IIOs must maintain a Board-approved records maintenance policy addressing electronic records, data privacy and security, cybersecurity, system security, backups, disaster recovery, business continuity, archival and Board Risk Management Committee oversight. Records must be electronically retrievable with security features. Policy, claims and reinsurance records must be held only in Indian data centres, including an IFSC. Board-approved policies require annual review within 90 days after the financial year ends.

Definitions identify the Act, the International Financial Services Centres Authority, boards of IIOs and IIIOs, electronic form, and the relevant insurance office and intermediary office. Investigating officer includes a person directed to investigate or inspect an IIO or IIIO. Minimum information comprises information required to be maintained in the prescribed form and manner, while records include written documents and information maintained physically or electronically. Undefined terms retain their meanings under the governing statutory and regulatory framework.

Minimum information must be maintained by IIOs and IIIOs for investigation and inspection under section 33 of the Insurance Act, 1938. Record-maintenance requirements establish the baseline information to be retained for those statutory purposes, covering insurance records and requisite information held to facilitate investigation and inspection functions.

Maintenance of insurance records and submission of requisite information for investigation and inspection govern International Financial Services Centres Insurance Offices and International Financial Service Centre Insurance Intermediary Offices. The framework concerns preservation of insurance records and provision of information within the International Financial Services Centre insurance sector. It takes effect upon publication in the Official Gazette and applies to all such offices unless otherwise specified.

Website security requirements mandate audits by agencies empaneled by CERT-In, conducted in accordance with extant Government of India guidelines or guidelines of relevant agencies. A security audit is compulsory before the website is hosted and again after every major website update, requiring security review at both initial deployment and significant modification stages. These requirements establish mandatory audit checkpoints for website security compliance before public availability and following material changes.

Expanded sanctions and tariff measures form the immediate trade-policy backdrop. The Lindsey O. Graham Sanctioning Russia and Iran Act of 2026 authorises expanded sanctions and tariffs targeting Russia and countries that buy its energy exports. China contests the application of tariffs to its purchases and opposes long-arm jurisdiction and unilateral sanctions asserted without a basis in international law or a UN Security Council mandate. Parallel negotiations contemplate a reciprocal tariff-reduction arrangement.

Website security requires the Authority to take adequate measures to secure the functioning of the website against all cyber security threats and any other threats, expressly including natural disasters. Where such an eventuality arises, immediate measures are required for restoration and recovery of the website's functioning. The obligation therefore combines preventive protection with prompt operational recovery from cyber, other, or disaster-related disruption.

Website information may be organised so users can locate all relevant information, including archived material, easily. Expired or outdated material may be removed, while other content may be suitably archived according to its nature and relevance, ensuring information remains authentic, accurate and up to date for users at all times.

Website-content framework permits publication of institutional information, regulatory materials, consultation papers, reports, publications, news releases and development initiatives. It also supports interactive online services, supervisory-technology elements, recruitment and tender information, contact details, website-use terms, and legally required or otherwise selected information for dissemination.

Website maintenance empowers the Authority to revamp and restructure its website or migrate the underlying solution to another domain or host. The discretionary mechanism supports improved website quality in line with emerging technologies and international best practices. It includes redesign of the existing website and transfer of the solution to a different technological location.

Regulation 6 requires selection of a website hosting service provider with regard to high-speed networking, storage and security infrastructure requirements. The selection criterion permits these technical requirements to be considered alongside other relevant factors in maintaining the website.

Website registration under the International Financial Services Centres Authority (Maintenance of Website) Regulations, 2022, must be completed under the gov.in or nic.in domain. The selected domain must conform to extant guidelines of the Government of India and/or relevant agencies. The mandatory condition requires use of a specified official domain and adherence to applicable governmental or agency guidance during registration.

Website design, development, and maintenance must be carried out in accordance with the manner prescribed under extant guidelines of the Government of India and/or relevant agencies. The compliance obligation applies across the website's lifecycle, requiring its design, development, and ongoing maintenance to conform to applicable governmental or agency guidance.

Regulation 3 establishes the Authority's responsibility for maintenance of a website. The website must be designed, developed, and maintained in accordance with the prescribed regulatory manner and serve as the means for disseminating relevant information to the public. The obligation encompasses website design, development, and continued maintenance, with public dissemination of relevant information forming its specified purpose under these regulations.

Website maintenance definitions govern content, hosting, and statutory interpretation. Content includes information, documents, and textual, visual, or audio material available on the website. Hosting service providers are engaged to provide infrastructure supporting Government of India guidelines, multi-tier security, regular backups, and disaster recovery. Undefined terms take meanings assigned under the governing Act, scheduled enactments, and related subordinate legislation, including modifications or re-enactments.

International Financial Services Centres Authority (Maintenance of Website) Regulations, 2022 establish a framework for maintaining and developing the Authority's website. Website development and maintenance must conform to standards and guidelines of the Government of India and other relevant agencies, while enabling a best-in-class website comparable with international financial-sector regulators' websites. The Regulations enter into force upon publication in the Official Gazette.

The Authority may issue guidance notes or circulars to resolve difficulties in applying or interpreting regulations governing International Branch Campuses and Offshore Education Centres. On an application accompanied by the prescribed non-refundable processing fee, it may relax strict enforcement of any provision, with reasons recorded in writing.

International Branch Campuses and Offshore Education Centres must comply with all obligations applicable to their Parent Entity in its home jurisdiction concerning offshore courses or programmes. The Parent Entity may repatriate any profit without restriction. These requirements apply respectively to an IBC or OEC operating under the framework for international branch campuses and offshore education centres.

The Authority may require International Branch Campuses and Offshore Education Centres to furnish a deposit based on the scale of their operations and in such form as it considers appropriate. Entities undertaking permissible activities must pay an application fee, a one-time initial registration fee, and an annual fee from the second year onwards. Applications seeking relaxation are also subject to a separate processing fee.

Section 14A read with Rule 8D does not support an expenditure disallowance where no exempt income is earned in the relevant year, because the prescribed computation mechanism is inapplicable. Under section 37(1), a provision for anticipated losses on incomplete construction contracts is not deductible merely because it is recognised under the percentage-completion method. Projected losses based on costs to be incurred in future years do not constitute accrued or ascertained liabilities. Prior acceptance of comparable claims does not require continuation where their factual basis was not previously examined.