{"what_this_is":"The machine-readable twin of the BankPulse page for one RBI rulebook. Same points, same dates, same paragraph references as the page a person reads. RBI's own wording is not reproduced here: each point names the RBI paragraph, the character offset into the text BankPulse read and the sha256 of that text, so the claim can be checked against RBI's own document.","schema_version":1,"release_id":"d653cdb0a5","generated_at":"2026-09-15T00:33:59.117975+00:00","id":"md13012","title":"Reserve Bank of India (Urban Co-operative Banks – Managing Risks in Outsourcing) Directions, 2025","document_kind":"Directions","page":"https://bankpulse.ai/rule/md13012","status":"In force","importance":{"code":"MR","label":"MUST READ","weight":"Must read","why":"Binding RBI Directions naming this institution class in the title","layer":"bankpulse_inference"},"applies_to":{"shown":"Urban co-operative banks","class_code":"UCB","from":"the document's own title","layer":"bankpulse_inference"},"dates":{"prid":"md13012","mode":"four_dates_v1","published":{"label":"Published","value":"November 28, 2025","stated":true,"why":"The day RBI put this document out."},"effective":{"label":"Starts to apply","value":"","stated":false,"why":"Not stated separately in this document. Read the rule itself before you assume a start date."},"transition":{"label":"Time to get ready","value":"","stated":false,"why":"Cannot be worked out until the day it starts to apply is known."},"deadline":{"label":"Last date to act","value":"April 10, 2026","stated":true,"why":"The day by which the work this rule asks for must be finished."},"sources":{"published":"doc_date in data/highlights/md13012.json","effective":"none held","transition":"none held","deadline":"data/date_kinds.json kind=compliance_deadline"}},"rbi_source":{"url":"https://rbi.org.in/Scripts/BS_ViewMasDirections.aspx?id=13012","document_date":"November 28, 2025","read_by_bankpulse":"2026-08-21 16:18:47 UTC","text_sha256":"0b2aceb5ae0f000c17230550e411f29fe38cf3bc8e944b6ad678d5228994c4ec","word_count":null,"standing_last_checked":"Standing checked on RBI’s Master Directions index, 15 September 2026, 5:58 am IST."},"counts":{"points_shown":67,"points_naming_an_rbi_paragraph":67,"points_stored":67,"actions":0,"amendments":0},"points":[{"n":1,"claim":"md13012-4384b020","page_group":"Chapter I. Preliminary","stored_section":"WHAT CHANGES","heading":"Deadline for existing deals","plain_english":"Existing IT outsourcing deals must follow these rules by April 10, 2026, or renewal, whichever comes first.","rbi_paragraph":"Para 2","rbi_char_offset":4773,"weight":"MUST KNOW","role":"All staff","team":null,"products_covered":[],"products_excluded":[],"bankpulse_example":null,"anchor":"https://bankpulse.ai/rule/md13012#p1","layer":"bankpulse"},{"n":2,"claim":"md13012-869ae01a","page_group":"Chapter I. Preliminary","stored_section":"WHAT CHANGES","heading":"New deals","plain_english":"New IT outsourcing deals must follow the rules from the day they are signed.","rbi_paragraph":"Para 2","rbi_char_offset":4907,"weight":"DO IT","role":"All staff","team":null,"products_covered":[],"products_excluded":[],"bankpulse_example":null,"anchor":"https://bankpulse.ai/rule/md13012#p2","layer":"bankpulse"},{"n":3,"claim":"md13012-2d4f093e","page_group":"Chapter I. Preliminary","stored_section":"THE CORE IDEA","heading":"Outsourcing rules for UCBs","plain_english":"This document sets the outsourcing rules for urban co-operative banks.","rbi_paragraph":"Para 1","rbi_char_offset":4292,"weight":"BACKGROUND","role":"All staff","team":null,"products_covered":[],"products_excluded":[],"bankpulse_example":null,"anchor":"https://bankpulse.ai/rule/md13012#p3","layer":"bankpulse"},{"n":4,"claim":"md13012-1840df20","page_group":"Chapter I. Preliminary","stored_section":"KEY DATES","heading":"Start date","plain_english":"These Directions came into effect on the day the Reserve Bank issued them.","rbi_paragraph":"Para 2","rbi_char_offset":4442,"weight":"BACKGROUND","role":"All staff","team":null,"products_covered":[],"products_excluded":[],"bankpulse_example":null,"anchor":"https://bankpulse.ai/rule/md13012#p4","layer":"bankpulse"},{"n":5,"claim":"md13012-f14d856c","page_group":"Chapter I. Preliminary","stored_section":"WHO IT APPLIES TO","heading":"Who is covered","plain_english":"These Directions apply to every urban co-operative bank.","rbi_paragraph":"Para 3","rbi_char_offset":5343,"weight":"BACKGROUND","role":"All staff","team":null,"products_covered":[],"products_excluded":[],"bankpulse_example":null,"anchor":"https://bankpulse.ai/rule/md13012#p5","layer":"bankpulse"},{"n":6,"claim":"md13012-2730a10d","page_group":"Chapter