India RBI AI Compliance: Digital Lending Guidelines 2022, Outsourcing Framework & SEBI AI Regulations
India's financial regulators — the Reserve Bank of India (RBI) and the Securities and Exchange Board of India (SEBI) — have responded to the rapid growth of AI-powered digital lending and investment platforms with a comprehensive regulatory framework. The RBI's September 2022 Digital Lending Guidelines address AI-driven lending specifically, requiring transparency in AI lending decisions and prohibiting algorithmic discrimination. The 2021 Framework for Outsourcing addresses third-party AI providers as service providers subject to RBI oversight.
RBI Digital Lending Guidelines — September 2, 2022
Circular: RBI/2022-23/111 DOR.CRE.REC.66/21.07.001/2022-23
Scope: All RBI-regulated entities (REs) and Lending Service Providers (LSPs) engaged in digital lending
Key AI provisions: (1) Automated lending decisions must be explainable to borrowers; (2) Discriminatory AI lending decisions prohibited; (3) All customer data collected for AI lending must be disclosed; (4) Lending Service Providers must comply with RE's fair lending standards
Enforcement: RBI has directed multiple digital lenders to cease operations for violations of digital lending guidelines, including opaque AI pricing and discriminatory loan eligibility algorithms
Source: RBI Digital Lending Guidelines — rbi.org.in
Regulatory Risks and Compliance Challenges
The RBI's 2021 Master Direction on Outsourcing of Information Technology Services establishes that outsourcing of AI systems to third-party technology providers does not transfer compliance responsibility from the regulated entity to the vendor. RBI-regulated banks must maintain oversight of AI vendors equivalent to what they would apply to internally developed AI — including due diligence, performance monitoring, audit rights, and the right to exit the vendor relationship without disrupting customer service.
SEBI's 2019 Circular on Algorithmic Trading and its subsequent guidance on AI-powered investment advisory services establish that SEBI-registered intermediaries using AI in investment recommendations, portfolio management, or trading must disclose AI use to clients and ensure AI recommendations meet the suitability standards applicable to the product type. SEBI has conducted inspections of AI-powered robo-advisers operating in India, finding disclosure and suitability gaps that resulted in enforcement actions.
Claire's AI Compliance Solution
Claire Platform Capabilities
RBI Digital Lending AI Transparency
Claire implements the RBI Digital Lending Guidelines' explainability requirements — generating borrower-facing explanations of AI lending decisions in the local language required by RBI, with adverse action documentation meeting RBI's fair practices code standards.
Outsourcing Framework Vendor Governance
Claire's vendor management module implements the RBI Outsourcing Master Direction requirements for AI vendors — maintaining due diligence documentation, performance monitoring data, and exit planning for all material AI vendor relationships.
SEBI AI Investment Advisory Compliance
Claire's investment advisory compliance module tracks SEBI disclosure requirements for AI-powered investment recommendations, suitability assessment documentation, and client communication records for SEBI-registered investment advisers and portfolio managers using AI.
Compliance Checklist
AI Regulatory Compliance Requirements
AI model risk management framework: Governance applied to all quantitative AI models with inventory, validation, and monitoring.
Independent model validation: Annual independent validation of material AI models with results documented.
Examination-ready documentation: AI governance documentation maintained for regulatory access within 48 hours.
Third-party AI vendor oversight: Documentation of oversight activities for all AI vendors.
Fair lending and anti-discrimination monitoring: Regular testing of AI decisions for prohibited bias.
Consumer protection review: AI customer-facing tools reviewed for applicable consumer protection compliance.
Data quality governance: Training data quality documented and reviewed annually.
Immutable audit trail: Records of all AI decisions affecting consumers or regulatory obligations.
Board AI risk reporting: Quarterly AI risk reporting to board covering model performance and regulatory developments.
Incident response plan: Written incident response plan for AI model failures with regulator notification protocols.
Frequently Asked Questions
What do the RBI Digital Lending Guidelines require for AI lending?
The September 2022 Digital Lending Guidelines require: all loan offers to include a Key Fact Statement disclosing all costs and conditions; AI lending decisions to be explainable to borrowers who request explanations; lending practices to comply with RBI's Fair Practices Code prohibiting discriminatory or exploitative lending; customer data collection to be disclosed with consent; and Lending Service Providers to comply with all RBI regulations applicable to the regulated entity they serve.
How does the RBI treat AI vendors under its Outsourcing Framework?
The RBI's 2021 Master Direction on Outsourcing of IT Services requires regulated entities to maintain oversight of all material IT outsourcing, including AI systems. AI vendors are subject to: initial due diligence covering financial stability, security practices, and compliance standards; contractual requirements for audit rights, data security, and exit planning; ongoing performance monitoring; and annual governance review. Regulated entities cannot delegate compliance responsibility to AI vendors.
What SEBI rules apply to AI-powered robo-advisers in India?
SEBI's Investment Adviser Regulations (2013, amended 2020) apply to all entities providing investment advice for consideration in India. AI-powered robo-advisers must be registered as SEBI-regulated investment advisers and comply with suitability requirements, disclosure obligations, and recordkeeping requirements. SEBI has found that some robo-advisers were providing AI-generated investment advice without adequate registration or disclosure — resulting in enforcement actions.
How has RBI enforced Digital Lending Guidelines against AI platforms?
RBI has directed multiple digital lending platforms to cease operations or modify their lending practices for violations of the Digital Lending Guidelines. Key enforcement areas include: charging hidden fees not disclosed in the Key Fact Statement; using AI loan pricing that results in discriminatory interest rates; collecting customer data beyond what is necessary and consented; and failing to provide borrowers with adequate explanation of loan rejection decisions.
Does India have specific AI regulation for financial services?
As of early 2026, India does not have a comprehensive AI-specific regulatory statute for financial services. RBI, SEBI, and IRDAI have each issued sector-specific guidance addressing AI within their existing regulatory frameworks. The Government of India released a National AI Strategy and the MeitY has issued advisory guidelines on responsible AI. Comprehensive national AI legislation is under development, with financial services expected to be identified as a high-risk sector requiring enhanced AI governance.
Related: Finance AI Overview | AI Model Risk Management | Regulatory Compliance