On 15 January 2021, the Delhi High Court directed the government and the Reserve Bank of India (RBI) to respond to a writ petition filed by Dharanidhar Karimojji (petition) seeking the regulation of digital lending platforms in India. The petition emphasizes the need to regulate interest rates and charges payable on mobile application-based lending platforms; to ensure the protection of the data of borrowers and application users, and to route lending activities only through RBI-regulated channels and entities. Coincidentally, the RBI set up a working group on digital lending on 13 January 2021 (working group), to review digital lending activities by regulated as well as unregulated market participants, and to devise a suitable regulatory approach.
In its November 2020 publication FinTech: The Force of Creative Disruption (fintech bulletin) the RBI recognized fintech, including technological innovations in lending, as a contributor to the financial sector through cost optimisation, better customer service and financial inclusion. Recent events involving a few bad actors engaged in unlawful collection practices and the misuse of personal data in the digital lending space, have however raised questions as to whether digital lending should be subject to greater regulation. The RBI, in a June 2020 circular (fair practices circular) had already required banks and non-banking financial companies (NBFC) lending through owned or outsourced digital lending platforms, to adhere strictly to the fair practices code guidelines and the regulatory framework surrounding the outsourcing of financial and IT services. Following a surge in the number of mobile-based lending applications, the RBI issued a press release on 23 December 2020, cautioning the public against unauthorised digital lending platforms. The working group’s recommendations will be released in April 2021, and the outcome of the petition is also awaited. It is likely that the sector will see greater regulation. The RBI may choose to regulate intermediaries through the banks and NBFCs already operating in this space.
In the fintech bulletin, the RBI noted that most external jurisdictions have no specialized regulatory frameworks for fintech lending. In India, all digital lending products involve the actual lending being done by a bank or NBFC, with intermediaries adding value. Credit and data analysis, the creation of new customer distribution channels, the management of the technology platform and post-disbursement servicing are often performed by intermediaries. In the fair practices circular, the RBI emphasized the importance of transparency when delivering digital lending products, and required banks and NBFCs to have in place systems to oversee the working of intermediaries with whom they partner.
Instead of directly regulating intermediaries, any new digital lending regulatory framework should ideally follow the same model, that is to require the licensed lending entity (bank or NBFC) to broadly supervise partner technology platforms, where such platforms assist with credit scoring and loan disbursement or collection. Areas of digital lending not currently covered by existing bricks and mortar lending rules that may see greater regulation include disclosure around the role and functionality of intermediaries; a comprehensive framework for data collection and processing, and a fair practices code in respect of digital loan recovery tools.
The Personal Data Protection Bill, 2019 (PDP bill), once enacted will put in place a much needed comprehensive framework for data privacy and protection that regulates the access, use, processing and storage of the personal data of individuals. Customers must be made aware of, and must clearly consent to the nature of the data collected by a bank, NBFC or financial services provider; the purpose for which such data has been collected and will be processed; the period for which such data will be stored, and the third parties with whom this data may be shared.
Digital lenders have played a key role in providing credit to traditionally underbanked sectors and segments, such as micro, small and medium enterprises and retail customers that may not have a strong credit history. It is important for any new regulation to strike a balance between protecting consumers and allowing digital lenders to innovate, partner with technology platforms that enable wider access to credit and, most critically, access and analyze data that result in customized financial solutions.
Once enacted, the framework in the PDP bill will be a useful tool to regulate and control access to data by lending platforms. For instance, the PDP bill proposes awarding a data trust score, that is a score given to a data-handling platform by an independent data auditor. This will represent the degree of compliance with the requirements of the PDP bill by the platform. The regulator may consider linking the access to Aadhaar-based [the national personal identification system] e-KYC and other sensitive data by digital lending platforms to such a score. This will not only protect customer data but will also incentivize lending platforms to implement strong data protection systems and controls.
Digital lenders have played a critical role in widening the reach of credit products and lowering the cost of borrowing for many segments, a particularly important goal in an economy struggling with the stresses of COVID-19. An enabling regulatory framework can help the sector enter its next phase of growth.
This article was originally published in India Business Law Journal on 24 February 2021 Co-written by: Shilpa Mankar Ahluwalia, Partner; Vrinda Pareek, Associate. Click here for original article
Contributed by: Shilpa Mankar Ahluwalia, Partner; Vrinda Pareek, Associate
This is intended for general information purposes only. The views and opinions expressed in this article are those of the author/authors and does not necessarily reflect the views of the firm.
The Bar Council of India does not permit solicitation of work and advertising by legal practitioners and advocates. By accessing the Shardul Amarchand Mangaldas & Co. website (our website), the user acknowledges that: