India: Draft Enabling Framework For Regulatory Sandbox

Last Updated: 8 May 2019
Article by Anuj Maharana

In July 2016 the Reserve Bank of India (RBI) had setup an inter-regulatory Working Group to look into and report on various aspects relating to fintech. One of the key recommendations of the Working Group was the introduction of an appropriate framework for a regulatory sandbox. Thus on 24th April 2019 the RBI has come out with a Draft Enabling Framework for Regulatory Sandbox ("Draft Framework").

Regulatory sandbox (RS) refers to live testing of new products or services in a controlled/ tested regulatory environment for which the regulators may permit certain relaxation in the regulations only for the limited purpose of testing. The RS allows the entities to test their product in a controlled environment before a wider-scale launch. Thus the RS at its core is a formal regulatory programme for market participants to test new products, services, business models with customers in a live environment subject to certain safeguards and oversights.  On the hand RBI in its Working Group Paper also discussed the concept of an 'innovation hub' which provides support, advice or guidance to regulated or unregulated firms in navigating the regulatory framework or identifying the legal issues.

Eligibility criteria of an applicant

The Draft Framework lays down the eligibility criteria for participating in the RS. The target applicants for entry in the RS are fintech firms which meet the prescribed conditions of a start-up by the Government. The focus of the RS is to encourage innovation where (a) there is an absence of regulations, (b) there is a need to temporarily ease the regulations for the proposed innovation, and (c) the proposed innovation shows promise of easing the delivery of financial services.

The RS shall begin the testing process with 10-12 selected entities through a comprehensive selection process which has been detailed under the 'Fit and Proper criteria for selection of participants in the RS'. Entities should satisfy the following conditions: (a)  the entity should be a company incorporated and registered in India and should be "Start up" , (b) the entity should have a minimum net worth of Rs 50 lakhs as per its latest audited balance sheet, (c) the promoters/ directors of the entity should be fit and proper and a declaration should be made to that effect, (d) the conduct of the bank accounts as well as the entity's promoters/directors should be satisfactory, (e) a satisfactory CIBIL or equivalent credit score of the promoters/directors of the entity is required, (f) applicant should showcase that their product/services and ready for deployment in the broader market, (g) entity should demonstrate arrangements to ensure compliance with regulations on consumer data protection and privacy, and (h) the entity should have adequate safeguards related to the IT system to ensure safety of data and records.

The fintech solution proposed by the applicant should highlight the existing gap in the financial system and demonstrate that there is a regulatory barrier that prevents the deployment of the product/service. Additionally, the applicant should clearly define the test scenarios and the expected outcomes from the sandbox experimentation and an acceptable exit and transition strategy in case the fintech driven solutions is discontinued or deployed on a broader scale after exiting the RS. To this effect the applicant is required to share the result of the proof of concept/ testing of use cases including any relevant prior experiences before getting admission into RS for testing.

Design features of the RS

The RS may run a few cohorts i.e. end-to-end sandbox process, with a limited number of entities in each cohort testing their products in a stipulated time. The RS shall be based on different subjects focusing on areas such as financial inclusion, payments, digital KYC, etc. Though these cohorts may run for varying time period but it should ordinarily be completed within 6 months.

The innovative products/services which could be considered for testing under RS would include retail payments, money transfer services, market places lending, digital KYC, financial advisory services, smart contract, cybersecurity products, etc. On the other hand, the innovative technology which could be considered for testing under RS would include data analytics, API services, applications using block chain, AI and machine learning applications and mobile technology applications.

Regulatory requirements for RS applicant and exclusions from RS

Mandatory regulatory requirements to be adhered by the applicants are: (a) customer privacy and data protection, (b) security of transactions, (c) KYC/ AML/ CFT requirements, (d) secure storage of and access to payment data of stakeholders, and (e) statutory requirements.

However, an entity would not be suitable for RS if the proposed financial service is similar to a product/service/technology which already is being offered in India unless the applicant can show that either a different technology is gainfully applied or the same technology is being used in a more effective and efficient manner. Accordingly, the Draft Regulations have put together an indicative negative list of products/ services/ technology which may not be accepted for testing. The list includes businesses related to credit registries, credit information, crypto-currency, initial coin offerings and chain marketing services.

Extending or Exiting the RS

In case the sandbox entity requires an extension of the sandbox period, it shall apply to the RBI within one (1) month before the expiration of the sandbox period. Further, RBI at its discretion can discontinue the RS testing for an entity if it does not achieve the intended purpose or if the entity is unable to comply with the relevant regulatory requirements.The sandbox entity may exit from the RS on its own by informing the RBI one week in advance.

Boundary conditions, transparency, and consumer protection

A sandbox must have a well-defined space and duration for the proposed financial services to be launched and the boundary conditions for the RS shall include the start and end date of RS, target customer type, limit the number of customers involved, transaction ceiling, and cap on customer. Further, RBI shall communicate the entire RS process including the launch, theme of the cohort, entry and exit criteria on its website to ensure transparency. And as stated earlier, before discontinuing/ exiting from the RS, the sandbox entity shall ensure that it meets all the existing obligations towards its customer's and entering into an RS does not limit the liability of the entity towards its customers.

