

Imagine a world where financial services are as fast and accessible as sending a text message. This is the promise of FinTech—technology-driven financial services transforming how we manage money. FinTech companies are making financial services more efficient, affordable, and user-friendly, from instant loans to digital wallets. But with great innovation comes great responsibility. As FinTech reshapes the financial landscape, there is a growing need for a balanced approach to regulation, ensuring innovation and security. Self-regulation, for instance, can empower FinTech companies to set their standards, monitor compliance, and ensure ethical conduct, all without waiting for external regulations.
FinTech companies bring numerous benefits, such as improved access to financial services and lower costs. However, they also introduce new risks, including privacy concerns and cybersecurity threats. Traditional regulatory frameworks struggle to keep pace with FinTech’s rapid evolution. This is where self-regulation comes into play. By establishing a Self-Regulating Organization (SRO) for the FinTech sector, industry players can proactively set standards, monitor compliance, and ensure ethical conduct without waiting for external regulations.
Self-regulation necessitates a well-defined structure based on consensus and cooperation among entities. On January 15, 2024, the Reserve Bank of India (RBI) issued a draft framework for recognising Self-Regulating Organizations (SROs) to promote self-regulation in the FinTech sector, seeking stakeholder comments and feedback. After reviewing the input received, on May 30, 2024, the RBI notified the finalised framework as a Self-Regulatory Organisation (SRO) for the FinTech Sector. The framework contains the characteristics of an SRO for the FinTech sector (SRO-FT). It includes, among other things, broad functions, governance standards, eligibility criteria, and expectations for the grant of recognition as an SRO-FT.
The FinTech Self-Regulatory Organization (SRO-FT) is a self-regulatory body specifically designed for the FinTech sector. Its primary purpose is establishing industry standards and guidelines, providing a framework for ethical conduct and responsible innovation. While formal recognition by regulators is optional, it is highly desirable as it lends legitimacy to the SRO-FT and its efforts in self-regulation.
The key principles for establishing an effective and credible Self-Regulatory Organization for FinTech (SRO-FT) are as follows:
The SRO-FT should derive its strength from a diverse membership representing the FinTech sector, excluding banks but including FinTechs regulated by RBI. The SRO-FT can establish legitimacy to frame, monitor, and enforce standards and codes of conduct by encompassing a broad spectrum of industry players through comprehensive membership agreements. This inclusive structure leverages members’ collective expertise, ensuring the development of practical, adaptive, and widely accepted standards within the FinTech community.
The SRO-FT should be development-oriented, actively contributing to industry growth by prescribing minimum eligibility criteria, offering specialised knowledge and training, and bridging skill gaps. It should support early-stage entities, guide financial technology and regulations, and facilitate the creation of forward-looking policies.
To maintain credibility, the SRO-FT should operate independently, free from the influence of any single member or group of members. This would ensure refined decision-making and prevent the organisation from being swayed by the interests of a dominant few. The SRO-FT should maintain impartiality, avoid conflicts of interest, and ensure unbiased oversight over its members.
Members should view the SRO-FT as a legitimate arbiter of disputes, requiring a transparent and fair resolution mechanism. The SRO-FT can foster a stable and harmonious FinTech environment by efficiently handling conflicts.
The SRO-FT should motivate members to align with regulatory priorities by facilitating communication with RBI, advocating necessary changes, and promoting compliance. It should set codes and standards that complement regulatory frameworks, with powers to investigate and discipline non-compliant members.
The SRO-FT should serve as an information hub for collecting, analysing, and sharing data on member activities. This repository will support industry research, trend analysis, and policymaking.
The key requirements for establishing a credible SRO-FT are as follows:
The SRO-FT must be a not-for-profit company registered under section 8 of the Companies Act, 2013, with diversified shareholding ensuring no entity holds 10% or more of its paid-up share capital, individually or acting in concert.
To ensure transparency and clarity regarding the organisation’s purpose and activities, the Memorandum of Association (MoA) must explicitly state the operation as an SRO-FT as its primary objective.
The applicant must attain a minimum net worth of Rs. 2 crore within one year of RBI recognition as an SRO-FT or before commencing operations, whichever is earlier.
The SRO-FT must demonstrate the capacity to establish effective and consistent infrastructure, including robust IT capabilities and timely deployment of technological solutions.
The SRO-FT must put in place systems for managing ‘user harm’ instances that come to its notice or are referred to by the RBI or any other stakeholder. The instances of user harm may include fraud, mis-selling, unfair practices, unauthorised transactions, or any other form of misconduct that harms consumers of financial services.
The SRO-FT must not set up entities/offices overseas without the prior approval of the RBI.
The membership guidelines for a robust SRO-FT in FinTech are as follows:
The applicant SRO-FT must adequately represent the FinTech sector. This includes membership across entities of all sizes, stages, and activities within the FinTech ecosystem.
