Non-banking financial companies (NBFCs) cannot outsource core management functions like internal audit, strategic and compliance functions for know your customer (KYC) norms, sanction of loans and management of investment portfolio.In a notification on its website on Thursday RBI issued fresh directions on managing risks and code of conduct in outsourcing of financial services by NBFCs. “Access to customer information by staff of the service provider shall be on 'need to know' basis i.e., limited to those areas where the information is required in order to perform the outsourced function,” RBI said. These norms have to be complied with in the next two months.NBFCs have to ensure that service providers are able to isolate and clearly identify the NBFC 's customer information, documents, records and assets to protect the confidentiality of the information. Any leakage of confidential customer related information should be reported to the central bank immediately, RBI said adding that NBFCs would be liable to its customers for any damages.A board approved code of conduct for direct sales and recovery agents should also be put in place. “It shall be clearly indicated that NBFCs' grievance redressal machinery will also deal with the issue relating to services provided by the outsourced agency,” RBI said.NBFCs would also be responsible for making currency transaction reports and suspicious transactions reports to the financial intelligence unit for activities carried out by the service providers.

Source: Economic Times November 09, 2017 16:28 UTC