NBFC Self-Regulatory Organisations in India: How SROs Work for Digital Lenders

In August 2024, the RBI announced its framework for Self-Regulatory Organisations (SROs) for non-bank lenders, particularly those engaged in digital lending. Subsequently, digital lending NBFCs gained a structured regulatory pathway for improved market conduct and compliance oversight. Furthermore, the framework recognises that the diversity and scale of digital NBFC lending across thousands of entities, ranging from Rs 25 crore in assets to Rs 5,000 crore, requires an intermediate regulatory layer between the RBI and individual small NBFCs. Consequently, SROs help extend regulatory reach while maintaining effective supervision across the digital lending ecosystem.

NBFC SRO for digital lending in India is the RBI’s mechanism to achieve better market conduct standards, grievance redressal, and data reporting across the digital lending ecosystem without requiring the RBI to directly supervise every entity. This guide explains how the SRO framework works and what it means for NBFC compliance.

What is an NBFC SRO and Why Did the RBI Create Them?

The RBI delegates regulatory authority to a Self-Regulatory Organisation (SRO), enabling it to set and enforce conduct standards for its members. SROs are a well-established mechanism in financial services; globally, stock exchanges, broker-dealers, and insurance intermediaries in many countries operate under SRO frameworks.

The RBI created the NBFC SRO framework for three practical reasons. First, the RBI cannot directly supervise all 9,000-plus registered NBFCs with the same intensity. An SRO creates an additional supervision layer that extends regulatory reach without adding regulatory staff.

Second, digital lending has produced conduct failures, aggressive collection practices, opaque pricing, and unauthorised data access at entities that were often too small for the RBI to examine before the harm occurred. Additionally, consequently, an SRO can monitor these smaller entities and intervene faster than the traditional RBI examination cycle. Moreover, this additional oversight layer helps identify compliance issues before they escalate into larger market concerns. Furthermore, it enables regulators and industry participants to address emerging risks more effectively across the digital lending ecosystem.

Third, an SRO can aggregate and monitor industry-level data, such as cross-lender borrower indebtedness trends, sector-level default patterns, and pricing dynamics, more efficiently than the RBI can through individual data collection from thousands of entities. Furthermore, this centralised data approach enables better market monitoring and helps identify emerging risks across the digital lending ecosystem.

The RBI’s SRO Framework for Digital Lending: Key Requirements

Accordingly, the RBI SRO framework for NBFCs specifies requirements for both the SRO entity itself and member NBFCs.

For the SRO entity:

• The SRO must incorporate itself as a not-for-profit entity under the Companies Act.
• Minimum net worth of Rs 10 crore.
• Governance structure with a Board that includes independent directors and does not allow any single NBFC or group to control the SRO.
• An effective dispute resolution mechanism for borrower grievances against member NBFCs.
• A monitoring and enforcement mechanism with the power to impose penalties on members for conduct violations.

For member NBFCs:

• RBI requires NBFCs engaged in digital lending to become members of a recognised SRO.
• Members must comply with the SRO’s code of conduct in addition to direct RBI regulation.
• Members must submit data to the SRO as required and participate in the SRO’s grievance redressal mechanism.
• Furthermore, members are subject to the SRO’s monitoring and enforcement actions, including fines, censure, and referral to the RBI for regulatory action.

Which NBFCs Must Join an SRO?

Furthermore, the SRO membership requirement applies to all NBFCs conducting digital lending, including those using digital channels for loan application, assessment, disbursement, or collection. In practice, most active NBFCs in the digital consumer lending, MSME fintech lending, and digital BNPL space are within the SRO requirement scope.

NBFCs conducting exclusively physical lending operations, rural cooperative-style lending with no digital application or disbursement channel, may not fall within the immediate SRO requirement. However, as digital channels become more pervasive, the distinction is narrowing rapidly.

Furthermore, the RBI may recognise multiple SROs for different segments, including consumer digital lending, MSME digital lending, digital payment companies, and other areas. An NBFC operating across segments may need to be a member of multiple SROs.

What Standards Do SROs Enforce for Digital Lenders?

SRO conduct standards for digital NBFC members focus on the most common conduct failures in digital lending.

• Pricing transparency: APR disclosure in all loan communications, prohibition on hidden charges, standardised fee disclosure format.
• Data privacy and consent: compliance with Digital Lending Directions 2025 consent requirements enforced at SRO level with penalty powers.
• Collections conduct: Fair Practices Code for collections enforced with SRO monitoring. Furthermore, borrower complaints about harassment can trigger an SRO investigation before the complaint escalates to the RBI Ombudsman.
• Product suitability: prohibiting the sale of products to borrowers who clearly cannot afford them. A borrower with 90% credit utilisation and an existing DPD should not be offered a new credit product by an SRO member without a documented suitability assessment.
• Furthermore, SROs establish standard timelines for acknowledging and resolving customer complaints. If NBFCs fail to resolve complaints within these timelines, borrowers can escalate them to the SRO’s dispute resolution mechanism.

SRO Membership Compliance Implications for NBFCs

Practical compliance implications of SRO membership for digital NBFCs:

• Annual membership fee: SRO membership fees are typically tiered by NBFC asset size. Smaller digital NBFCs pay lower fees; larger ones pay proportionally more.
• Code of conduct adoption: the SRO’s code of conduct must be adopted and implemented operationally. This is not a signed declaration; it requires actual operational changes in pricing disclosure, consent management, and collections practices.
• Data reporting: periodic data submissions to the SRO (monthly or quarterly) covering loan origination volumes, outstanding loans, DPD profile, and grievance data.
• Grievance mechanism integration: the NBFC’s borrower-facing grievance mechanism must connect to the SRO’s escalation pathway.
• Examination and monitoring: the SRO may conduct thematic reviews, mystery shopping exercises, or data-triggered investigations of member NBFCs. Cooperation is mandatory.

Key Takeaways

• NBFC SRO for digital lending in India is the RBI’s mechanism to extend regulatory reach across thousands of digital lending entities through an intermediate industry body with delegated enforcement authority.
• SRO membership is mandatory for NBFCs conducting digital lending. The SRO enforces conduct standards on top of direct RBI regulation; members face two layers of regulatory accountability.
• SRO conduct standards focus on: pricing transparency, data privacy consent, collections conduct, product suitability, and grievance redressal timelines.
• Practical compliance implications: annual membership fee, code of conduct adoption, periodic data reporting, and cooperation with SRO monitoring and investigations.
• Multiple SROs may be recognised for different segments. NBFCs operating across consumer and MSME digital lending may need multi-SRO membership.

Frequently Asked Questions

Conclusion

NBFC SRO for digital lending in India represents a structural evolution in how digital NBFC lending is regulated. The RBI cannot supervise 9,000-plus entities with equal intensity. SROs provide the intermediate regulatory layer that enforces minimum conduct standards, processes borrower grievances, and monitors market-level risk trends.

For digital NBFCs, responsible lending practices. Moreover, it is a structural governance requirement that, when implemented properly, improves customer trust, reduces complaint escalations, and demonstrates regulatory maturity to investors and co-lending partners.