941#p50","layer":"bankpulse"},{"n":9,"claim":"md12941-026b05e6","page_group":"Chapter IV. Outsourcing of Information Technology (IT) Services","stored_section":"WHAT CHANGES","heading":"An exit plan required","plain_english":"The IT policy must set out a clear way to end the deal and keep work going.","rbi_paragraph":"Para 84","rbi_char_offset":60125,"weight":"DO IT","role":"Compliance","team":null,"products_covered":[],"products_excluded":[],"bankpulse_example":null,"anchor":"https://bankpulse.ai/rule/md12941#p51","layer":"bankpulse"},{"n":10,"claim":"md12941-d27efed4","page_group":"Chapter IV. Outsourcing of Information Technology (IT) Services","stored_section":"WHAT CHANGES","heading":"Plan for each way out","plain_english":"The exit plan must cover each way the deal may end, and the time each needs.","rbi_paragraph":"Para 85","rbi_char_offset":60232,"weight":"DO IT","role":"All staff","team":null,"products_covered":[],"products_excluded":[],"bankpulse_example":null,"anchor":"https://bankpulse.ai/rule/md12941#p52","layer":"bankpulse"},{"n":11,"claim":"md12941-9de5de08","page_group":"Chapter IV. Outsourcing of Information Technology (IT) Services","stored_section":"WHO SHOULD ACT","heading":"Name the alternative","plain_english":"The exit plan must identify who else could do the work, or whether it comes back in-house.","rbi_paragraph":"Para 86","rbi_char_offset":60434,"weight":"DO IT","role":"All staff","team":null,"products_covered":[],"products_excluded":[],"bankpulse_example":null,"anchor":"https://bankpulse.ai/rule/md12941#p53","layer":"bankpulse"},{"n":12,"claim":"md12941-794d4ac5","page_group":"Chapter IV. Outsourcing of Information Technology (IT) Services","stored_section":"WHAT CHANGES","heading":"Destroy the data safely","plain_english":"The deal must say how data and records are to be wiped or destroyed.","rbi_paragraph":"Para 87","rbi_char_offset":60645,"weight":"DO IT","role":"Technology","team":null,"products_covered":[],"products_excluded":[],"bankpulse_example":null,"anchor":"https://bankpulse.ai/rule/md12941#p54","layer":"bankpulse"},{"n":13,"claim":"md12941-27d0353c","page_group":"Chapter IV. Outsourcing of Information Technology (IT) Services","stored_section":"WHAT CHANGES","heading":"Must help the successor","plain_english":"The provider is bound to help the next provider hand over smoothly.","rbi_paragraph":"Para 88","rbi_char_offset":61028,"weight":"DO IT","role":"All staff","team":null,"products_covered":[],"products_excluded":[],"bankpulse_example":null,"anchor":"https://bankpulse.ai/rule/md12941#p55","layer":"bankpulse"},{"n":14,"claim":"md12941-c41d08fe","page_group":"Chapter IV. Outsourcing of Information Technology (IT) Services","stored_section":"WHO SHOULD ACT","heading":"Announce the ending","plain_english":"Where a provider dealt with customers, the end of the deal must be made known.","rbi_paragraph":"Para 89","rbi_char_offset":61329,"weight":"DO IT","role":"All staff","team":null,"products_covered":[],"products_excluded":[],"bankpulse_example":null,"anchor":"https://bankpulse.ai/rule/md12941#p56","layer":"bankpulse"},{"n":15,"claim":"md12941-3c05256e","page_group":"Chapter IV. Outsourcing of Information Technology (IT) Services","stored_section":"WHO SHOULD ACT","heading":"Group choice on merit","plain_english":"A group firm must be picked on the same plain grounds as an outside firm.","rbi_paragraph":"Para 91","rbi_char_offset":61775,"weight":"DO IT","role":"All staff","team":null,"products_covered":[],"products_excluded":[],"bankpulse_example":null,"anchor":"https://bankpulse.ai/rule/md12941#p57","layer":"bankpulse"},{"n":16,"claim":"md12941-316f48c7","page_group":"Chapter