Storage of Payment System Data

The entire payment data shall be stored in systems located only in India, except in cases clarified herein.

The data should include end-to-end transaction details and information pertaining to payment or settlement transaction that is gathered / transmitted / processed as part of a payment message / instruction. This may, interalia, include – Customer data (Name, Mobile Number, email, Aadhaar Number, PAN number, etc. as applicable); Payment sensitive data (customer and beneficiary account details); Payment Credentials (OTP, PIN, Passwords, etc.); and, Transaction data (originating & destination system information, transaction reference, timestamp, amount, etc.).

  • There is no bar on processing of payment transactions outside India if so desired by the PSOs. However, the data shall be stored only in India after the processing. The complete end-to-end transaction details should be part of the data.
  • In case the processing is done abroad, the data should be deleted from the systems abroad and brought back to India not later than the one business day or 24 hours from payment processing, whichever is earlier. The same should be stored only in India.
  • However, any subsequent activity such as settlement processing after payment processing, if done outside India, shall also be undertaken / performed on a near real time basis. The data should be stored only in India.
  • In case of any other related processing activity, such as chargeback, etc., the data can be accessed, at any time, from India where it is stored.

Banks having server outside India have been strictly directed by RBI for not sharing customer account sensitive data in bank statement

In order to be in adherence to the Reserve Bank of India (RBI) Directive, the below listed information will not be available in the periodic banks statement/s for RTGS and NEFT transactions undertaken at your end (in cases if banks are storing data outside India):-

  • Serial Number of the Transaction
  • Message to Beneficiary
  • Beneficiary IFSC Number
  • Remitting IFSC Number
  • Address of the Remitter
  • Remarks
  • Debit Account Number
  • Beneficiary Account Number
  • Remitter Account Number
  • Reject Reason Description
  • Sender to Receiver Information

Mercedes-Benz get stay order against demand for GST on Expat Salary

In a relief for the auto major Mercedes-Benz, Bombay High court has granted an interim-stay of order demanding GST dues on expat-salary payment by the company. Last year, honorable Supreme Court has held that the salary of overseas employees (deputed to Indian company) that is reimbursement to the overseas entities will be subject to service tax. This decision shakes companies. Based on this decision GST department aggressively started issuing notices to companies demanding GST on reimbursement of expat salary. Directorate General of GST Intelligence (DGGI) recovers INR 2,500 Crores GST dues not paid on expat salaries. Many companies deposited GST on reimbursement of expat salaries. Some companies decided to challenge GST notices. However, rules are not yet clarified and companies are advices to analyze Supreme Court (SC) decision made in case of Northern operating Systems Pvt Ltd and check facts. If facts are matching with NOS arrangements, then GST need to be deposited, if company can differentiate facts, it can decide to challenge GST demand notice in court. This decision will be huge impact on company’s cash flow because GST demand will be calculated w.e.f. 01.07.2027 and interest and penalty will also be required to be deposited under section 73/74 of CGST Act.