I. Preliminary","stored_section":"WHO IT APPLIES TO","heading":"Tier-3 and Tier-4 scope","plain_english":"IT outsourcing rules under Chapter IV apply only to Tier-3 and Tier-4 UCBs.","rbi_paragraph":"Para 3","rbi_char_offset":5696,"weight":"BACKGROUND","role":"All staff","team":null,"products_covered":[],"products_excluded":[],"bankpulse_example":null,"anchor":"https://bankpulse.ai/rule/md13012#p6","layer":"bankpulse"},{"n":7,"claim":"md13012-2d42515e","page_group":"Chapter I. Preliminary","stored_section":"WHO IT APPLIES TO","heading":"Services excluded","plain_english":"Courier, catering, housekeeping, security, and the moving and storing of records are not covered.","rbi_paragraph":"Para 4(1)","rbi_char_offset":7314,"weight":"BACKGROUND","role":"All staff","team":null,"products_covered":[],"products_excluded":[],"bankpulse_example":null,"anchor":"https://bankpulse.ai/rule/md13012#p7","layer":"bankpulse"},{"n":8,"claim":"md13012-6a63ad30","page_group":"Chapter I. Preliminary","stored_section":"WHO IT APPLIES TO","heading":"Material IT outsourcing only","plain_english":"IT outsourcing rules apply to material IT outsourcing, not a size-based tier.","rbi_paragraph":"Para 5(1)","rbi_char_offset":7569,"weight":"BACKGROUND","role":"All staff","team":null,"products_covered":[],"products_excluded":[],"bankpulse_example":null,"anchor":"https://bankpulse.ai/rule/md13012#p8","layer":"bankpulse"},{"n":1,"claim":"md13012-7bbc5e7f","page_group":"Chapter II. Role of the Board","stored_section":"WHO SHOULD ACT","heading":"Board-approved policy","plain_english":"The bank's Board must approve the outsourcing policy before outsourcing starts.","rbi_paragraph":"Para 10","rbi_char_offset":12021,"weight":"DO IT","role":"Board","team":null,"products_covered":[],"products_excluded":[],"bankpulse_example":null,"anchor":"https://bankpulse.ai/rule/md13012#p9","layer":"bankpulse"},{"n":1,"claim":"md13012-f3d77cc0","page_group":"Chapter III. Outsourcing of Financial Services","stored_section":"THE CORE IDEA","heading":"Functions never outsourced","plain_english":"A bank can never hand off internal audit, compliance checks, KYC decisions or loan sanctioning to an outsider.","rbi_paragraph":"Para 15","rbi_char_offset":16246,"weight":"MUST KNOW","role":"Audit","team":null,"products_covered":[],"products_excluded":[],"bankpulse_example":null,"anchor":"https://bankpulse.ai/rule/md13012#p10","layer":"bankpulse"},{"n":2,"claim":"md13012-0970d4d5","page_group":"Chapter III. Outsourcing of Financial Services","stored_section":"WHAT CHANGES","heading":"Director-owned vendors barred","plain_english":"A service provider cannot be owned or controlled by the bank's own director, officer or their relatives.","rbi_paragraph":"Para 18","rbi_char_offset":18841,"weight":"MUST KNOW","role":"Board","team":null,"products_covered":[],"products_excluded":[],"bankpulse_example":null,"anchor":"https://bankpulse.ai/rule/md13012#p11","layer":"bankpulse"},{"n":3,"claim":"md13012-08536b47","page_group":"Chapter III. Outsourcing of Financial Services","stored_section":"THE CORE IDEA","heading":"Contract risk named","plain_english":"There is a risk that the deal with the provider cannot be enforced.","rbi_paragraph":"Para 22","rbi_char_offset":22431,"weight":"MUST KNOW","role":"All staff","team":null,"products_covered":[],"products_excluded":[],"bankpulse_example":null,"anchor":"https://bankpulse.ai/rule/md13012#p12","layer":"bankpulse"},{"n":4,"claim":"md13012-dc39e37b","page_group":"Chapter III. Outsourcing of Financial Services","stored_section":"WHAT CHANGES","heading":"No mixing of records","plain_english":"Where a provider serves many firms, records must not be mixed.","rbi_paragraph":"Para 26","rbi_char_offset":23494,"weight":"MUST KNOW","role":"All staff","team":null,"products_covered":[],"products_excluded":[],"bankpulse_example":null,"anchor":"https://bankpulse.ai/rule/md13012#p13","layer":"bankpulse"},{"n":5,"claim":"md13012-c201b4a8","page_group":"Chapter III. Outsourcing of Financial Services","stored_section":"WHAT CHANGES","heading":"Breach disclosure","plain_english":"Banks must tell RBI immediately about any security breach or data leak.","rbi_paragraph":"Para 28","rbi_char_offset":23777,"weight":"MUST KNOW","role":"Technology","team":null,"products_covered":[],"products_excluded":[],"bankpulse_example":null,"anchor":"https://bankpulse.ai/rule/md13012#p14","layer":"bankpulse"},{"n":6,"claim":"md13012-ccda1262","page_group":"Chapter III. Outsourcing of Financial