Regulation tracker
What changed, and what it means for your business.
RBI, SEBI, NPCI, GST, Income Tax, MCA, TRAI, data protection, labour and more, in one timeline. Each change comes with a plain-English line on what it means for MSMEs, founders, merchants and FinTechs, and a link to the official circular.
Last reviewed 11 Nov 2026
- 244
- changes tracked
- 20
- regulators
- 52
- must-know changes
- 10
- coming up
Coming up next
13 Nov 2026in 1 day
DPDP phase 2: Consent Manager registration opens from 13 Nov 2026
Relevant if you plan to build or use a consent platform. Consumers will be able to give and withdraw consent through registered Consent Managers.
15 Dec 2026in 33 days
Four-layer motor insurance structure with option form for private cars and two-wheelers
When insuring vehicles you will tick which optional covers you want, making it clearer what you are paying for. Policies must also be available on Bima Sugam.
31 Dec 2026in 49 days
Account Aggregators to become interoperable by end of 2026
Sharing bank statements for loans gets easier. FinTech lenders should plan for wider AA coverage by 31 December 2026.
1 Jan 2027in 50 days
Uniform loan recovery and recovery agent rules for all lenders
Recovery calls and visits must follow set norms. If you lend, review agency contracts. If you borrow, you can complain about harassment.
1 Jan 2027in 50 days
Every insurance policy to be tagged to the salesperson; perpetual registration for intermediaries
Mis-selling becomes traceable to a named person. Corporate agents, brokers and insurtechs must update systems for tagging and switch to annual fees.
1 Jan 2027in 50 days
Fraud victims to get up to ₹25,000 compensation; banks to decide complaints in 45 days
Sole proprietors are covered. Report any fraud to your bank and the 1930 helpline within five calendar days to keep zero-liability and compensation rights.
Every change, newest first
244 changes
November 2026
5Nov
Updated cyber security and payment security directions for non-bank payment operators
RBI consolidated its 2024 cyber resilience directions for non-bank payment system operators with rules for third-party ATM switch providers and system audits. Applies now to large and medium PSOs, and from 1 April 2028 to small PSOs.
What it means for youPayment fintechs must meet board-level cyber governance, testing, vendor and API security controls, and should extend them to partners like gateways and vendors.
5Nov
Draft lender-wise priority-sector lending Directions open for comment
RBI released draft PSL Directions for each bank type, consolidating existing instructions. Comments are open till 26 November 2026.
What it means for youNo major change is expected for MSME borrowers, but lenders and FinTechs that originate PSL loans should review the drafts before the deadline.
- NBFCs & lenders
- FinTechs
- MSMEs
4Nov
CERT-In issues AI Security Auditing Guidelines
CERT-In published guidelines for auditing the security of AI systems, with risk tiering, an applicability matrix and a five-level maturity model.
What it means for youIf you build or deploy AI, expect clients and auditors to use these as a checklist. Start keeping records of AI risks, controls and human oversight.
- Startups
- FinTechs
2Nov
Four-layer motor insurance structure with option form for private cars and two-wheelers
Following a Supreme Court order, private car and two-wheeler policies must follow a four-layer structure: third-party (mandatory), occupant liability, personal accident and own damage, with uniform wordings and a customer option form, from 15 Dec 2026.
What it means for youWhen insuring vehicles you will tick which optional covers you want, making it clearer what you are paying for. Policies must also be available on Bima Sugam.
October 2026
24Oct
FY 2025-26 financial statements can be filed till 31 Dec 2026 without extra fees
MCA allowed AOC-4 filings for FY 2025-26 up to 31 December 2026 and MGT-7/MGT-7A annual returns up to 31 January 2027 without additional fees. AGM deadlines are not extended.
What it means for youYou get extra time to file accounts and annual returns without late fees, but the AGM must still be held on time.
23Oct
FEMA compounding for ODI, ECB and guarantee lapses delegated to regional offices
Compounding applications for overseas investment, borrowing and lending, and guarantee contraventions can now be handled by select RBI regional offices, not only the central office.
What it means for youFounders who missed ODI or ECB filings can settle through a regional office, which should be quicker.
13Oct
Caller name display (CNAP) mandated on 4G and 5G networks from 1 Nov 2026
DoT instructed all mobile operators to show the caller's KYC-registered name on incoming calls on 4G and higher networks across India from 1 Nov 2026. 2G, 3G and landlines will be decided later.
