The entire payment data shall be stored in systems located only in India, except in cases clarified herein.
The data should include end-to-end transaction details and information pertaining to payment or settlement transaction that is gathered / transmitted / processed as part of a payment message / instruction. This may, interalia, include – Customer data (Name, Mobile Number, email, Aadhaar Number, PAN number, etc. as applicable); Payment sensitive data (customer and beneficiary account details); Payment Credentials (OTP, PIN, Passwords, etc.); and, Transaction data (originating & destination system information, transaction reference, timestamp, amount, etc.).
- There is no bar on processing of payment transactions outside India if so desired by the PSOs. However, the data shall be stored only in India after the processing. The complete end-to-end transaction details should be part of the data.
- In case the processing is done abroad, the data should be deleted from the systems abroad and brought back to India not later than the one business day or 24 hours from payment processing, whichever is earlier. The same should be stored only in India.
- However, any subsequent activity such as settlement processing after payment processing, if done outside India, shall also be undertaken / performed on a near real time basis. The data should be stored only in India.
- In case of any other related processing activity, such as chargeback, etc., the data can be accessed, at any time, from India where it is stored.
Banks having server outside India have been strictly directed by RBI for not sharing customer account sensitive data in bank statement
In order to be in adherence to the Reserve Bank of India (RBI) Directive, the below listed information will not be available in the periodic banks statement/s for RTGS and NEFT transactions undertaken at your end (in cases if banks are storing data outside India):-
- Serial Number of the Transaction
- Message to Beneficiary
- Beneficiary IFSC Number
- Remitting IFSC Number
- Address of the Remitter
- Remarks
- Debit Account Number
- Beneficiary Account Number
- Remitter Account Number
- Reject Reason Description
- Sender to Receiver Information
Pushkar Mer 