Services","stored_section":"IMPACT","heading":"Customer complaint rights","plain_english":"Outsourcing never removes a customer's right to complain against the bank.","rbi_paragraph":"Para 44","rbi_char_offset":33316,"weight":"MUST KNOW","role":"Branch","team":null,"products_covered":[],"products_excluded":[],"bankpulse_example":null,"anchor":"https://bankpulse.ai/rule/md13012#p15","layer":"bankpulse"},{"n":7,"claim":"md13012-17452e8a","page_group":"Chapter III. Outsourcing of Financial Services","stored_section":"WHAT CHANGES","heading":"Answer within thirty days","plain_english":"A complaint must be answered within 30 days at the most, and the procedure must sit on the website.","rbi_paragraph":"Para 47(3)","rbi_char_offset":35322,"weight":"MUST KNOW","role":"All staff","team":null,"products_covered":[],"products_excluded":[],"bankpulse_example":null,"anchor":"https://bankpulse.ai/rule/md13012#p16","layer":"bankpulse"},{"n":8,"claim":"md13012-3f06dbec","page_group":"Chapter III. Outsourcing of Financial Services","stored_section":"THE CORE IDEA","heading":"Control stays at home","plain_english":"The lender must keep full control of the work it gives out.","rbi_paragraph":"Para 17","rbi_char_offset":17769,"weight":"DO IT","role":"All staff","team":null,"products_covered":[],"products_excluded":[],"bankpulse_example":null,"anchor":"https://bankpulse.ai/rule/md13012#p17","layer":"bankpulse"},{"n":9,"claim":"md13012-35c290f0","page_group":"Chapter III. Outsourcing of Financial Services","stored_section":"WHO SHOULD ACT","heading":"Nine risks to weigh","plain_english":"Nine named risks must be weighed before work is given out.","rbi_paragraph":"Para 22","rbi_char_offset":20903,"weight":"DO IT","role":"All staff","team":null,"products_covered":[],"products_excluded":[],"bankpulse_example":null,"anchor":"https://bankpulse.ai/rule/md13012#p18","layer":"bankpulse"},{"n":10,"claim":"md13012-a24b90e9","page_group":"Chapter III. Outsourcing of Financial Services","stored_section":"WHO SHOULD ACT","heading":"Guard the customer data","plain_english":"Customer data held by the provider must be kept safe.","rbi_paragraph":"Para 23","rbi_char_offset":22820,"weight":"DO IT","role":"Technology","team":null,"products_covered":[],"products_excluded":[],"bankpulse_example":null,"anchor":"https://bankpulse.ai/rule/md13012#p19","layer":"bankpulse"},{"n":11,"claim":"md13012-07b1ff76","page_group":"Chapter III. Outsourcing of Financial Services","stored_section":"WHO SHOULD ACT","heading":"Watch their security","plain_english":"The lender must check the provider's safety steps often, and note any breach.","rbi_paragraph":"Para 25","rbi_char_offset":23152,"weight":"DO IT","role":"All staff","team":null,"products_covered":[],"products_excluded":[],"bankpulse_example":"A bank hires an outside firm to host its records. Signing the contract is not the end of it. The bank must review and monitor that provider's security practices and control processes on a regular basis.","anchor":"https://bankpulse.ai/rule/md13012#p20","layer":"bankpulse"},{"n":12,"claim":"md13012-0bc8f1a9","page_group":"Chapter III. Outsourcing of Financial Services","stored_section":"WHAT CHANGES","heading":"Keep our records separable","plain_english":"The provider must be able to pick out our records and assets.","rbi_paragraph":"Para 27","rbi_char_offset":23620,"weight":"DO IT","role":"All staff","team":null,"products_covered":[],"products_excluded":[],"bankpulse_example":null,"anchor":"https://bankpulse.ai/rule/md13012#p21","layer":"bankpulse"},{"n":13,"claim":"md13012-282daba2","page_group":"Chapter III. Outsourcing of Financial Services","stored_section":"WHO SHOULD ACT","heading":"Lawyer must vet it","plain_english":"A lawyer must check the written deal and say it will hold.","rbi_paragraph":"Para 29","rbi_char_offset":24175,"weight":"DO IT","role":"All staff","team":null,"products_covered":[],"products_excluded":[],"bankpulse_example":null,"anchor":"https://bankpulse.ai/rule/md13012#p22","layer":"bankpulse"},{"n":14,"claim":"md13012-dec65ace","page_group":"Chapter III. Outsourcing of Financial Services","stored_section":"WHAT CHANGES","heading":"Agreement must handle risk","plain_english":"The deal must name the risks and say how they will be held down.","rbi_paragraph":"Para 29","rbi_char_offset":24256,"weight":"DO IT","role":"All staff","team":null,"products_covered":[],"products_excluded":[],"bankpulse_example":null,"anchor":"https://bankpulse.ai/rule/md13012#p23","layer":"bankpulse"},{"n":15,"claim":"md13012-84bbcbbb","page_group":"Chapter III. Outsourcing of