What it means for youCustomers will see the name your connections are registered in. Make sure business SIMs and lines are in the company's correct name.
8Oct
57th GST Council: PAN-based simple registration for small e-commerce sellers in other states
Small sellers passing on ITC of up to ₹2.5 lakh a month can take a simplified PAN-based registration in other states and declare the e-commerce operator's warehouse as their place of business. Registration amendments will also be auto-accepted.
What it means for youD2C brands and marketplace sellers could stock in other states' warehouses without renting their own premises there. Wait for the notification before restructuring.
- E-commerce sellers
- MSMEs
- Startups
8Oct
57th GST Council: arrest powers withdrawn, prosecution threshold raised to ₹5 crore, lower penalties
The Council recommended withdrawing certain arrest powers, raising the prosecution threshold from ₹1 crore to ₹5 crore, no show cause notice below ₹10,000 tax, removing the ₹10,000 minimum penalty in non-fraud cases and cutting the general penalty to ₹10,000.
What it means for youSmall procedural lapses should carry less risk once the law is amended. These are recommendations that need changes to the CGST Act before they apply.
8Oct
57th GST Council: refunds on input services and capital goods, fewer blocked credits
The Council recommended refunds of input service ITC under inverted duty (from 1 Nov 2026) and of capital goods ITC for exports and inverted duty (from 1 April 2027, spread over 60 months). It also proposed allowing ITC on health and life insurance and free samples.
What it means for youManufacturers and exporters with large input service or machinery credits could unlock cash. Track your stuck ITC now so you can claim once the rules are notified.
- MSMEs
- Exporters
8Oct
57th GST Council: late fee waiver for small taxpayers and quarterly scheme for B2C businesses
The Council recommended waiving late fees for returns filed by the end of the due month for taxpayers with turnover up to ₹5 crore, and floated an optional Annual Return Quarterly Payment scheme for B2C-only businesses up to ₹5 crore.
What it means for youSmall retailers may get relief for short delays and possibly fewer returns. The ARQP scheme is only a concept note for now.
- MSMEs
- Merchants
8Oct
57th GST Council: e-way bill checks only on intelligence, no interception in transit states
Vehicles could be intercepted only on specific intelligence with Joint Commissioner approval, and only in the state where the supplier or buyer is located. Goods without an e-way bill can still be stopped anywhere.
What it means for youFewer roadside detentions for compliant inter-state shipments once the law is amended. Always carry a valid e-way bill.
- MSMEs
- Merchants
- E-commerce sellers
7Oct
Repo rate raised to 5.50%, first hike since the 2025 easing cycle
The MPC raised the repo rate by 25 basis points from 5.25% to 5.50%. SDF moved to 5.25% and MSF to 5.75%.
What it means for youRepo-linked loan rates will rise at the next reset. Expect EMIs or tenures to go up, and factor higher borrowing cost into working capital plans.
- MSMEs
- Startups
- Everyone
7Oct
Account Aggregators to become interoperable by end of 2026
Customers will be able to use any Account Aggregator to access data across all financial information providers. Depositories can include bank account data in the consolidated account statement.
What it means for youSharing bank statements for loans gets easier. FinTech lenders should plan for wider AA coverage by 31 December 2026.
- FinTechs
- NBFCs & lenders
- MSMEs
September 2026
24Sep
Common advertisement code approved for brokers, advisers and fund houses
SEBI's board approved one advertising code for brokers, advisers, research analysts, bond platforms, PMS and mutual funds. Prior approval of ads goes, with reporting within 3 working days, and celebrity brand promotion is allowed with approval.
What it means for youSEBI-registered fintechs can launch campaigns faster, but must report each ad within three working days. Watch for the circular with the detailed rules.
23Sep
Consultation on overhauling insurance distribution, commissions and entry rules
IRDAI proposed replacing today's agent, broker and corporate agent structure with three categories of distribution entities, with simpler registration, lower capital needs and fees, and freedom to do other financial and non-financial business. Comments closed 31 October 2026.
What it means for youFintechs and small businesses may find it cheaper to distribute insurance alongside their main business if the proposals are adopted.
