wordpress blog stats
Connect with us

Hi, what are you looking for?

Amex becomes the last company to comply with RBI’s 2018 data localisation norms

After this move by the Indian Central Bank RBI, American Express will be able to onboard new customers again after the ban in May 2021

The Reserve Bank of India (RBI) has announced that it will lift its business restrictions imposed on American Express Banking Corp. (Amex), according to a press release. The decision was taken after Amex complied with the RBI’s 2018 circular mandating storage of payment system data within India, the central bank said in the release.

Why it matters: Amex has a paltry market share in India’s credit card space but it was the only international card issuer which was yet to comply with the RBI circular. Visa, Mastercard, and Diners Club, had already complied with the circular so Amex’s compliance now ensures that all international car issuers can operate in India.

What does it mean: The restrictions imposed by the central bank prevented Amex from inducting new domestic customers into its fold from May 1, 2021. The order was issued by the RBI on April 23, 2021.

  • Amex can now commence its operations and onboard new domestic customers with immediate effect.

FREE READ of the day by MediaNama: Click here to sign-up for our free-read of the day newsletter delivered daily before 9 AM in your inbox.

What did Amex say: The company released a boilerplate statement welcoming RBI’s decision while extending its “gratitude” to all its stakeholders.

Who else has complied with the circular: Mastercard was the last company to comply with the RBI circular before Amex. The central bank lifted its restrictions on June 16, 2022 allowing banks to start issuing cards on the Mastercard network again.

  • Visa was the first to comply with the circular in July 2021 and has managed to take advantage of Mastercard’s absence.
  • The RBI lifted restrictions on Diners Club in November 2021 leaving only Mastercard and Amex under the central bank’s restrictions.

How did this hurt Mastercard’s business: The restriction on Mastercard resulted in many banks shifting to Mastercard’s arch-rival, Visa, including RBL Bank and Yes Bank. The issue also reportedly irked the US government and a senior US trade official termed the move “draconian.”

  • Mastercard said that it complied with the local data storage norms a month after it was barred, but it’s not clear why RBI took so long to vacate its restrictions.

What are RBI’s card localisation guidelines: In April 2018, the RBI had issued the following directions after it observed that not all payments companies were storing data in India:

  • Entire data relating to payment systems must be stored in a system only in India
  • Ensure compliance within a period of six months and report it to the RBI by October 15, 2018
  • Furnish the System Audit Report (SAR) by CERT-IN empanelled auditors by December 31, 2018

What happened in 2019: The RBI went on to clarify the guidelines in June 2019 following concerns raised by the industry:

  • What data should be stored in India: The central bank elaborated on data that had to be stored in India mandatorily:
    • Customer data: Name, mobile number, email, Aadhaar number, PAN number, etc.
    • Payment sensitive data: Customer and beneficiary account details
    • Payment credentials: OTP, PIN, passwords, etc.
    • Transaction data: Origin and destination system information, transaction reference, timestamp, amount, etc.
  • Applicable to: The norms were applicable to transactions made through system participants, service providers, intermediaries, payment gateways, third-party vendors, and other entities in the payments ecosystem apart from all the payment system providers authorized by the RBI.
  • Data processed outside: The central bank clarified that there is no ban on overseas processing of strictly domestic transactions but the data should be brought back to India within one business day or 24 hours of payment processing and be stored locally here.

This post is released under a CC-BY-SA 4.0 license. Please feel free to republish on your site, with attribution and a link. Adaptation and rewriting, though allowed, should be true to the original.

Also read:

Written By

I cover several beats such as Crypto, Telecom, and OTT at MediaNama. I can be found loitering at my local theatre when I am off work consuming movies by the dozen.

Free Reads


According to RazorPay, UPI Switch is able to solve a lot of the currently faced by currently existing UPI infrastructure, as well as added...


The declaration pointed out that end-to-end encryption will jeopardise the ability of tech companies to provide “lawful access” to data of suspected criminals on...


TCA's order stated that Meta combines the data of users who create Threads profiles based on their Instagram accounts without providing users with a...

MediaNama’s mission is to help build a digital ecosystem which is open, fair, global and competitive.



NPCI CEO Dilip Asbe recently said that what is not written in regulations is a no-go for fintech entities. But following this advice could...


Notably, Indus Appstore will allow app developers to use third-party billing systems for in-app billing without having to pay any commission to Indus, a...


The existing commission-based model, which companies like Uber and Ola have used for a long time and still stick to, has received criticism from...


Factors like Indus not charging developers any commission for in-app payments and antitrust orders issued by India's competition regulator against Google could contribute to...


Is open-sourcing of AI, and the use cases that come with it, a good starting point to discuss the responsibility and liability of AI?...

You May Also Like


Google has released a Google Travel Trends Report which states that branded budget hotel search queries grew 179% year over year (YOY) in India, in...


135 job openings in over 60 companies are listed at our free Digital and Mobile Job Board: If you’re looking for a job, or...


By Aroon Deep and Aditya Chunduru You’re reading it here first: Twitter has complied with government requests to censor 52 tweets that mostly criticised...


Rajesh Kumar* doesn’t have many enemies in life. But, Uber, for which he drives a cab everyday, is starting to look like one, he...

MediaNama is the premier source of information and analysis on Technology Policy in India. More about MediaNama, and contact information, here.

© 2008-2021 Mixed Bag Media Pvt. Ltd. Developed By PixelVJ

Subscribe to our daily newsletter
Your email address:*
Please enter all required fields Click to hide
Correct invalid entries Click to hide

© 2008-2021 Mixed Bag Media Pvt. Ltd. Developed By PixelVJ