News
Public · Published
India plans stringent digital locks to secure banking data
India's Bureau of Indian Standards plans to update rules for protecting, storing and transferring encryption keys, digital codes that secure banking data and transactions. The proposed rules would align with international specification ISO 20038:2026, and adoption would follow consultations with banks and security agencies, so the change is not yet final.
Published:
Updated:
What happened
India’s Bureau of Indian Standards plans to update rules for protecting, storing and transferring encryption keys, digital codes that secure banking data and transactions. The proposed rules would align with international specification ISO 20038:2026, and adoption would follow consultations with banks and security agencies, so the change is not yet final.
Proposed
Global impact / market context
If adopted, stronger rules for handling encryption keys could require banks to change how they store and transfer sensitive information, potentially adding security-related costs. Better protection could reduce exposure to data theft, but the article does not specify implementation costs or whether the standards would prevent fraud.
Analyst inference
The proposal comes amid concern about financial data security and reported fraud involving Rs.48,021 crore in FY26, even as reported cases fell 57.4% year over year. The value involved rose 46.4%, highlighting the scale of losses without showing that the proposed rules will address them.
Confirmed
What to watch
- Watch for the outcome of consultations with banks and security agencies, since their input precedes adoption and could shape the final requirements for handling encryption keys. Confirmed
- Check whether BIS publishes final rules aligned with ISO 20038:2026, including when they would take effect and what changes banks must make to storage and transfers. Analyst inference
- Look for evidence that banks need added spending or operational changes to comply; the report gives no cost estimates or details on how implementation would work. Analyst inference
Evidence
- Original source link unavailable