- FinTechs
- Startups
- MSMEs
18Sep
TCCCPR third amendment: AI spam detection, robocall declaration, 7-day enquiry window
AI-flagged numbers plus 3 complaints in 10 days now trigger action. Businesses must pre-declare automated (A2P) calls. Marketing after a customer enquiry is allowed only for 7 days. Spam apps cannot blanket-tag 140, 1600 or 1601 numbers.
What it means for youDeclare any robocall or auto-dialer use to your operator, keep written proof of enquiries, and move legacy consents onto the digital registry.
17Sep
PF wage ceiling raised from ₹15,000 to ₹25,000 a month
Under the Social Security Code, the wage ceiling for the provident fund chapter was raised to ₹25,000 a month, replacing the ₹15,000 notified in May 2026.
What it means for youMore employees now fall within mandatory PF, and contributions calculated on the ceiling go up. Recheck payroll costs and salary offers.
- Employers
- MSMEs
- Startups
15Sep
0.4% MDR on UPI merchant payments above ₹2,000, capped at ₹300
From 15 Oct 2026 merchants pay 0.4% on UPI P2M payments above ₹2,000, capped at ₹300 at ₹75,000 and above. Capital markets pay 0.02%. Insurance, fuel, utilities and some sectors pay ₹5 flat. Payments up to ₹2,000, P2P and AutoPay are free.
What it means for youLarger UPI receipts now cost money. Small P2PM merchants receiving up to ₹1 lakh a month stay at zero MDR. Merchants cannot pass the charge to customers, so factor it into pricing.
- Merchants
- MSMEs
- E-commerce sellers
- Startups
11Sep
Draft rules for temporary debit holds on money-mule linked accounts
Following a Supreme Court order, RBI proposed an SOP for banks to place temporary debit holds on amounts or accounts linked to money mules and cyber fraud. Comments closed 2 October 2026.
What it means for youMerchants who receive payments from many strangers should keep transaction records. A fraud-linked credit could trigger a hold on your account.
- Merchants
- FinTechs
- MSMEs
7Sep
Older angel funds get until 31 March 2027 to move to accredited investors only
Angel funds registered on or before 10 September 2025 can keep taking money from up to 200 non-accredited investors until 31 March 2027, extended from 8 September 2026.
What it means for youAngel networks have six more months to get members accredited. After March 2027, non-accredited angels cannot put money into new deals through these funds.
1Sep
IRDAI proposes a Public Insurance Registry as digital public infrastructure
IRDAI released a consultation paper on a Public Insurance Registry giving a single view of policies across insurers, easier product comparison, less paperwork, smoother claims and help finding unclaimed amounts.
What it means for youCould let lenders verify insurance cover on collateral and let businesses see all their policies in one place. Insurtechs may build on it.
- FinTechs
- NBFCs & lenders
- Everyone
August 2026
12Aug
Draft unified rules on interest rates for loans by all banks and NBFCs
RBI proposed one principle-based framework for fixed and floating loan pricing across banks, NBFCs and co-op banks, including MCLR and EBLR fixes and standard day-count and reset-date practices. Comments closed 11 September 2026.
What it means for youIf finalised, how NBFCs and banks set and reset your loan rate will become more uniform and transparent. Watch for the final Directions.
- MSMEs
- Startups
- NBFCs & lenders
- FinTechs
7Aug
MSMED Act amended: Udyam made permanent, faster delayed payment recovery
Parliament passed the MSMED Amendment Bill 2026. It puts the MSME definition and Udyam into the Act, sets time limits for mediation and arbitration, allows recovery as land revenue, and requires CPSEs to pay MSMEs via TReDS.
What it means for youStronger tools to recover late payments, and decriminalised penalties. Watch for the date it comes into force.
6Aug
Uniform loan recovery and recovery agent rules for all lenders
One set of conduct rules for banks, NBFCs and other lenders on loan recovery, recovery agents' behaviour, training and due diligence, effective 1 January 2027.
What it means for youRecovery calls and visits must follow set norms. If you lend, review agency contracts. If you borrow, you can complain about harassment.
- NBFCs & lenders
- FinTechs
- MSMEs
- Everyone
July 2026
29Jul
Every insurance policy to be tagged to the salesperson; perpetual registration for intermediaries
IRDAI amended intermediary rules: the authorised salesperson must be tagged to every proposal and policy (from 1 Jan 2027), and intermediary registrations become perpetual with an annual fee. It also notified a Policyholders' Education and Protection Fund.