Financial Services","stored_section":"WHAT CHANGES","heading":"Room to step in","plain_english":"The deal must leave room to step in to meet the law.","rbi_paragraph":"Para 29","rbi_char_offset":24519,"weight":"DO IT","role":"All staff","team":null,"products_covered":[],"products_excluded":[],"bankpulse_example":null,"anchor":"https://bankpulse.ai/rule/md13012#p24","layer":"bankpulse"},{"n":16,"claim":"md13012-eccbc0f6","page_group":"Chapter III. Outsourcing of Financial Services","stored_section":"WHAT CHANGES","heading":"Say what the relationship is","plain_english":"The deal must say whether the tie is agent and principal, or not.","rbi_paragraph":"Para 29","rbi_char_offset":24645,"weight":"DO IT","role":"All staff","team":null,"products_covered":[],"products_excluded":[],"bankpulse_example":null,"anchor":"https://bankpulse.ai/rule/md13012#p25","layer":"bankpulse"},{"n":17,"claim":"md13012-832de901","page_group":"Chapter III. Outsourcing of Financial Services","stored_section":"WHO SHOULD ACT","heading":"A structure to watch it","plain_english":"There must be a team in place to watch and steer the work given out.","rbi_paragraph":"Para 31","rbi_char_offset":27291,"weight":"DO IT","role":"All staff","team":null,"products_covered":[],"products_excluded":[],"bankpulse_example":null,"anchor":"https://bankpulse.ai/rule/md13012#p26","layer":"bankpulse"},{"n":18,"claim":"md13012-4e6d107a","page_group":"Chapter III. Outsourcing of Financial Services","stored_section":"WHO SHOULD ACT","heading":"Central outsourcing record","plain_english":"The bank must keep a central record of each material financial-services outsourcing deal. The Board and senior management review it.","rbi_paragraph":"Para 32","rbi_char_offset":27479,"weight":"DO IT","role":"Board","team":null,"products_covered":[],"products_excluded":[],"bankpulse_example":null,"anchor":"https://bankpulse.ai/rule/md13012#p27","layer":"bankpulse"},{"n":19,"claim":"md13012-b6f33016","page_group":"Chapter III. Outsourcing of Financial Services","stored_section":"KEY DATES","heading":"A yearly financial review","plain_english":"The provider's money and work health must be checked at least once a year.","rbi_paragraph":"Para 34","rbi_char_offset":28077,"weight":"DO IT","role":"All staff","team":null,"products_covered":[],"products_excluded":[],"bankpulse_example":null,"anchor":"https://bankpulse.ai/rule/md13012#p28","layer":"bankpulse"},{"n":20,"claim":"md13012-62c18f4b","page_group":"Chapter III. Outsourcing of Financial Services","stored_section":"WHAT CHANGES","heading":"Report any slippage","plain_english":"The review must bring out any drop in service, secrecy or safety.","rbi_paragraph":"Para 34","rbi_char_offset":28360,"weight":"DO IT","role":"Compliance","team":null,"products_covered":[],"products_excluded":[],"bankpulse_example":null,"anchor":"https://bankpulse.ai/rule/md13012#p29","layer":"bankpulse"},{"n":21,"claim":"md13012-822c81a3","page_group":"Chapter III. Outsourcing of Financial Services","stored_section":"WHO SHOULD ACT","heading":"Reconcile in time","plain_english":"Deals with the provider and its helpers must be matched up on time.","rbi_paragraph":"Para 35","rbi_char_offset":28695,"weight":"DO IT","role":"All staff","team":null,"products_covered":[],"products_excluded":[],"bankpulse_example":null,"anchor":"https://bankpulse.ai/rule/md13012#p30","layer":"bankpulse"},{"n":22,"claim":"md13012-6e8b8e66","page_group":"Chapter III. Outsourcing of Financial Services","stored_section":"WHO SHOULD ACT","heading":"Test it together","plain_english":"The provider must test the plan from time to time, and joint drills may be held.","rbi_paragraph":"Para 36","rbi_char_offset":29260,"weight":"DO IT","role":"All staff","team":null,"products_covered":[],"products_excluded":[],"bankpulse_example":null,"anchor":"https://bankpulse.ai/rule/md13012#p31","layer":"bankpulse"},{"n":23,"claim":"md13012-a44e5502","page_group":"Chapter III. Outsourcing of Financial Services","stored_section":"WHO SHOULD ACT","heading":"Have a way back","plain_english":"The backup plan must look at another provider, or taking the work back.","rbi_paragraph":"Para 37","rbi_char_offset":29585,"weight":"DO IT","role":"All staff","team":null,"products_covered":[],"products_excluded":[],"bankpulse_example":null,"anchor":"https://bankpulse.ai/rule/md13012#p32","layer":"bankpulse"},{"n":24,"claim":"md13012-ce827836","page_group":"Chapter III. Outsourcing of Financial Services","stored_section":"WHO SHOULD ACT","heading":"Watch the host country","plain_english":"Where a provider is abroad, its country's