IV. Outsourcing of Information Technology (IT) Services","stored_section":"THE CORE IDEA","heading":"Arm's length always","plain_english":"The lender must always deal with group firms at arm's length.","rbi_paragraph":"Para 92","rbi_char_offset":62038,"weight":"DO IT","role":"All staff","team":null,"products_covered":[],"products_excluded":[],"bankpulse_example":null,"anchor":"https://bankpulse.ai/rule/md12941#p58","layer":"bankpulse"},{"n":17,"claim":"md12941-7c40ddec","page_group":"Chapter IV. Outsourcing of Information Technology (IT) Services","stored_section":"WHO SHOULD ACT","heading":"Joint vendor audits","plain_english":"CICs using the same vendor can share one joint audit instead of separate ones.","rbi_paragraph":"Para 77","rbi_char_offset":57109,"weight":"BACKGROUND","role":"Audit","team":null,"products_covered":[],"products_excluded":[],"bankpulse_example":null,"anchor":"https://bankpulse.ai/rule/md12941#p59","layer":"bankpulse"},{"n":18,"claim":"md12941-1018d1b3","page_group":"Chapter IV. Outsourcing of Information Technology (IT) Services","stored_section":"WHO SHOULD ACT","heading":"Risk sets the audit cycle","plain_english":"How often the audit happens turns on the risk and what is at stake.","rbi_paragraph":"Para 78","rbi_char_offset":57646,"weight":"BACKGROUND","role":"Audit","team":null,"products_covered":[],"products_excluded":[],"bankpulse_example":null,"anchor":"https://bankpulse.ai/rule/md12941#p60","layer":"bankpulse"},{"n":19,"claim":"md12941-c836b969","page_group":"Chapter IV. Outsourcing of Information Technology (IT) Services","stored_section":"WHO SHOULD ACT","heading":"Board hears the bad news","plain_english":"Reports go to senior staff, and anything bad goes up to the Board.","rbi_paragraph":"Para 78","rbi_char_offset":57844,"weight":"BACKGROUND","role":"Board","team":null,"products_covered":[],"products_excluded":[],"bankpulse_example":null,"anchor":"https://bankpulse.ai/rule/md12941#p61","layer":"bankpulse"},{"n":1,"claim":"md12941-905d898b","page_group":"Chapter V. Repeal and Other Provisions","stored_section":"WHAT IT REPLACES","heading":"Older rules cancelled","plain_english":"This document cancels all older outsourcing rules for commercial banks.","rbi_paragraph":"Para 100","rbi_char_offset":75029,"weight":"BACKGROUND","role":"All staff","team":null,"products_covered":[],"products_excluded":[],"bankpulse_example":null,"anchor":"https://bankpulse.ai/rule/md12941#p62","layer":"bankpulse"},{"n":2,"claim":"md12941-30fee77a","page_group":"Chapter V. Repeal and Other Provisions","stored_section":"WHAT IT REPLACES","heading":"Old cases continue","plain_english":"Action already taken under the old rules stays governed by them.","rbi_paragraph":"Para 101","rbi_char_offset":75439,"weight":"BACKGROUND","role":"All staff","team":null,"products_covered":[],"products_excluded":[],"bankpulse_example":null,"anchor":"https://bankpulse.ai/rule/md12941#p63","layer":"bankpulse"}],"actions":[],"amendments":[],"layers":{"rbi_source":"Facts taken from RBI's own document.","bankpulse":"BankPulse's plain-English summary of RBI's document.","bankpulse_inference":"BankPulse's own inference, not stated by RBI."},"rbi_wording_not_included":"By design. BankPulse never republishes RBI's exact sentences. Use rbi_paragraph with rbi_source.url to read RBI's own words.","terms":"BankPulse's plain-English summaries are BankPulse's own work. The underlying regulation is the Reserve Bank of India's. Always check the RBI document named in rbi_source before acting."}