If representation is found inadequate at the time of application, a roadmap should be included to achieve this within a reasonable timeline. Failure to demonstrate or attain such comprehensive membership would result in refusing or revoking the SRO-FT’s recognition.
Membership of the SRO-FT must be comprised of FinTech members, and membership should be voluntary.
The SRO-FT must be an entity domiciled/registered in India, ensuring that it operates under the jurisdiction and regulatory framework of the country.
While the SRO-FT must be domiciled in India, it can include FinTechs outside India as members, promoting a more global perspective and integration with the FinTech sector.
The SRO-FT must develop a membership fee structure that is reasonable and nondiscriminatory. Although membership fees may vary or be differentiated based on factors such as size, intent, capability, etc., it must be ensured that the membership character remains non-discriminatory.
The Board of Directors (BoD) and Key Managerial Personnel (KMP) of Self-Regulatory Organizations for Financial Technologies (SRO-FT) must demonstrate professional competence, fairness, and integrity. Any legal proceedings against the SRO-FT, BoD, or KMP must be disclosed during the application process, ensuring that such proceedings do not hinder the organisation’s functioning or reputation. Further, convictions for offences, including moral turpitude or economic crimes, disqualify applicants, BoD members, or KMP. The RBI’s assessment of the fit and proper status of the SRO-FT, BoD, and KMP is final. Also, RBI may impose other conditions to safeguard public interest during SRO-FT recognition.
The following outlines the eligibility, membership criteria, application requirements, and review process for organisations seeking recognition as an SRO-FT:
Any representative organisation for FinTechs seeking recognition as a Self-Regulatory Organization for Financial Technologies (SRO-FT) must demonstrate its representative character through actual membership during the application process. Additionally, the applicant may indicate intended membership by listing FinTechs expressing future membership intentions.
Membership within the SRO-FT should primarily comprise FinTechs currently unregulated by any financial sector regulator. However, membership may also extend to Regulated Entities, excluding banks. The number of SRO-FTs to be recognised will be determined based on the quantity and nature of applications received.
An application for recognition as an SRO-FT should include essential documents such as the Memorandum of Association (MoA) and Articles of Association, as well as details of the proposed SRO-FT’s board composition, management roles, and operational procedures. If necessary, a roadmap and timeline for achieving comprehensive membership should also be provided.
The application must justify its acquisition or acquisition of the characteristics outlined for an SRO-FT. Moreover, a detailed exposition of how the organisation undertakes or plans to undertake functions is required.
Applications must be submitted under the board’s authorisation, and the Reserve Bank of India (RBI) may request further information or clarification deemed necessary for review. Further, incomplete or ineligible applications will be returned or rejected; applicants can be heard before such decisions are made.
Upon deeming an applicant suitable, the Reserve Bank will issue a “Letter of Recognition” to the SRO-FT, valid under the following conditions: all provided information must be true and not misleading; continuous adherence to the framework requirements, including membership; compliance with the terms of recognition; and adherence to relevant Acts, regulations, and RBI guidelines. The RBI may revoke recognition if the SRO-FT’s functioning harms the public interest or stakeholders or deviates from its objectives after allowing it to be heard.
The SRO-FT must guide the conduct of its members, ensuring that they adhere to industry standards, comply with relevant laws, and maintain high ethical standards. This involves establishing and enforcing guidelines for consumer protection, data security, data privacy, etc. The SRO-FT must address any grievance, conflict of interest, or dispute that may arise among its members and foster a fair, equitable, and competitive environment.
The SRO-FT must have objective, well-defined, and consultative processes to make and establish rules and standards. The standard-setting function involves the following:
1 Code of Conduct for its members
2 Setting up of industry Benchmarks
3 Setting up of accreditation Mechanism
4 Frame standardised Documents
5 Code of conduct for responsible advertisements
6 Data Compliance
7 Governance Standards
The SRO-FT must frame a code of conduct for its members, customised to the nature of their various activities.
The SRO-FT must set industry benchmarks and baseline technology standards for transparency, disclosure, data privacy, etc., by its members.
The SRO-FT must set up a mechanism for accreditation in the FinTech ecosystem to improve compliance culture, foster professionalism, create healthy market behaviour, etc., among its members. The accreditation mechanism must require prior approval of RBI.
The SRO-FT should frame standardised documents for the FinTech sector that meet specific requirements, such as agreements between lending service providers and regulated entities.
The SRO-FT must establish a code of conduct for responsible advertisements and market standards.
The SRO-FT must ensure that the data it collects and stores complies with the requirements of the various statutory legislations.
The SRO-FT should develop appropriate baseline governance standards for the FinTech sector.
The FinTechs must be encouraged to report their various activities to the SRO-FT. The SROFT should have a structured framework to guide its oversight and enforcement functions. The Oversight and Enforcement functions involve the following:
S.No. Oversight and Enforcement Functions Description
1 Surveillance mechanisms
2 Standards of conduct
The SRO-FT must deploy suitable surveillance mechanisms to monitor the FinTech sector and detect and highlight exceptions effectively.
