RBI’s digital lending framework governs loans sourced or serviced through digital channels by regulated entities and their lending service providers (LSPs) and digital lending apps. It covers direct disbursal and repayment through the lender’s accounts, key fact statements, cooling-off periods, limits on data collection and storage, consent, grievance redress and the responsibilities of LSPs.
We review app data practices, consent journeys and LSP arrangements, and align them with the DPDP Act so lending products meet both regimes.
Who it is for
- Banks and NBFCs lending digitally
- Lending service providers and digital lending apps
- Fintechs in co-lending and partnership models
What you gain
- App data practices that pass scrutiny
- Clear accountability between lender and LSP
- Alignment with DPDP consent and notice
How we get you compliant
Applicability and scoping
Confirm whether and how the law applies to you, entities, data, systems, roles and territories.
Data and process mapping
Build a record of processing or control inventory so obligations can be tied to real systems and owners.
Gap assessment
Measure current practice against each obligation and rank the gaps by legal and business risk.
Remediation roadmap
Policies, notices, contracts, technical controls and governance, sequenced so the highest risks close first.
Evidence and ongoing monitoring
A compliance calendar, metrics and periodic reviews so you can demonstrate compliance to a regulator or customer at any time.