RBI bars Mastercard Asia Pacific from acquiring new customers in India from 22 July

Mumbai: The Reserve Bank on Wednesday barred Mastercard Asia Pacific from onboarding new credit, debit and prepaid card customers with effect from 22 July as it failed to comply with data storage norms. The supervisory action will not impact existing customers of Mastercard, the Reserve Bank of India (RBI) said. Taking action against Mastercard, RBI said, “notwithstanding lapse of considerable time and adequate opportunities being given, the entity has been found to be non-compliant with the directions on Storage of Payment System Data”. According to RBI, the directions will not impact existing customers of Mastercard. “Mastercard shall advise all card issuing banks and non-banks to conform to these directions”. In terms of its circular on Storage of Payment System Data on 6 April, 2018, all system providers were directed to ensure that within a period of six months the entire data relating to payment systems is stored only in India, as per the central bank. Mastercards becomes the third major Payment System Operator on which restrictions have been imposed for non-compliance with RBI’’s direction on Storage of Payment System Data. Earlier, RBI had restricted American Express Banking Corp and Diners Club International Ltd from onboarding new domestic customers on to their card networks from 1 May for violating data storage norms. In 6 April, 2018, the RBI had directed all Payment System Providers to ensure that within a period of six months the entire data (full end-to-end transaction details / information collected / carried / processed as part of the message / payment instruction) relating to payment systems operated by them is stored in a system only in India. They were also required to report compliance to RBI and submit a board-approved System Audit Report conducted by a CERT-In empanelled auditor within specified timelines.