International Financial Services Centres Authority (KYC Registration Agency) Regulations, 2025
Show AI Summary
KYC data governance requires secure, interoperable records, independent validation, client consent controls, and regulated entity accountability.
Each KRA must establish interoperable electronic connectivity with other IFSC KRAs and may connect with KRAs registered with other financial-sector regulators, while maintaining secure data-transmission links with Regulated Entities. It must store, safeguard and retrieve KYC documents, independently validate uploaded records, disseminate client updates to service-using intermediaries, maintain audit trails, and preserve data integrity, backups, controls and periodic system audits. Client data access must be limited to a Regulated Entity's own clients and subject to client consent, with compliance required under applicable data-protection law.