On commencement, the earlier 2021 procedure-making regulations are repealed, but actions, purported actions, and commenced processes under that regime retain effect and are treated as arising under corresponding current provisions. Subsidiary instructions issued before commencement are similarly preserved. Regulations, subsidiary instructions, and related actions before or after commencement are not invalid merely because the prescribed procedure was not followed.

Regulation 12 excludes the prescribed regulatory procedure from internal organisational matters, procedural measures or subsidiary instructions not involving substantive policy changes, coordinated decisions, and specified market integrity or national security interventions. It also covers measures required to meet international agreements or similar arrangements where public consultation serves no meaningful purpose. The Authority must be informed whenever the prescribed procedure is not applied.

Periodic review is mandated for each regulation made under regulation 3 every five years, unless an earlier review is warranted. The review assesses objectives, outcomes, implementation, enforcement, related litigation, global best practices, relevance in a changed environment, redundancy reduction, and ease of doing business. Where amendment is warranted, it must be made under the procedure in Chapter III.

Amendments to existing regulations or subsidiary instructions made under regulation 4(2) are subject to regulations 6 and 9 and require compliance with Chapter III. Every such modification must therefore follow the Chapter III procedure, while the applicability of regulations 6 and 9 remains preserved in relation to those amendments.

Regulation 9 authorises dispensation of public consultation where the Authority considers it expedient in the interest of developing and regulating the financial services market. The power may be used where the time required for consultation would defeat the purpose of proposed regulations or result in undue delay in redressing a problem or market failure.

The Authority may engage stakeholders through additional mechanisms considered appropriate, establish and consult expert or advisory committees for recommendations on drafting or reviewing regulations and subsidiary instructions, and constitute Independent Thematic Review Committees. Independent Thematic Review Committees may conduct focused, independent evaluations of high-priority regulatory themes, including for Regulatory Impact Assessment, on terms considered fit.

Public consultation for proposed subsidiary instructions ordinarily requires a minimum period for public comments. The Chairperson may dispense with consultation or reduce that period by recording reasons in writing, with the decision placed before the Authority for information. Comments must be reviewed, and necessary modifications proposed. The modified proposal and comments must be placed before the Authority or its delegated officer for approval. Before issuance, a summary of comments and a general response must be uploaded on the Authority's website.

Public comments on proposed regulations must ordinarily be invited for at least 21 calendar days. The Chairperson may, for recorded reasons, reduce or dispense with consultation, subject to placing that decision before the Authority. Proposed regulations and public comments must be considered by the Authority, with written reasons for substantial deviations in an approved revised draft. Comment summaries, responses, and justified substantial changes must be published before notification, and substantive changes differing materially from the consultation paper may require repeated consultation.

Prior public consultation is required before the Authority makes specified regulations or subsidiary instructions. Public comments must be invited by publishing a consultation paper on the Authority's website. The paper must identify the problem to be addressed, state regulatory intent and objectives, specify the enabling legal provision, include the draft proposed regulations or subsidiary instruction, and state the method, process, and timelines for submitting public comments.

Subsidiary instructions may implement the Act and regulations by prescribing compliance requirements for financial products, services and institutions, explaining or clarifying provisions, setting procedural requirements, and addressing matters necessary for effective implementation. Public consultation must precede instructions prescribing compliance requirements or outlining the meaning, scope or intent of a provision.

Regulation 3 confers regulation-making power on the Authority to formulate regulations for carrying out the purposes of the governing Act. Exercise of that delegated power is expressly conditioned on compliance with procedural requirements established under Regulations 5 and 6, making prescribed procedural compliance a prerequisite to exercising the power within its statutory mandate.

Public comments include consultation responses on proposed regulations, subsidiary instructions, or amendments from persons and entities engaged directly or indirectly in the financial services market. Regulations are instruments made under statutory regulation-making power, while subsidiary instructions are approved by the Authority or an authorised delegate and issued as circulars, guidelines, frameworks or other instruments. Undefined terms carry the meanings assigned under the Act and its statutory modifications or re-enactments.

The regulations may be cited as the International Financial Services Centres Authority (Procedure for Making Regulations and Subsidiary Instructions) Regulations, 2025. They generally enter into force on publication in the Official Gazette, subject to any other commencement provision within the regulations, which prevails over the general publication-based rule.

TechFin and Ancillary Service Providers must comply with applicable regulatory requirements, report material changes affecting their registration, and notify the Authority of specified FATF high-risk jurisdiction links involving promoters or significant beneficial owners. They must maintain adequate manpower and infrastructure in the IFSC and obtain separate registration or authorisation under the applicable framework before undertaking regulated activities.

Third Schedule exclusions prohibit TechFin and Ancillary Service Providers from providing non-outsourceable core activities and services separately regulated under an IFSCA framework. Prohibited services include facility management, building maintenance, security, housekeeping, maintenance-related manpower, transport and logistics, construction-related services, and physical-asset management. The Authority may also exclude services that do not constitute arrangements for carrying on specified financial services.

Permitted TechFin Services include cloud computing, cybersecurity, application development, automation, ERP systems, eGRC implementation, IT infrastructure management, payment-system technology services, regulatory and supervisory technology, data-centre services, and technology supporting trade finance, digital banking and tokenization. The scope also includes outsourcing permitted by a home-jurisdiction financial-sector regulator and solutions using AI, digital identity, KYC, AML/CFT, fraud prevention, DLT, IoT, metaverse technologies, quantum technology and Web 3.0.

Permitted ancillary services in an IFSC include actuarial, advisory, auditing, asset-management, legal, management consulting, marketing, valuation and secretarial services; business, knowledge and legal-process outsourcing; customer-care, human-resource and payroll, supply-chain, and family-office support. They also include compliance, governance, risk-management, fund-administration, insolvency and liquidation support, leasing broking, voice broking for banking, and trusteeship services other than separately permitted debenture trustee services. Other outsourced services allowed in an entity's home jurisdiction and further services permitted by the Authority may also be undertaken.

Existing Ancillary Service Providers and TechFin entities authorised under the earlier frameworks remain governed by them until receipt of a certificate of registration under the current regulations or until twelve months after commencement, unless extended, whichever occurs first. The earlier ancillary-services and TechFin frameworks cease after twenty-four months from commencement. Prior operation, accrued rights, privileges, obligations, liabilities, penalties, investigations, legal proceedings and remedies remain preserved.

Default action may be initiated against a TechFin and Ancillary Service Provider for contravention of applicable regulations, circulars, guidelines or directions. The Authority may take action it considers fit, but must first provide the concerned provider a reasonable opportunity to be heard through written submissions.

Inspection powers permit the Authority, acting on its own motion or on information or a complaint, to appoint one or more Inspecting Authorities to examine a TechFin and Ancillary Service Provider's books of account, records, documents, infrastructure, procedures and systems.