rule and politics must be watched.","rbi_paragraph":"Para 42","rbi_char_offset":31409,"weight":"DO IT","role":"All staff","team":null,"products_covered":[],"products_excluded":[],"bankpulse_example":null,"anchor":"https://bankpulse.ai/rule/md13012#p33","layer":"bankpulse"},{"n":25,"claim":"md13012-af4b7f59","page_group":"Chapter III. Outsourcing of Financial Services","stored_section":"WHAT CHANGES","heading":"Tell the customer","plain_english":"Where a customer must deal with a provider, the leaflet must say so.","rbi_paragraph":"Para 45","rbi_char_offset":33637,"weight":"DO IT","role":"Branch","team":null,"products_covered":[],"products_excluded":[],"bankpulse_example":null,"anchor":"https://bankpulse.ai/rule/md13012#p34","layer":"bankpulse"},{"n":26,"claim":"md13012-5bf1b3df","page_group":"Chapter III. Outsourcing of Financial Services","stored_section":"WHO SHOULD ACT","heading":"Grievances without delay","plain_english":"The named officer must see that real customer complaints are put right fast.","rbi_paragraph":"Para 47(2)","rbi_char_offset":35027,"weight":"DO IT","role":"Branch","team":null,"products_covered":[],"products_excluded":[],"bankpulse_example":null,"anchor":"https://bankpulse.ai/rule/md13012#p35","layer":"bankpulse"},{"n":27,"claim":"md13012-36a4aa32","page_group":"Chapter III. Outsourcing of Financial Services","stored_section":"WHO SHOULD ACT","heading":"Hiring former employees","plain_english":"Former employees can be hired only if the Audit Committee confirms no in-house expertise exists.","rbi_paragraph":"Para 15","rbi_char_offset":16620,"weight":"BACKGROUND","role":"Audit","team":null,"products_covered":[],"products_excluded":[],"bankpulse_example":null,"anchor":"https://bankpulse.ai/rule/md13012#p36","layer":"bankpulse"},{"n":28,"claim":"md13012-0022d75c","page_group":"Chapter III. Outsourcing of Financial Services","stored_section":"THE CORE IDEA","heading":"Duties do not move out","plain_english":"Giving work out does not cut what the lender owes its customers or RBI.","rbi_paragraph":"Para 17","rbi_char_offset":17287,"weight":"BACKGROUND","role":"All staff","team":null,"products_covered":[],"products_excluded":[],"bankpulse_example":null,"anchor":"https://bankpulse.ai/rule/md13012#p37","layer":"bankpulse"},{"n":29,"claim":"md13012-3fd0884e","page_group":"Chapter III. Outsourcing of Financial Services","stored_section":"THE CORE IDEA","heading":"Agent conduct liability","plain_english":"Banks stay responsible for what their sales agents and recovery agents do.","rbi_paragraph":"Para 17","rbi_char_offset":17498,"weight":"BACKGROUND","role":"All staff","team":null,"products_covered":[],"products_excluded":[],"bankpulse_example":null,"anchor":"https://bankpulse.ai/rule/md13012#p38","layer":"bankpulse"},{"n":30,"claim":"md13012-406369b8","page_group":"Chapter III. Outsourcing of Financial Services","stored_section":"WHO SHOULD ACT","heading":"Suspicious reports stay ours","plain_english":"Cash and suspicious deal reports stay the lender's own job.","rbi_paragraph":"Para 19","rbi_char_offset":19105,"weight":"BACKGROUND","role":"Compliance","team":null,"products_covered":[],"products_excluded":[],"bankpulse_example":null,"anchor":"https://bankpulse.ai/rule/md13012#p39","layer":"bankpulse"},{"n":31,"claim":"md13012-54d538c1","page_group":"Chapter III. Outsourcing of Financial Services","stored_section":"THE CORE IDEA","heading":"Compliance risk named","plain_english":"There is a risk that giving work out breaks privacy or other law.","rbi_paragraph":"Para 22","rbi_char_offset":21401,"weight":"BACKGROUND","role":"All staff","team":null,"products_covered":[],"products_excluded":[],"bankpulse_example":null,"anchor":"https://bankpulse.ai/rule/md13012#p40","layer":"bankpulse"},{"n":32,"claim":"md13012-c328d2b4","page_group":"Chapter III. Outsourcing of Financial Services","stored_section":"WHAT CHANGES","heading":"Need to know only","plain_english":"A provider's staff may see customer data only where the job needs it.","rbi_paragraph":"Para 24","rbi_char_offset":23006,"weight":"BACKGROUND","role":"Technology","team":null,"products_covered":[],"products_excluded":[],"bankpulse_example":null,"anchor":"https://bankpulse.ai/rule/md13012#p41","layer":"bankpulse"},{"n":33,"claim":"md13012-88d20385","page_group":"Chapter III. Outsourcing of Financial Services","stored_section":"IMPACT","heading":"Data leak liability","plain_english":"If customer data leaks through a vendor, the bank is liable to customers for damage.","rbi_paragraph":"Para 