RBI Issues New Guidelines for Digital Lending and Data Privacy

Q1. As per the RBI's new guidelines issued on May 5, 2026, which of the following is strictly prohibited for digital lending transactions?

1. Direct disbursement from borrower's bank account
2. Repayment through the Regulated Entity's account
3. Use of third-party pool accounts
4. Collection of data with explicit consent

Explanation: The RBI's new guidelines explicitly prohibit the use of third-party pool accounts for digital loan disbursements and repayments. This measure aims to enhance transparency and prevent fraudulent activities.

Q2. What is a key data privacy mandate introduced by the RBI for digital lending apps?

1. Apps can collect any data they deem necessary for marketing.
2. Apps can collect only minimal data essential for credit assessment with explicit consent.
3. Data collection is permitted without borrower consent if it's for internal analysis.
4. Borrowers must provide all their financial history, regardless of relevance.

Explanation: The guidelines state that digital lending applications are permitted to collect only the minimum data required for credit assessment. Crucially, this collection must be done with the explicit and informed consent of the borrower.

Q3. What is the purpose of the 'cooling-off period' introduced in the new digital lending guidelines?

1. To allow lenders to increase interest rates after disbursement.
2. To provide borrowers a window to exit the loan without substantial penalties.
3. To mandate a minimum loan tenure for all digital loans.
4. To enable lenders to conduct further credit checks post-disbursement.

Explanation: The 'cooling-off period' is a regulatory provision that allows borrowers a specific timeframe to reconsider their loan decision and exit the agreement. This is intended to prevent impulsive borrowing and protect consumers from immediate financial commitment they might regret.

Q4. According to the RBI's directives on digital lending, who is held fully accountable for all outsourced activities conducted by Digital Lending Service Providers (DLSPs)?

1. The borrower
2. The Digital Lending Service Provider (DLSP)
3. The Regulated Entity (RE)
4. The technology platform provider

Explanation: The new guidelines clearly state that Regulated Entities (REs), such as banks and NBFCs, are ultimately responsible for all activities undertaken by the Digital Lending Service Providers (DLSPs) they engage with. This ensures accountability rests with the licensed financial institutions.

Q5. Which of the following is NOT a key development in the RBI's new digital lending guidelines issued on May 5, 2026?

1. Mandatory cooling-off period for borrowers
2. Prohibition of third-party pool accounts
3. Automatic increase of credit limits without borrower consent
4. Direct disbursement and repayment between borrower and RE accounts

Explanation: The guidelines explicitly prohibit the automatic increase of credit limits by lenders without the explicit consent of the borrower. This is a measure to protect borrowers from accumulating debt unintentionally. The other options are indeed key developments.