Finance rules sit on top of DPDP, not instead of it.
Every fintech product falls under a regulator: RBI, SEBI, IRDAI or PFRDA. These pages show the extra duties on top of DPDP. They cover payments, loans, investing and insurance.
Scope: this section covers how India's data and AI rules land inside financial services. It is not general banking-compliance guidance.
Fintech & digital finance
Payments, digital lending, Account Aggregator, fraud and data localisation.
Payments and Wallet Data
How payment and wallet data is stored and kept in India, and which RBI rules to read.
ReadPayment Apps
The bank, PPI issuer, or aggregator behind the app decides what it can do.
ReadLending Apps
Digital lending has its own RBI rules on top of DPDP. See which ones to read.
ReadAccount Aggregator Framework
An RBI system to share money data between firms, with the user's consent.
ReadFraud, Disputes, and Chargebacks
How fraud reports and disputes on digital payments are handled.
ReadAdjacent topics
Not fintech rules as such, but they shape how digital finance products handle data.
KYC / AML Touchpoints
Why it matters: digital sign-up flows often have to run ID checks, which means collecting ID data.
ReadRecordkeeping and Retention
Why it matters: finance laws can require you to keep records, which limits when you may delete data.
ReadInvestment Apps
Why it matters: an app that gives personal investment advice may need SEBI registration.
ReadInsurance Tech
Why it matters: insurance apps often handle health data and sit under IRDAI.
ReadConsumer Complaints and Escalation
Why it matters: your app's complaint flow is often the first step before a regulator's ombudsman.
ReadBFSI Basics + Regulator Touchpoints
Why it matters: you need to know which regulator covers your product before you build it.
ReadData, partners and context
How financial data is shared and used, and how India compares.
Vendor and Processor Controls
Cloud, ID-check, scoring and debt-collection firms. Contracts, audits, exit plans and owners.
ReadConsent in Finance + Data Minimisation
Ask only for what's needed. Explain why. Ask for each permission on its own.
ReadData Sharing with Partners
Sign a contract. Say which data, for what use, and when it is deleted.
ReadProfiling and Risk Scoring
Credit decisions use personal data. Keep it accurate, and let people challenge wrong decisions.
ReadIndia vs Global Finance Privacy
In India, DPDP and the money regulators apply at the same time.
ReadWhat Founders Need to Know
Treat finance regulation as a design limit. Pick licensed partners carefully.
ReadAm I a Data Fiduciary?
Sort out your DPDP status first. Run the self-check. Then add the RBI, SEBI or IRDAI rules.
Run it nowHow does this apply to you?
Take the 2-minute self-check to find out whether you're a Data Fiduciary, Data Processor, or both — with your personalised action checklist.
Take the DPDP Applicability CheckYour answers stay in your browser. If you choose "Email me this report", we send your email address and result type to our report service.