The SRO-FT must establish clear standards of conduct and specify consequences for violating agreed-upon rules/ codes, such as counselling, cautioning, reprimanding, and expelling members.
3 Empowerment to bar/remove The SRO-FT would be empowered to bar/remove any of the FinTech entities to be its members for a period specified by it or for eternity if the circumstances require it.
The SRO-FT must actively promote understanding of statutory and regulatory requirements and promote a culture of compliance. It must facilitate the exchange of expertise and experience, as well as organise training programs for the benefit of its members. The Developmental support functions involve the following:
1 Encouraging Research and Development
2 Guidance and Support to smaller entities
3 Dissemination of sector-specific information
The SRO-FT must encourage a culture of research and development within the FinTech sector to encourage responsible innovation.
The SRO-FT must extend guidance and support, particularly to smaller entities within the sector, agnostic of membership, and publicly share best practices aligned with statutory and regulatory policies.
The SRO-FT must disseminate sector-specific information to raise members’ awareness of developments, trends, and best practices in the FinTech sector.
The SRO-FT must establish a grievance redressal and a dispute resolution framework for its members. The framework must be efficient, fair, and transparent. The Grievance Redressal and Dispute Resolution functions involve the following:
S.No. Grievance Redressal and Dispute Resolution Functions
1 Customer Education
2 Assessment of Customer Service Standards
The SRO-FT must work towards customer education focused on products and services the industry offers.
The SRO-FT must periodically assess customer service standards and review the grievance redressal framework.
The SRO-FT is expected to play a pivotal role in ensuring compliance with statutory and regulatory frameworks, adhering to industry standards and best practices, and facilitating transparent communication channels with the RBI. Its responsibilities towards the RBI must broadly include sharing sector-specific insights, addressing regulatory concerns, and
collaboratively working towards the overall development of the FinTech sector. The SROFT must serve as a valuable bridge, foster cooperation, and provide policies commensurate with the dynamic nature of the FinTech sector. The responsibilities of SRO-FT towards the Reserve Bank include the following:
The SRO-FT must act as the collective voice of its members in engagements with the Reserve Bank. In such engagements, it would be expected that the SRO-FT functions beyond the selfinterest of specific members and addresses larger concerns of the FinTech sector. Further, while acting as the industry association, the SRO-FT must ensure equitable and transparent treatment for all its members.
The SRO-FT would be obligated to regularly update the RBI on the developments in the sector and notify the RBI of any major violations by its members regarding statutory or regulatory requirements or systemic issues to enable the RBI to initiate timely action.
10.2.3
The SRO-FT must collect relevant and up-to-date sectoral information and share it with the RBI to aid policymaking. For this purpose, the SRO-FT must develop a scalable technology solution. This system must enable the RBI to understand the details of specific products, services, and the scale of FinTech entities’ activities.
10.2.4
The SRO-FT must consult the Reserve Bank in developing and updating the taxonomy for FinTechs.
The SRO-FT must carry out any assigned tasks from the RBI, review referred proposals or suggestions, and supply requested data/information as directed by the RBI.
10.2.6
The SRO-FT is required to submit its Annual Report and/or other information to the RBI. Additionally, the SRO-FT must submit periodic returns as prescribed by the RBI.
The SRO-FT would be obligated to provide the required information to the inspection team for an inspection/audit. The SRO-FT would bear the expenses of such inspection.
The SRO-FT must facilitate the collection of market intelligence inputs and provide them to the RBI appropriately at periodic and/or urgent intervals, as necessary.
Maintaining high governance standards is crucial for the effectiveness of the SRO-FT. The SRO-FT must uphold transparency, accountability, integrity, fairness, responsiveness, and compliance with all relevant laws and regulations. Additionally, it is required to implement robust conflict of interest management, ensure the professional competence of its leadership, and promptly address grievances. The SRO-FT must instil trust and confidence within the FinTech ecosystem it oversees. The SRO-FT must comply with the following guidelines to uphold the principles of good governance:
The SRO-FT must be professionally managed, and its Articles of Association (AoA) must contain appropriate provisions to ensure this. The AoA must explicitly outline the functioning of the Board/governing body/management and comprehensively address conflicts of interest.
The AoA must lay down the criteria for admission, expulsion, suspension, re-admission, etc., of its members.
The SRO-FT must adopt the highest standards in governance and maintain the essence of impartiality in decision-making.
The Board must put in place a framework for the ongoing monitoring of its directors ‘fit and proper’ status. Further, any change in the directorship or adverse change in its fit and proper status must be immediately reported to the RBI.
At least one-third of the members of the Board, including the chairperson, must be independent and without any active association with a FinTech entity. Further, most nonindependent directors are to be representative of FinTechs that are currently not directly regulated.
The Board must ensure that the SRO-FT has adequately skilled human resources and robust technical capability to monitor the sector.