Managers, managing directors, other officers, outsourced service providers and contractors of IIOs and IIIOs must produce books of account, registers, documents, databases, statements and information relating to the entity's affairs when demanded by the Authority or an Investigation Officer. The mandatory production obligation applies notwithstanding other provisions and must be complied with within the stipulated time for investigation and inspection purposes.

Every IIIO must maintain records for past and present employees, covering names and identifiers, appointment and termination dates, designation, qualifications, licence or registration particulars and validity, training completion and test dates, renewal training for insurance solicitation-qualified employees, and branch or office posting. The recordkeeping obligation preserves employment, qualification, licensing, training and posting information for investigation and inspection.

Every IIO must maintain employee records, except for staff or salaried field workers involved in solicitation. Records must cover employee identity, appointment, designation, PAN, salary, benefits, tax papers, appointment-letter references, and termination details where applicable. Travel-expense payments to employees or other persons must be documented with the journey details, purpose, fares paid, and allowances granted, creating a verifiable trail for investigation and inspection.

Every IIO and IIIO must furnish records, information, data, documents, books and registers whenever demanded by the Authority. This mandatory production obligation covers materials maintained under the Insurance Act, 1938, other applicable laws, and related rules, regulations, guidelines, circulars and directions. The requirement ensures access to maintained insurance-related records and information for investigation and inspection.

IIOs must maintain a Board-approved records maintenance policy addressing electronic records, data privacy and security, cybersecurity, system security, backups, disaster recovery, business continuity, archival and Board Risk Management Committee oversight. Records must be electronically retrievable with security features. Policy, claims and reinsurance records must be held only in Indian data centres, including an IFSC. Board-approved policies require annual review within 90 days after the financial year ends.

Defined terms govern record-maintenance, information submission, investigation, and inspection obligations for Insurance Offices and Insurance Intermediary Offices. Records include written documents or information maintained in physical, electronic, or combined form, while minimum information means prescribed information required to be maintained in the specified form and manner. Investigating officers include persons directed to investigate or inspect relevant affairs. Undefined expressions take meanings assigned under the governing Act, related enactments, and associated subordinate legislation.

Minimum information must be maintained by IIOs and IIIOs for investigation and inspection under section 33 of the Insurance Act, 1938. Record-maintenance requirements establish the baseline information to be retained for those statutory purposes, covering insurance records and requisite information held to facilitate investigation and inspection functions.

Regulation 1 names the 2022 framework concerning maintenance of insurance records and submission of requisite information for investigation and inspection. It enters into force upon publication in the Official Gazette and, unless otherwise specified, applies to all International Financial Services Centres Insurance Offices and International Financial Service Centre Insurance Intermediary Offices.

Website security requirements mandate audits by agencies empaneled by CERT-In, conducted in accordance with extant Government of India guidelines or guidelines of relevant agencies. A security audit is compulsory before the website is hosted and again after every major website update, requiring security review at both initial deployment and significant modification stages. These requirements establish mandatory audit checkpoints for website security compliance before public availability and following material changes.

Expanded sanctions and tariff measures form the immediate trade-policy backdrop. The Lindsey O. Graham Sanctioning Russia and Iran Act of 2026 authorises expanded sanctions and tariffs targeting Russia and countries that buy its energy exports. China contests the application of tariffs to its purchases and opposes long-arm jurisdiction and unilateral sanctions asserted without a basis in international law or a UN Security Council mandate. Parallel negotiations contemplate a reciprocal tariff-reduction arrangement.

Website security requires the Authority to take adequate measures to secure the functioning of the website against all cyber security threats and any other threats, expressly including natural disasters. Where such an eventuality arises, immediate measures are required for restoration and recovery of the website's functioning. The obligation therefore combines preventive protection with prompt operational recovery from cyber, other, or disaster-related disruption.

Website information may be organised so users can locate all relevant information, including archived material, easily. Expired or outdated material may be removed, while other content may be suitably archived according to its nature and relevance, ensuring information remains authentic, accurate and up to date for users at all times.

Website-content framework permits publication of institutional information, regulatory materials, consultation papers, reports, publications, news releases and development initiatives. It also supports interactive online services, supervisory-technology elements, recruitment and tender information, contact details, website-use terms, and legally required or otherwise selected information for dissemination.

Website maintenance empowers the Authority to revamp and restructure its website or migrate the underlying solution to another domain or host. The discretionary mechanism supports improved website quality in line with emerging technologies and international best practices. It includes redesign of the existing website and transfer of the solution to a different technological location.

Regulation 6 requires selection of a website hosting service provider with regard to high-speed networking, storage and security infrastructure requirements. The selection criterion permits these technical requirements to be considered alongside other relevant factors in maintaining the website.

Website registration under the International Financial Services Centres Authority (Maintenance of Website) Regulations, 2022, must be completed under the gov.in or nic.in domain. The selected domain must conform to extant guidelines of the Government of India and/or relevant agencies. The mandatory condition requires use of a specified official domain and adherence to applicable governmental or agency guidance during registration.

Website design, development, and maintenance must be carried out in accordance with the manner prescribed under extant guidelines of the Government of India and/or relevant agencies. The compliance obligation applies across the website's lifecycle, requiring its design, development, and ongoing maintenance to conform to applicable governmental or agency guidance.

Regulation 3 establishes the Authority's responsibility for maintenance of a website. The website must be designed, developed, and maintained in accordance with the prescribed regulatory manner and serve as the means for disseminating relevant information to the public. The obligation encompasses website design, development, and continued maintenance, with public dissemination of relevant information forming its specified purpose under these regulations.

Website-maintenance definitions identify the governing Act and the Authority, describe CERT-In, and treat content as all information, documents, and textual, visual, or audio material made available on the website. A hosting service provider supports compliance through infrastructure enabling multi-tier security, regular backup, and disaster recovery. Undefined words and expressions adopt meanings under the Act, its First Schedule Acts, and related rules or regulations, including modifications or re-enactments.

The International Financial Services Centres Authority (Maintenance of Website) Regulations, 2022 create an enabling framework for development and maintenance of a best-in-class Authority website. The website is intended to be comparable with those of international financial-sector regulators while conforming to standards and guidelines of the Government of India and other relevant agencies. The regulations take effect upon publication in the Official Gazette.