SEBI has permitted entities regulated by the International Financial Services Centres Authority (IFSCA) to access KYC Registration Agency (KRA) records, effective immediately. This move streamlines client onboarding for financial service providers in India's IFSC by enabling the use of centralized KYC infrastructure. Investors and financial firms should note that strict compliance with SEBI's data security guidelines remains mandatory.
The Securities and Exchange Board of India (SEBI) has issued a new directive, effective August 20, 2026, granting entities regulated by the International Financial Services Centres Authority (IFSCA) access to the systems of SEBI-registered KYC Registration Agencies (KRAs). This regulatory update is designed to improve operational efficiency and foster interoperability within the financial services sector, particularly for institutions operating out of India's International Financial Services Centres, such as GIFT City.
Streamlining Client Onboarding
Previously, financial entities operating under the IFSCA had distinct processes for client onboarding. By integrating these entities into the KRA ecosystem—a centralized repository for investor identity data—SEBI aims to remove redundant processes. Under the updated provisions of Regulation 16A(1) of the KYC Registration Agency Regulations, 2011, these firms can now verify and manage client information using the established KRA infrastructure. This integration is expected to reduce the time and cost involved in client verification, making it easier for domestic and international investors to engage with financial service providers in the IFSC.
Compliance and Data Security
While this move enhances operational efficiency, it comes with strict compliance requirements. Entities that gain access to KRA records must adhere to the provisions outlined in the KRA Regulations and SEBI’s master circular concerning KYC norms. A key focus for SEBI is data protection; the regulator has mandated that entities dealing with Foreign Portfolio Investors (FPIs) must follow specific data security guidelines. The use of this shared digital infrastructure necessitates robust cybersecurity frameworks to ensure that sensitive investor data is protected against potential risks.
For the financial ecosystem, this development is a significant step toward unifying the regulatory framework between mainland India and the IFSC. The primary focus for the market will now shift to how quickly these entities integrate with the KRA system and whether this leads to a measurable increase in the ease of doing business for global investors. Market participants should monitor the implementation of these norms to ensure they align with the high data security standards expected by the regulator.