28","rbi_char_offset":23907,"weight":"BACKGROUND","role":"Technology","team":null,"products_covered":[],"products_excluded":[],"bankpulse_example":null,"anchor":"https://bankpulse.ai/rule/md13012#p42","layer":"bankpulse"},{"n":34,"claim":"md13012-4004dcc5","page_group":"Chapter III. Outsourcing of Financial Services","stored_section":"WHAT CHANGES","heading":"Half-yearly record review","plain_english":"Outsourcing records go for half-yearly review by the Board too.","rbi_paragraph":"Para 32","rbi_char_offset":27692,"weight":"BACKGROUND","role":"Board","team":null,"products_covered":[],"products_excluded":[],"bankpulse_example":null,"anchor":"https://bankpulse.ai/rule/md13012#p43","layer":"bankpulse"},{"n":35,"claim":"md13012-ca44080f","page_group":"Chapter III. Outsourcing of Financial Services","stored_section":"WHAT CHANGES","heading":"Only confidential jurisdictions","plain_english":"Work may go abroad only to a country that upholds secrecy terms.","rbi_paragraph":"Para 41","rbi_char_offset":31259,"weight":"BACKGROUND","role":"All staff","team":null,"products_covered":[],"products_excluded":[],"bankpulse_example":null,"anchor":"https://bankpulse.ai/rule/md13012#p44","layer":"bankpulse"},{"n":36,"claim":"md13012-b6872029","page_group":"Chapter III. Outsourcing of Financial Services","stored_section":"THE CORE IDEA","heading":"The stricter rule wins","plain_english":"Where these rules and the host country's differ, the stricter one wins.","rbi_paragraph":"Para 43","rbi_char_offset":33116,"weight":"BACKGROUND","role":"All staff","team":null,"products_covered":[],"products_excluded":[],"bankpulse_example":null,"anchor":"https://bankpulse.ai/rule/md13012#p45","layer":"bankpulse"},{"n":37,"claim":"md13012-0d9593fb","page_group":"Chapter III. Outsourcing of Financial Services","stored_section":"IMPACT","heading":"Complaint responsibility","plain_english":"The bank alone is responsible for fixing complaints about outsourced services.","rbi_paragraph":"Para 46","rbi_char_offset":34044,"weight":"BACKGROUND","role":"All staff","team":null,"products_covered":[],"products_excluded":[],"bankpulse_example":null,"anchor":"https://bankpulse.ai/rule/md13012#p46","layer":"bankpulse"},{"n":1,"claim":"md13012-e11e1c61","page_group":"Chapter IV. Outsourcing of Information Technology (IT) Services","stored_section":"WHAT CHANGES","heading":"Cyber incident reporting","plain_english":"Banks must tell RBI about a cyber incident within six hours of learning about it.","rbi_paragraph":"Para 51","rbi_char_offset":39625,"weight":"MUST KNOW","role":"Compliance","team":null,"products_covered":[],"products_excluded":[],"bankpulse_example":null,"anchor":"https://bankpulse.ai/rule/md13012#p47","layer":"bankpulse"},{"n":2,"claim":"md13012-683c9d24","page_group":"Chapter IV. Outsourcing of Information Technology (IT) Services","stored_section":"WHAT CHANGES","heading":"Nothing deleted in transition","plain_english":"The provider may not wipe or change data while the work is being moved.","rbi_paragraph":"Para 81","rbi_char_offset":57668,"weight":"MUST KNOW","role":"Technology","team":null,"products_covered":[],"products_excluded":[],"bankpulse_example":null,"anchor":"https://bankpulse.ai/rule/md13012#p48","layer":"bankpulse"},{"n":3,"claim":"md13012-c53e9b46","page_group":"Chapter IV. Outsourcing of Information Technology (IT) Services","stored_section":"WHO SHOULD ACT","heading":"Weigh the IT case","plain_english":"The case for giving out an IT job must be weighed against its risks.","rbi_paragraph":"Para 50","rbi_char_offset":39142,"weight":"DO IT","role":"All staff","team":null,"products_covered":[],"products_excluded":[],"bankpulse_example":null,"anchor":"https://bankpulse.ai/rule/md13012#p49","layer":"bankpulse"},{"n":4,"claim":"md13012-917f0563","page_group":"Chapter IV. Outsourcing of Information Technology (IT) Services","stored_section":"WHO SHOULD ACT","heading":"Due diligence each renewal","plain_english":"The provider must be checked when hired and again at each renewal.","rbi_paragraph":"Para 53","rbi_char_offset":40867,"weight":"DO IT","role":"All staff","team":null,"products_covered":[],"products_excluded":[],"bankpulse_example":"A bank's outsourcing arrangement comes up for renewal after three years. Due diligence is done again, not only when it was first signed. The question each time is whether the service provider can still meet the obligations.","anchor":"https://bankpulse.ai/rule/md13012#p50","layer":"bankpulse"},{"n":5,"claim":"md13012-fb64df1e","page_group":"Chapter IV. Outsourcing of Information Technology (IT) Services","stored_section":"WHO SHOULD ACT","heading":"Look outside as