Archive · 23 Jul 2026
RBI's Data Governance Draft Sparks Compliance Spending by Banks
The Reserve Bank of India has proposed new rules for banks to better manage and protect their data.
This means banks will need to spend more money to hire new people like Chief Data Officers and set up systems to keep track of their data.
Some banks are already preparing for these changes, but experts say it will be a big task, especially for older banks with outdated systems.
The rules also make the board of directors responsible for data governance, which is a big change.
While banks understand the importance of these rules, they are also worried about the cost and the time it will take to implement them.
The rules are still in draft form, and banks are asking for more guidance on how to put them into practice.
RBI's proposed data governance framework requires banks to strengthen governance structures and modernize data architecture.
Banks are preparing to appoint Chief Data Officers and invest in data protection officers and consent management mechanisms.
The framework shifts data governance accountability to the boardroom, requiring board-approved governance frameworks.
Implementation challenges include rearchitecting legacy systems and ensuring compliance with the DPDP Act.
Experts suggest that the cost of compliance could be 5-10% of banks' operating costs.
- Who
- Reserve Bank of India (RBI), Banks, Non-Banking Financial Companies (NBFCs)
- What
- Proposed data governance framework by RBI
- When
- Draft norms released on July 15, comments invited by August 17
- Where
- India
- Why
- To strengthen data governance and promote sound data management practices across the data lifecycle
Proactive Compliance
Implementation Challenges
Necessity of Compliance
Proactive Compliance
Banks acknowledge the necessity of investing in data governance to enhance data security and comply with regulatory requirements.
Implementation Challenges
Experts highlight the significant challenges in implementing the framework, particularly in rearchitecting legacy systems and ensuring compliance with the DPDP Act.
Boardroom Accountability
Proactive Compliance
The draft norms formalize accountability at the board level, ensuring a structured governance framework across the data lifecycle.
Implementation Challenges
Implementing these requirements across legacy technology systems is seen as a complex and time-consuming process.
Cost of Compliance
Proactive Compliance
Banks are prepared to incur additional costs, viewing it as a necessary investment for data security and governance.
Implementation Challenges
The cost of compliance is estimated to be 5-10% of banks' operating costs, which could be a significant financial burden.
- Draft Norms Release Date
- July 15
- Comment Deadline
- August 17
- Estimated Compliance Cost
- 5-10% of operating costs
- Key Roles
- Chief Data Officer, Data Protection Officers, Data Stewards, Data Custodians
- Implementation Challenges
- Rearchitecting data architecture, maintaining end-to-end data lineage, ensuring compliance with DPDP Act