Context: Responding to a petition filed in the Supreme Court, the Reserve Bank of India (RBI) has defended the collection of financial data of banking users by credit rating companies to prepare credit scores.
It added that this was precisely the purpose behind Parliament enacting the Credit Information Companies (Regulation) Act, 2005 and companies do not need consent from the borrowers for this.
Relevance of the Topic: Prelims: Key facts about Credit Information Companies.
Supreme Court Case Overview
- A Bengaluru-based entrepreneur and educational trainer, filed a plea questioning the legality of Credit Information Companies (CICs) operations.
- Key Allegations:
- CICs collect financial data without obtaining explicit borrower consent leading to privacy violation.
- Mechanism of "forced consent" coerces users into allowing their financial data to be shared without an option to opt out.
- CICs allegedly profit by selling credit data to banks and financial institutions without user permission.
- CICs retain data beyond the seven-year limit established by the CIC Act.
- The Supreme Court has appointed a Senior Advocate as amicus curiae to assist in the matter.
- RBI’s Defence in Supreme Court:
- RBI argues that the collection of financial data by CICs is legal under the CICR Act, 2005, and that obtaining individual consent is unnecessary for credit assessment.
- RBI clarified that while seven years is the minimum retention period, there is no upper limit for data storage.
- CICs serve a vital role in risk mitigation, helping lenders assess a borrower's ability to repay loans and reducing Non-Performing Assets (NPAs).
- RBI assures that CICs follow strict security safeguards to prevent unauthorised data access or misuse, with penalties up to Rs. 1 crore for violations.
- Legal and Ethical Implications:
- The case raises questions about the intersection of data privacy and financial regulation.
- It challenges the ethical implications of data collection practices by financial institutions.
- The outcome could set precedents for how personal financial data is handled in India.
About Credit Information Companies (CICs)
- What do they do?
- CICs collect public data, credit transactions and payment histories of individuals and companies regarding loans and credit cards, among others.
- Their primary function is to gather data from various sources, such as banks, financial institutions, lenders, and other credit-granting entities, and then compile this data into credit reports.
- Banks, non-banking financial institutions refer to the CIC's report and score to decide borrowers' creditworthiness before granting a loan or issuing a credit card.
- Regulation:
- CICs in India are licensed by the RBI and governed by Credit Information Companies Regulation Act, 2005 (CICRA) and various other rules and regulations issued by the RBI.
- As per Section 15 of CICRA, every Credit Institution (like banks) should be a member of at least one CIC.
- CICRA also stipulates that a CIC may seek and obtain information from its members only. Thus, if a bank seeks information from a CIC, it will get the information given by other institutions (to CIC) only.
- At present, four credit information companies are given certificates of registration by the RBI. These companies are:
- TransUnion Credit Information Bureau (India) Limited (CIBIL)
- Equifax Credit Information Services Private Limited
- Experian Credit Information Company of India Private Limited
- CRIF High Mark Credit Information Services Private Limited.
- CICs are responsible for safeguarding this sensitive information, ensuring data privacy and protection.
Importance of CICs
For Lending Institutions:
- Credit Risk Assessment: CICs offer detailed insights into a borrower’s credit history, enabling lending institutions to evaluate potential risks accurately.
- Streamlined Lending Decisions: By using credit scores and reports from CICs, lending institutions can make quicker and more reliable lending decisions.
- Portfolio Diversification: CIC data allows lending institutions to identify creditworthy customers and explore new lending opportunities, leading to portfolio diversification.
For Borrowers:
- Higher Loan Approvals: Good credit score increases the chances of loan approvals.
- Lower Interest Rates: Lenders offer lower interest rates to borrowers with high credit scores, reducing the cost of borrowing.
- Better Negotiation Power: Borrowers with positive credit reports are in a stronger position to negotiate the terms and conditions of loans.
CICs must employ robust encryption, firewalls, and other security measures to safeguard data against unauthorised access to databases and breaches. Also, CICs must comply with regulations like Information Technology Act, 2000, ensuring responsible data collection, storage, and usage.