Kerala HC: Physiotherapists and Occupational Therapists Cannot Use “Dr.” Without Medical Degree  ||  Delhi High Court: Law Firms Must Verify Cited Case Laws; Senior Counsel Not Responsible for Finality  ||  MP High Court Dismisses Shah Bano’s Daughter’s Plea, Rules ‘Haq’ Movie is Fiction  ||  Bombay HC Cancels ERC Order, Rules Stakeholders Must Be Heard Before Amending Multi-Year Tariff  ||  Calcutta High Court Rules Dunlop’s Second Appeal Not Maintainable under the Trade Marks Act  ||  Kerala HC: Revisional Power U/S 263 Not Invocable When AO Grants Sec 32AC Deduction After Inquiry  ||  J&K&L HC: Section 359 BNSS Doesn’t Limit High Court’s Inherent Power U/S 528 to Quash FIRs  ||  Bombay HC: BMC Ban on Footpath Cooking via Gas/Grill Doesn’t Apply to Vendors Using Induction  ||  Madras HC: Buyer Not Liable for Seller’s Tax Default; Purchase Tax Can’t Be Imposed under TNGST Act  ||  Kerala HC: Oral Allegations Alone Insufficient to Sustain Bribery Charges Against Ministers    

Restriction on storage of actual card data- (Reserve Bank of India) (23 Dec 2021)

MANU/RMIC/0161/2021

Banking

1. In terms of our circular DPSS.CO.PD.No.1810/02.14.008/2019-20 dated March 17, 2020 on "Guidelines on Regulation of Payment Aggregators and Payment Gateways", the authorised non-bank payment aggregators and merchants on-boarded by them were prohibited from storing card data (CoF) from June 30, 2021. At the request of industry stakeholders, this timeline was extended to December 31, 2021 vide circular CO.DPSS.POLC.No.S33/02-14-008/2020-2021 dated March 31, 2021. Further, regulations on CoF Tokenisation (CoFT) were issued vide circular CO.DPSS.POLC.No.S-516/02-14-003/2021-22 dated September 07, 2021 on "Tokenisation - Card Transactions: Permitting Card-on-File Tokenisation (CoFT) Services".

2. In light of various representations received in this regard, we advise as under:

a. the timeline for storing of CoF data is extended by six months, i.e., till June 30, 2022; post this, such data shall be purged; and

b. in addition to tokenisation, industry stakeholders may devise alternate mechanism(s) to handle any use case (including recurring e-mandates, EMI option, etc.) or post-transaction activity (including chargeback handling, dispute resolution, reward / loyalty programme, etc.) that currently involves / requires storage of CoF data by entities other than card issuers and card networks.

3. This directive is issued under Section 10 (2) read with Section 18 of Payment and Settlement Systems Act, 2007 (Act 51 of 2007).

Tags : RESTRICTION   STORAGE   CARD DATA  

Share :        

Disclaimer | Copyright 2025 - All Rights Reserved