Font size:
Print
Credit Information Reporting
Context:
The rapid expansion of fintech and the digital revolution have transformed financial transactions, credit access, and banking services in India.
More on News
- Innovations such as Aadhaar-based KYC (Know Your Customer), centralised credit databases, the Unified Payments Interface (UPI), and the Unified Lending Interface have enabled seamless transactions and quick credit approvals.
- However, with this growth comes increasing concerns about data privacy, identity theft, and inaccuracies in credit history, which can have serious consequences for consumers.
RBI’s Directive on Credit Information Reporting
-
- Credit Reporting: Recognising the risks associated with financial data misuse, the Reserve Bank of India (RBI) issued a master direction on January 6, 2025, regarding credit information reporting.
- Sharing Data: The central bank observed that Credit Information Companies (CICs) were sharing credit data based on individual consent with entities that are not designated as specified users.
- Given the sensitive nature of such data, the RBI has now mandated that CICs implement stricter controls to ensure responsible data-sharing.
- Key directives include:
-
- Establishing robust due diligence mechanisms when sharing credit information with non-specified entities.
- Conducting thorough evaluations of data-sharing entities to mitigate risks and prevent misuse.
- Currently, India has four RBI-registered CICs: CRIF High Mark, Equifax, Experian, and TransUnion CIBIL.
Role of Credit Information and CICs
- Significance: Credit information is crucial for financial decision-making, risk assessment, and economic stability.
- Credit Reports: CICs collect data from banks, non-banking financial companies (NBFCs), and utility providers to generate comprehensive credit reports.
- These reports influence loan approvals, interest rates, and even employment opportunities.
- Need for Protection: However, with increased reliance on credit data comes the pressing need for stringent data protection measures.
- If compromised, such data can lead to identity theft, fraud, and reputational harm.
- Legislation: Although India introduced the Digital Personal Data Protection Act in 2023, its enforcement mechanisms remain ambiguous compared to global standards like the General Data Protection Regulation (GDPR) in the European Union.
Parliamentary Scrutiny and Regulatory Action
- Concerns about the accuracy and accountability of credit scores have been raised in Parliament.
- As of August 2024, over 110 million Indians had accessed their credit scores on CIBIL, with a notable 70% increase in women tracking their credit information. Given this surge, the RBI has emphasised the importance of safeguarding data privacy and reducing the market dominance of a few key players.
- To enforce compliance, the central bank has penalised CICs for past violations. Notable instances include:
- A ₹26 lakh fine on TransUnion CIBIL in 2023 for failing to maintain accurate and complete credit records.
- A ₹20 lakh penalty on Equifax in 2022 for non-compliance with data accuracy and consumer grievance redress norms.
- A ₹15 lakh fine on CRIF High Mark in 2021 for deficiencies in data protection.
High Profit Margins and the Need for Greater Accountability
- CICs in India operate with high profit margins, with a significant portion of ownership held by foreign parent companies.
- For example, TransUnion CIBIL reported ₹1,430 crore in revenue and ₹656 crore in profit after tax for FY23.
- Given these substantial earnings, CICs must demonstrate greater transparency, accountability, and adherence to Indian regulations to justify their profitability and uphold their social responsibility.
Challenges in Consumer Grievance Redressal
- Redressal: One of the major challenges in India’s financial data ecosystem is the inefficient grievance redress mechanism for consumers facing credit report inaccuracies.
- Errors: Errors such as misreported defaults, outdated credit histories, and incorrect loan accounts are common, yet disputing and correcting them is often a complex, opaque, and time-consuming process.
- Unawareness: Many consumers remain unaware of their rights and the steps to rectify discrepancies in their credit reports.
- To address these challenges, the RBI has outlined a compensation framework for customers affected by delayed credit data updates. However, further improvements are necessary:
- Strengthening RBI oversight to ensure strict compliance with grievance redress norms.
- Implementing efficient, transparent, and time-bound processes for resolving credit report disputes.
- Enhancing financial literacy initiatives to educate consumers about their credit data rights and correction procedures.