Sandbox process and stages

The end to end sandbox process, including the test of the products/ services shall be overseen by the FinTech Unit (FTU) at RBI, and the stages involved in the RS are as follows:

  • Stage 1: Preliminary Screening (4 weeks) - FTU shall ensure that the applicant clearly understands the objectives and principles of the RS, and it is in this phase the application received by the FTU are evaluated and shortlisted who meet the eligibility criteria.
  • Stage 2: Testing Design (3 weeks)- In this phase which lasts for 3 weeks the FTU finalizes the test design through an iterative engagement with the applicant and shall identify the outcome metrics for evaluating the evidence of risk or benefits.
  • Stage 3: Application Assessment (3weeks) - In this phase the FTU vets the test design and proposes regulatory modifications if any.
  • Stage 4: Testing (12 weeks) - The testing may last for a maximum tenure for 12 weeks. In this phase, the FTU generates the empirical evidence to assess the test conducted.
  • Stage 5: Evaluation (4 weeks) – The final evaluation of the outcome of testing the products/ services/ technology is confirmed in this phase by RBI. The FTU shall assess the outcome report and decide whether the product/service is viable and acceptable under RS. 

Statutory and legal issues

If the applicant is allowed by the FTU into the RS, the entity would be provided by appropriate regulatory support by RBI in the form of relaxation of specific regulatory requirements during the duration of the RS. However, RBI shall not bear any liability arising from the RS process and any liability arising from the experiment has to be borne by the entity alone. Further, the sandbox entity should ensure that on exiting from the RS or on the completion of the RS process, the sandbox entity should fully comply with all the relevant regulatory requirements.

Source:

1. https://m.rbi.org.in/scripts/PublicationReportDetails.aspx?UrlPage=&ID=920#A_2

2.Report of the Working Group on FinTech and Digital Banking- https://www.rbi.org.in/Scripts/PublicationReportDetails.aspx?UrlPage=&ID=892

The content of this article is intended to provide a general guide to the subject matter. Specialist advice should be sought about your specific circumstances.

To print this article, all you need is to be registered on Mondaq.com.

Click to Login as an existing user or Register so you can print this article.

Authors
Similar Articles
Relevancy Powered by MondaqAI
 
In association with
Related Topics
 
Similar Articles
Relevancy Powered by MondaqAI
Related Articles
 
Related Video
Up-coming Events Search
Tools
Print
Font Size:
Translation
Channels
Mondaq on Twitter
 
Mondaq Free Registration
Gain access to Mondaq global archive of over 375,000 articles covering 200 countries with a personalised News Alert and automatic login on this device.
Mondaq News Alert (some suggested topics and region)
Select Topics
Registration (please scroll down to set your data preferences)

Mondaq Ltd requires you to register and provide information that personally identifies you, including your content preferences, for three primary purposes (full details of Mondaq’s use of your personal data can be found in our Privacy and Cookies Notice):

  • To allow you to personalize the Mondaq websites you are visiting to show content ("Content") relevant to your interests.
  • To enable features such as password reminder, news alerts, email a colleague, and linking from Mondaq (and its affiliate sites) to your website.
  • To produce demographic feedback for our content providers ("Contributors") who contribute Content for free for your use.

Mondaq hopes that our registered users will support us in maintaining our free to view business model by consenting to our use of your personal data as described below.

Mondaq has a "free to view" business model. Our services are paid for by Contributors in exchange for Mondaq providing them with access to information about who accesses their content. Once personal data is transferred to our Contributors they become a data controller of this personal data. They use it to measure the response that their articles are receiving, as a form of market research. They may also use it to provide Mondaq users with information about their products and services.

Details of each Contributor to which your personal data will be transferred is clearly stated within the Content that you access. For full details of how this Contributor will use your personal data, you should review the Contributor’s own Privacy Notice.

Please indicate your preference below:

Yes, I am happy to support Mondaq in maintaining its free to view business model by agreeing to allow Mondaq to share my personal data with Contributors whose Content I access
No, I do not want Mondaq to share my personal data with Contributors

Also please let us know whether you are happy to receive communications promoting products and services offered by Mondaq:

Yes, I am happy to received promotional communications from Mondaq
No, please do not send me promotional communications from Mondaq
Terms & Conditions

Mondaq.com (the Website) is owned and managed by Mondaq Ltd (Mondaq). Mondaq grants you a non-exclusive, revocable licence to access the Website and associated services, such as the Mondaq News Alerts (Services), subject to and in consideration of your compliance with the following terms and conditions of use (Terms). Your use of the Website and/or Services constitutes your agreement to the Terms. Mondaq may terminate your use of the Website and Services if you are in breach of these Terms or if Mondaq decides to terminate the licence granted hereunder for any reason whatsoever.

Use of www.mondaq.com

To Use Mondaq.com you must be: eighteen (18) years old or over; legally capable of entering into binding contracts; and not in any way prohibited by the applicable law to enter into these Terms in the jurisdiction which you are currently located.