well","plain_english":"Outside reviews and market feedback should back up our own checks.","rbi_paragraph":"Para 55","rbi_char_offset":42405,"weight":"DO IT","role":"All staff","team":null,"products_covered":[],"products_excluded":[],"bankpulse_example":"A bank's own checks on a provider are not the whole picture. It also obtains independent reviews and market feedback on that service provider. Those supplement the findings of its own due diligence.","anchor":"https://bankpulse.ai/rule/md13012#p51","layer":"bankpulse"},{"n":6,"claim":"md13012-1643a825","page_group":"Chapter IV. Outsourcing of Information Technology (IT) Services","stored_section":"WHO SHOULD ACT","heading":"Systems must fit","plain_english":"The provider's systems must work with ours, and their service must be good enough.","rbi_paragraph":"Para 56","rbi_char_offset":42551,"weight":"DO IT","role":"Technology","team":null,"products_covered":[],"products_excluded":[],"bankpulse_example":null,"anchor":"https://bankpulse.ai/rule/md13012#p52","layer":"bankpulse"},{"n":7,"claim":"md13012-1d593a0e","page_group":"Chapter IV. Outsourcing of Information Technology (IT) Services","stored_section":"WHO SHOULD ACT","heading":"A framework for IT risk","plain_english":"A risk plan must cover how IT risks are found, sized and reported.","rbi_paragraph":"Para 59","rbi_char_offset":45379,"weight":"DO IT","role":"Compliance","team":null,"products_covered":[],"products_excluded":[],"bankpulse_example":null,"anchor":"https://bankpulse.ai/rule/md13012#p53","layer":"bankpulse"},{"n":8,"claim":"md13012-6080f5b4","page_group":"Chapter IV. Outsourcing of Information Technology (IT) Services","stored_section":"WHO SHOULD ACT","heading":"Too much with one provider","plain_english":"The lender must weigh the risk of leaning on one provider too much.","rbi_paragraph":"Para 61","rbi_char_offset":45952,"weight":"DO IT","role":"All staff","team":null,"products_covered":[],"products_excluded":[],"bankpulse_example":null,"anchor":"https://bankpulse.ai/rule/md13012#p54","layer":"bankpulse"},{"n":9,"claim":"md13012-5ab9b43d","page_group":"Chapter IV. Outsourcing of Information Technology (IT) Services","stored_section":"WHAT CHANGES","heading":"Put it in writing","plain_english":"What each side owes the other must be set out in a written deal that binds.","rbi_paragraph":"Para 67","rbi_char_offset":49118,"weight":"DO IT","role":"All staff","team":null,"products_covered":[],"products_excluded":[],"bankpulse_example":null,"anchor":"https://bankpulse.ai/rule/md13012#p55","layer":"bankpulse"},{"n":10,"claim":"md13012-d803799e","page_group":"Chapter IV. Outsourcing of Information Technology (IT) Services","stored_section":"WHO SHOULD ACT","heading":"Audit the provider","plain_english":"The lender must audit the provider and anyone it hires.","rbi_paragraph":"Para 70","rbi_char_offset":53368,"weight":"DO IT","role":"Audit","team":null,"products_covered":[],"products_excluded":[],"bankpulse_example":null,"anchor":"https://bankpulse.ai/rule/md13012#p56","layer":"bankpulse"},{"n":11,"claim":"md13012-57a64bad","page_group":"Chapter IV. Outsourcing of Information Technology (IT) Services","stored_section":"WHO SHOULD ACT","heading":"An inventory of IT services","plain_english":"The lender must keep a list of the IT jobs it has given out.","rbi_paragraph":"Para 76","rbi_char_offset":56069,"weight":"DO IT","role":"All staff","team":null,"products_covered":[],"products_excluded":[],"bankpulse_example":null,"anchor":"https://bankpulse.ai/rule/md13012#p57","layer":"bankpulse"},{"n":12,"claim":"md13012-d28e8205","page_group":"Chapter IV. Outsourcing of Information Technology (IT) Services","stored_section":"WHO SHOULD ACT","heading":"Map the dependency","plain_english":"The lender must map how much it leans on outside firms.","rbi_paragraph":"Para 76","rbi_char_offset":56218,"weight":"DO IT","role":"All staff","team":null,"products_covered":[],"products_excluded":[],"bankpulse_example":null,"anchor":"https://bankpulse.ai/rule/md13012#p58","layer":"bankpulse"},{"n":13,"claim":"md13012-d27efed4","page_group":"Chapter IV. Outsourcing of Information Technology (IT) Services","stored_section":"WHAT CHANGES","heading":"Plan for each way out","plain_english":"The exit plan must cover each way the deal may end, and the time each needs.","rbi_paragraph":"Para 79","rbi_char_offset":57080,"weight":"DO IT","role":"All staff","team":null,"products_covered":[],"products_excluded":[],"bankpulse_example":null,"anchor":"https://bankpulse.ai/rule/md13012#p59","layer":"bankpulse"},{"n":14,"claim":"md13012-c7e136c1","page_group":"Chapter