MANU/RMIC/0161/2021

Ministry : Reserve Bank of India

Department/Board : Department of Payment and Settlement Systems

Circular No. : CO.DPSS.POLC.No.S-1211/02-14-003/2021-2022
                   RBI/2021-2022/142

Date : 23.12.2021

Notification/ Circulars Referred : Circular DPSS.CO.PD.No.1810/02.14.008/2019-20 dated March 17, 2020 MANU/RMIC/0038/2020;Circular CO.DPSS.POLC.No.S33/02-14-008/2020-2021 dated March 31, 2021 MANU/RMIC/0036/2021;Circular CO.DPSS.POLC.No.S-516/02-14-003/2021-22 dated September 07, 2021 MANU/RMIC/0121/2021

Citing Reference:
Circular DPSS.CO.PD.No.1810/02.14.008/2019-20 dated March 17, 2020 MANU/RMIC/0038/2020  Referred

Circular CO.DPSS.POLC.No.S33/02-14-008/2020-2021 dated March 31, 2021 MANU/RMIC/0036/2021  Referred

Circular CO.DPSS.POLC.No.S-516/02-14-003/2021-22 dated September 07, 2021 MANU/RMIC/0121/2021  Referred

All Payment System Providers and Payment System Participants

Madam / Dear Sir,

Restriction on storage of actual card data

In terms of our circular DPSS.CO.PD.No.1810/02.14.008/2019-20 dated March 17, 2020 on "Guidelines on Regulation of Payment Aggregators and Payment Gateways", the authorised non-bank payment aggregators and merchants on-boarded by them were prohibited from storing card data (CoF) from June 30, 2021. At the request of industry stakeholders, this timeline was extended to December 31, 2021 vide circular CO.DPSS.POLC.No.S33/02-14-008/2020-2021 dated March 31, 2021. Further, regulations on CoF Tokenisation (CoFT) were issued vide circular CO.DPSS.POLC.No.S-516/02-14-003/2021-22 dated September 07, 2021 on "Tokenisation - Card Transactions: Permitting Card-on-File Tokenisation (CoFT) Services".

2. In light of various representations received in this regar........