Insights

Regulation, decoded.

Plain-English notes on AI rules for Indian financial services, and what we learn deploying governed AI.

AllRegulationField notesBenchmarks

Regulation7 min read

RBI's FREE-AI framework: what NBFCs should do in the next 12 months

A practical to-do list, not a summary. The FREE-AI framework lands board accountability, audit mechanisms and outsourcing rules for AI vendors squarely on NBFCs.

What this means for youYour board needs an AI policy and a model risk management framework before your next examination. Your AI vendor contracts need explicit audit access, exit clauses and training data ownership terms.

1 October 2026Read →

Regulation6 min read

Keeping AI collections inside RBI's conduct rules

How to automate collections without conduct risk. The May 2026 draft covers calling hours, respectful conduct, call monitoring and human escalation — in precise, enforceable terms.

What this means for youAny collections agent you run must enforce calling windows before dialling, check content against your conduct policy before sending, and route every complaint to a human. These are not optional.

6 October 2026Read →

Regulation8 min read

DPDP from May 2027: what lenders must fix in borrower outreach

Deadline-driven checklist. Consent, purpose limitation, data-principal rights, data in India — and what changes specifically for WhatsApp outreach and call programmes.

What this means for youMay 2027 is closer than it looks. Every outreach programme needs a consent audit now. Every third-party AI vendor that processes borrower data needs a data processing addendum.

10 October 2026Read →

Stay current

Notes when regulation moves.

We write when there is something worth reading — RBI circulars, DPDP changes, things we see in deployment. No filler. Unsubscribe any time.

Understand your regulatory gaps before your auditors do.

The NBFC readiness assessment maps your conduct and DPDP exposure against your current AI plans.

Book A Readiness Assessment