In a statement addressing the growing Mumbai fintech sector, RBI Governor Sanjay Malhotra emphasised that firms handling user data must regard it as a fiduciary responsibility rather than a mere business asset. He stressed that trust is essential for the adoption and long-term endurance of the financial system.
Malhotra noted that startups and scale-up fintechs experiencing rapid growth bear systemic responsibilities beyond their balance sheets, and that meeting these obligations requires robust operational resilience and strong cybersecurity.
Key points
- Data handling must be treated as a fiduciary responsibility, not a tradeable asset.
- Trust is foundational to widespread use and long-term endurance of digital financial services.
- Firms that are growing significantly should assume systemic responsibility beyond their individual financial statements.
- Operational resilience and cybersecurity are essential prerequisites for achieving scale.
Implications for stakeholders
These remarks carry implications for taxpayers, businesses, investors, and regulators. For fintechs, the emphasis on fiduciary data stewardship implies strengthened governance, clearer data consent practices, enhanced privacy controls, and greater accountability for data breaches or misuse. Investors may view these expectations as indicators of prudent risk management and potential regulatory alignment. Regulators could use the framing to guide supervisory expectations around governance, risk management, and cyber resilience. Consumers stand to benefit from enhanced data protection and greater trust in digital financial services.
Regulatory context
The comments align with broader regulatory imperatives around data protection, consumer privacy, and cybersecurity in financial services. While specific supervisory actions are not detailed, the governor’s call underscores the importance of embedding data stewardship into business models and risk management frameworks as fintechs scale.
