DELHI HC SEEKS RBI’S RESPONSE ON DATA PROTECTION IN DIGITAL LENDING
Why in the News?
- Judicial intervention: The Delhi High Court sought the Reserve Bank of India‘s stand on a PIL alleging privacy and data protection violations by digital lending apps.
- Notice issued: The Court issued notice to the Centre and RBI, calling the concerns raised as serious.
- Regulatory focus: The plea questions enforcement of the RBI Digital Lending Guidelines, 2025, drawing parallels to environmental jurisprudence principles.
ALLEGATIONS IN THE PIL
- Privacy breach: NBFC-linked digital lending apps allegedly access prohibited mobile phone resources.
- Coercive consent: Borrowers are forced to accept non-negotiable, broad privacy policies, making consent involuntary, reminiscent of concerns in environmental clearance processes.
- Disproportionate data use: Data collection allegedly exceeds what is required for KYC or credit assessment, echoing issues of proportionality in environmental impact assessments.
- Guideline violation: Practices claimed to be contrary to Section 12 of the RBI’s 2025 guidelines, similar to violations of environmental regulations.
- Borrower vulnerability: Digital borrowers face systemic power imbalance and lack of meaningful choice, comparable to challenges in environmental democracy.
COURT’S DIRECTIONS AND EXPECTATIONS
- Counter affidavit: RBI directed to file a detailed reply on actions taken to enforce the guidelines.
- Accountability: RBI must explain steps taken against violators of digital lending norms, drawing on principles like the polluter pays principle in environmental cases.
- Regulatory oversight: Emphasis on active supervision of NBFCs and fintech platforms, similar to oversight in environmental clearance processes.
- Rights protection: Court signalled concern for borrowers’ right to privacy and data security, echoing the precautionary principle in environmental jurisprudence.
- Next steps: Matter to proceed after RBI’s response is placed on record, with potential implications for digital lending practices akin to ex-post facto environmental clearances.
RBI DIGITAL LENDING GUIDELINES, 2025 |
| ● Objective: Ensure fair, transparent, and secure digital lending practices. |
| ● Consent norms: Mandate explicit, informed, and purpose-limited consent for data access. |
| ● Data protection: Restrict access to unnecessary mobile phone resources. |
| ● Accountability: Hold NBFCs and regulated entities responsible for fintech partners. |
| ● Consumer protection: Strengthen borrower rights, privacy, and grievance redressal. |