You may use the Website as an unregistered user, however, you are required to register as a user if you wish to read the full text of the Content or to receive the Services.

You may not modify, publish, transmit, transfer or sell, reproduce, create derivative works from, distribute, perform, link, display, or in any way exploit any of the Content, in whole or in part, except as expressly permitted in these Terms or with the prior written consent of Mondaq. You may not use electronic or other means to extract details or information from the Content. Nor shall you extract information about users or Contributors in order to offer them any services or products.

In your use of the Website and/or Services you shall: comply with all applicable laws, regulations, directives and legislations which apply to your Use of the Website and/or Services in whatever country you are physically located including without limitation any and all consumer law, export control laws and regulations; provide to us true, correct and accurate information and promptly inform us in the event that any information that you have provided to us changes or becomes inaccurate; notify Mondaq immediately of any circumstances where you have reason to believe that any Intellectual Property Rights or any other rights of any third party may have been infringed; co-operate with reasonable security or other checks or requests for information made by Mondaq from time to time; and at all times be fully liable for the breach of any of these Terms by a third party using your login details to access the Website and/or Services

however, you shall not: do anything likely to impair, interfere with or damage or cause harm or distress to any persons, or the network; do anything that will infringe any Intellectual Property Rights or other rights of Mondaq or any third party; or use the Website, Services and/or Content otherwise than in accordance with these Terms; use any trade marks or service marks of Mondaq or the Contributors, or do anything which may be seen to take unfair advantage of the reputation and goodwill of Mondaq or the Contributors, or the Website, Services and/or Content.

Mondaq reserves the right, in its sole discretion, to take any action that it deems necessary and appropriate in the event it considers that there is a breach or threatened breach of the Terms.

Mondaq’s Rights and Obligations

Unless otherwise expressly set out to the contrary, nothing in these Terms shall serve to transfer from Mondaq to you, any Intellectual Property Rights owned by and/or licensed to Mondaq and all rights, title and interest in and to such Intellectual Property Rights will remain exclusively with Mondaq and/or its licensors.

Mondaq shall use its reasonable endeavours to make the Website and Services available to you at all times, but we cannot guarantee an uninterrupted and fault free service.

Mondaq reserves the right to make changes to the services and/or the Website or part thereof, from time to time, and we may add, remove, modify and/or vary any elements of features and functionalities of the Website or the services.

Mondaq also reserves the right from time to time to monitor your Use of the Website and/or services.

Disclaimer

The Content is general information only. It is not intended to constitute legal advice or seek to be the complete and comprehensive statement of the law, nor is it intended to address your specific requirements or provide advice on which reliance should be placed. Mondaq and/or its Contributors and other suppliers make no representations about the suitability of the information contained in the Content for any purpose. All Content provided "as is" without warranty of any kind. Mondaq and/or its Contributors and other suppliers hereby exclude and disclaim all representations, warranties or guarantees with regard to the Content, including all implied warranties and conditions of merchantability, fitness for a particular purpose, title and non-infringement. To the maximum extent permitted by law, Mondaq expressly excludes all representations, warranties, obligations, and liabilities arising out of or in connection with all Content. In no event shall Mondaq and/or its respective suppliers be liable for any special, indirect or consequential damages or any damages whatsoever resulting from loss of use, data or profits, whether in an action of contract, negligence or other tortious action, arising out of or in connection with the use of the Content or performance of Mondaq’s Services.

General

Mondaq may alter or amend these Terms by amending them on the Website. By continuing to Use the Services and/or the Website after such amendment, you will be deemed to have accepted any amendment to these Terms.

These Terms shall be governed by and construed in accordance with the laws of England and Wales and you irrevocably submit to the exclusive jurisdiction of the courts of England and Wales to settle any dispute which may arise out of or in connection with these Terms. If you live outside the United Kingdom, English law shall apply only to the extent that English law shall not deprive you of any legal protection accorded in accordance with the law of the place where you are habitually resident ("Local Law"). In the event English law deprives you of any legal protection which is accorded to you under Local Law, then these terms shall be governed by Local Law and any dispute or claim arising out of or in connection with these Terms shall be subject to the non-exclusive jurisdiction of the courts where you are habitually resident.

You may print and keep a copy of these Terms, which form the entire agreement between you and Mondaq and supersede any other communications or advertising in respect of the Service and/or the Website.

No delay in exercising or non-exercise by you and/or Mondaq of any of its rights under or in connection with these Terms shall operate as a waiver or release of each of your or Mondaq’s right. Rather, any such waiver or release must be specifically granted in writing signed by the party granting it.

If any part of these Terms is held unenforceable, that part shall be enforced to the maximum extent permissible so as to give effect to the intent of the parties, and the Terms shall continue in full force and effect.

Mondaq shall not incur any liability to you on account of any loss or damage resulting from any delay or failure to perform all or any part of these Terms if such delay or failure is caused, in whole or in part, by events, occurrences, or causes beyond the control of Mondaq. Such events, occurrences or causes will include, without limitation, acts of God, strikes, lockouts, server and network failure, riots, acts of war, earthquakes, fire and explosions.

By clicking Register you state you have read and agree to our Terms and Conditions