What it means for youMis-selling becomes traceable to a named person. Corporate agents, brokers and insurtechs must update systems for tagging and switch to annual fees.
- FinTechs
- Everyone
21Jul
Draft Foreign Investment Rules 2026 to replace NDI Rules
RBI published draft rules to replace the FEMA Non-Debt Instruments Rules 2019 with a simpler, principle-based foreign investment framework, separating FEMA procedure from sector policy. Comments closed 31 August 2026.
What it means for youStartups raising foreign equity should watch for the final rules. Pricing, reporting and instrument rules for FDI may change.
- Startups
- Listed & IPO-bound
15Jul
India-UK trade agreement (CETA) in force: zero duty on about 99% of Indian exports
The India-UK Comprehensive Economic and Trade Agreement and the social security agreement took effect on 15 July 2026. Certificates of origin are issued on the eCoO 2.0 platform on self-certification.
What it means for youExporters to the UK should claim preferential duty with a certificate of origin. Staff on short UK postings can avoid double social security contributions.
- Exporters
- MSMEs
- Employers
June 2026
24Jun
Fraud victims to get up to ₹25,000 compensation; banks to decide complaints in 45 days
From 1 Jan 2027, individuals including sole proprietors who lose up to ₹50,000 to digital fraud can get 85% of the net loss, capped at ₹25,000, once in a lifetime, if reported to the bank and 1930 within five days. Banks must resolve domestic fraud complaints within 45 days.
What it means for youSole proprietors are covered. Report any fraud to your bank and the 1930 helpline within five calendar days to keep zero-liability and compensation rights.
23Jun
New TReDS Directions: simpler MSME onboarding and credit-guarantee cover
Consolidated TReDS rules. MSME onboarding is simplified, financiers can take credit-guarantee cover, insurers and the government credit-guarantee trust can participate, and discounting stays without recourse to the seller.
What it means for youSelling invoices on TReDS should get easier and cheaper for MSME suppliers. If big buyers pay you late, register on a TReDS platform.
15Jun
New rules on mis-selling, dark patterns and DSAs for banks and NBFCs
Comprehensive rules on advertising, marketing and sale of financial products, including third-party products, DSA and DMA conduct, dark patterns and mis-selling, effective 1 January 2027.
What it means for youBanks cannot force insurance or other products with a loan. FinTechs and DSAs selling loans must review their scripts and app flows.
- FinTechs
- NBFCs & lenders
- MSMEs
- Everyone
3Jun
CCPA fines PhysicsWallah and McAfee for dark patterns
CCPA fined PhysicsWallah ₹5 lakh and McAfee ₹1 lakh for dark patterns that affected informed consumer choice, and ordered them to stop.
What it means for youDark pattern rules are being enforced against well-known brands. Review subscriptions, auto-renewals and checkout design.
- E-commerce sellers
- Startups
May 2026
25May
Micro Credit Card launched: ₹5 lakh revolving credit for Udyam micro units
SIDBI launched the Micro Credit Card Scheme giving Udyam-registered micro enterprises revolving credit up to ₹5 lakh with 75% guarantee cover and no mandatory primary security.
What it means for youA simple working capital line for small shops and units. Register on Udyam and ask your bank about the card.
- MSMEs
- Merchants
8May
Market price data for education now usable with a 30-day lag
SEBI set a single 30-day lag for sharing and using stock price data for educational purposes, replacing the one-day sharing lag (2024) and the three-month usage lag for educators (January 2025).
What it means for youFinance educators and content creators can use price data that is a month old, not three months old. Live or near-live data in teaching content is still not allowed.
8May
Code on Wages (Central) Rules 2026 notified
The Centre notified final rules under the Code on Wages, replacing old rules under the Payment of Wages and Minimum Wages Acts. They apply from publication.
What it means for youThe detailed forms, registers and procedures for wage compliance are now fixed for central sphere establishments. Update payroll and HR templates.
- Employers
April 2026
30Apr
Online Gaming Rules 2026 in force, Online Gaming Authority set up
The Promotion and Regulation of Online Gaming Rules 2026 apply from 1 May 2026. They set up the Online Gaming Authority of India, a process to classify games and registration for notified e-sports and social games.
What it means for youGaming companies need to check if their games need classification or registration and show registration details. Complaints must be decided within 90 days.