IV. Outsourcing of Information Technology (IT) Services","stored_section":"WHO SHOULD ACT","heading":"Name the alternative","plain_english":"The exit plan must identify who else could do the work, or whether it comes back in-house.","rbi_paragraph":"Para 80","rbi_char_offset":57281,"weight":"DO IT","role":"All staff","team":null,"products_covered":[],"products_excluded":[],"bankpulse_example":null,"anchor":"https://bankpulse.ai/rule/md13012#p60","layer":"bankpulse"},{"n":15,"claim":"md13012-794d4ac5","page_group":"Chapter IV. Outsourcing of Information Technology (IT) Services","stored_section":"WHAT CHANGES","heading":"Destroy the data safely","plain_english":"The deal must say how data and records are to be wiped or destroyed.","rbi_paragraph":"Para 81","rbi_char_offset":57490,"weight":"DO IT","role":"Technology","team":null,"products_covered":[],"products_excluded":[],"bankpulse_example":null,"anchor":"https://bankpulse.ai/rule/md13012#p61","layer":"bankpulse"},{"n":16,"claim":"md13012-32a44372","page_group":"Chapter IV. Outsourcing of Information Technology (IT) Services","stored_section":"WHAT CHANGES","heading":"Must help the successor","plain_english":"The provider is bound to help the next provider hand over smoothly.","rbi_paragraph":"Para 82","rbi_char_offset":57872,"weight":"DO IT","role":"All staff","team":null,"products_covered":[],"products_excluded":[],"bankpulse_example":null,"anchor":"https://bankpulse.ai/rule/md13012#p62","layer":"bankpulse"},{"n":17,"claim":"md13012-b1036e06","page_group":"Chapter IV. Outsourcing of Information Technology (IT) Services","stored_section":"WHO SHOULD ACT","heading":"Announce the ending","plain_english":"Where a provider dealt with customers, the end of the deal must be made known.","rbi_paragraph":"Para 83","rbi_char_offset":58173,"weight":"DO IT","role":"All staff","team":null,"products_covered":[],"products_excluded":[],"bankpulse_example":null,"anchor":"https://bankpulse.ai/rule/md13012#p63","layer":"bankpulse"},{"n":18,"claim":"md13012-7c40ddec","page_group":"Chapter IV. Outsourcing of Information Technology (IT) Services","stored_section":"WHO SHOULD ACT","heading":"Joint vendor audits","plain_english":"CICs using the same vendor can share one joint audit instead of separate ones.","rbi_paragraph":"Para 71","rbi_char_offset":53940,"weight":"BACKGROUND","role":"Audit","team":null,"products_covered":[],"products_excluded":[],"bankpulse_example":null,"anchor":"https://bankpulse.ai/rule/md13012#p64","layer":"bankpulse"},{"n":19,"claim":"md13012-8ef4dca6","page_group":"Chapter IV. Outsourcing of Information Technology (IT) Services","stored_section":"WHO SHOULD ACT","heading":"Risk sets the audit cycle","plain_english":"How often the audit happens turns on the risk and what is at stake.","rbi_paragraph":"Para 72","rbi_char_offset":54473,"weight":"BACKGROUND","role":"Audit","team":null,"products_covered":[],"products_excluded":[],"bankpulse_example":null,"anchor":"https://bankpulse.ai/rule/md13012#p65","layer":"bankpulse"},{"n":1,"claim":"md13012-98a498c5","page_group":"Chapter V. Repeal and Other Provisions","stored_section":"WHAT IT REPLACES","heading":"Older rules cancelled","plain_english":"This document cancels all older outsourcing rules for commercial banks.","rbi_paragraph":"Para 91","rbi_char_offset":71101,"weight":"BACKGROUND","role":"All staff","team":null,"products_covered":[],"products_excluded":[],"bankpulse_example":null,"anchor":"https://bankpulse.ai/rule/md13012#p66","layer":"bankpulse"},{"n":2,"claim":"md13012-30fee77a","page_group":"Chapter V. Repeal and Other Provisions","stored_section":"WHAT IT REPLACES","heading":"Old cases continue","plain_english":"Action already taken under the old rules stays governed by them.","rbi_paragraph":"Para 92","rbi_char_offset":71529,"weight":"BACKGROUND","role":"All staff","team":null,"products_covered":[],"products_excluded":[],"bankpulse_example":null,"anchor":"https://bankpulse.ai/rule/md13012#p67","layer":"bankpulse"}],"actions":[],"amendments":[],"layers":{"rbi_source":"Facts taken from RBI's own document.","bankpulse":"BankPulse's plain-English summary of RBI's document.","bankpulse_inference":"BankPulse's own inference, not stated by RBI."},"rbi_wording_not_included":"By design. BankPulse never republishes RBI's exact sentences. Use rbi_paragraph with rbi_source.url to read RBI's own words.","terms":"BankPulse's plain-English summaries are BankPulse's own work. The underlying regulation is the Reserve Bank of India's. Always check the RBI document named in rbi_source before acting."}