29Apr
Small NBFCs without public funds or customers exempted from registration
NBFCs that do not use public funds and have no customer interface, including Type I NBFCs with assets under ₹1,000 crore, can be exempt from RBI registration, subject to conditions.
What it means for youFounders holding investments through a small NBFC-type company may be able to deregister and cut compliance.
- NBFCs & lenders
- Startups
24Apr
RBI cancels Paytm Payments Bank's banking licence
RBI cancelled the banking licence of Paytm Payments Bank from close of business on 24 April 2026 and moved to wind it up. RBI said the bank had enough liquidity to repay all depositors.
What it means for youAny remaining balances or accounts with Paytm Payments Bank should be moved. Shows how serious compliance failures can end a payments licence.
- FinTechs
- Merchants
Who the regulators are
- CCI
Competition Commission of India
Official website for Competition Commission of India - CERT-In
Indian Computer Emergency Response Team
Official website for Indian Computer Emergency Response Team - Consumer Affairs
Department of Consumer Affairs
Official website for Department of Consumer Affairs - DGFT
DGFT and Customs
Official website for DGFT and Customs - DoT
Department of Telecommunications
Official website for Department of Telecommunications - DPIIT
DPIIT and Startup India
Official website for DPIIT and Startup India - FEMA
Foreign exchange (RBI and DPIIT)
Official website for Foreign exchange (RBI and DPIIT) - GST
GST Council, CBIC and GSTN
Official website for GST Council, CBIC and GSTN - IFSCA
International Financial Services Centres Authority (GIFT City)
Official website for International Financial Services Centres Authority (GIFT City) - Income Tax
Central Board of Direct Taxes
Official website for Central Board of Direct Taxes - IRDAI
Insurance Regulatory and Development Authority of India
Official website for Insurance Regulatory and Development Authority of India - Labour
Ministry of Labour, EPFO and ESIC
Official website for Ministry of Labour, EPFO and ESIC - MCA
Ministry of Corporate Affairs
Official website for Ministry of Corporate Affairs - MeitY
Ministry of Electronics and IT
Official website for Ministry of Electronics and IT - MSME
Ministry of MSME
Official website for Ministry of MSME - NPCI
National Payments Corporation of India
Official website for National Payments Corporation of India - PFRDA
Pension Fund Regulatory and Development Authority
Official website for Pension Fund Regulatory and Development Authority - RBI
Reserve Bank of India
Official website for Reserve Bank of India - SEBI
Securities and Exchange Board of India
Official website for Securities and Exchange Board of India - TRAI
Telecom Regulatory Authority of India
Official website for Telecom Regulatory Authority of India
This tracker is a plain-English summary to help you spot what matters. It is not legal, tax or financial advice. Always read the official circular, and check with your CA, CS or lawyer before acting. Spotted a change I've missed? Tell me.
FAQ
Questions people ask
What is the regulation tracker?
The regulation tracker is one timeline of rule changes from RBI, SEBI, NPCI, GST, Income Tax, MCA, TRAI, data protection, labour and more. Each change comes with a plain-English line on what it means for MSMEs, founders, merchants and FinTechs, and a link to the official circular or notification.
Is the regulation tracker legal advice?
No. The tracker is a plain-English summary to help you spot what matters. It is not legal, tax or financial advice. Always read the official circular, and check with your CA, CS or lawyer before acting on any change. Each entry links to its official source wherever one is available.
How often is the regulation tracker updated?
The tracker is reviewed by hand, and the date of the last review is shown at the top of the page. New circulars and notifications are added as they come out. Changes marked as coming up switch to in force automatically on their effective date, so their status stays current between reviews.
Who is the regulation tracker for?
The tracker is written for business owners, MSMEs, founders, merchants and FinTech teams in India. You can filter changes by regulator, topic and who they affect, see what is coming up next, and focus on the items marked as must know.
What if I spot a change that is missing?
Tell Sumit through the Let's talk page. If you have seen a circular or notification that belongs in the tracker, or an entry that looks out of date, send a short note with a link to the official source. Suggestions like this help keep the tracker useful for everyone who relies on it.
Explore more for Indian businesses
Payments, lending and compliance
Not sure how a change affects your business?
Send me the change and a line about your business. If it's in my area, I'll tell you what I'd do.