CICJanuary 2026 · 12 min read

The 21 RBI Circulars on Credit Information Every NBFC Compliance Head Must Know

CICRA 2005 and the 21 RBI circulars on credit information set out an intricate framework of obligations for every credit institution. Most compliance teams know only a fraction of them.

Why CIC Compliance Is Underestimated

Every NBFC with outstanding loan accounts is a member of at least one Credit Information Company. As a member, you have ongoing obligations under CICRA 2005 and 21 specific RBI circulars that have accumulated since 2006. Most compliance teams are aware of the basic bureau submission requirement — but the detail and breadth of the obligations is consistently underestimated.

The RBI's November 2025 Master Direction on Credit Information Companies (CICs) has now consolidated many of these obligations. But the underlying 21 circulars remain the source of specific procedural requirements that the Master Direction does not reproduce in full.

The 21 Circulars — A Structured Overview

#1-5
Membership & Reporting Obligations

Mandatory CIC membership, borrower data submission timelines, and format specifications.

#6-10
Data Quality Standards

TUDF/Metro 2 format accuracy, rejection handling, and data correction obligations.

#11-15
SMA & Overdue Reporting

Special Mention Account reporting, overdue classification, and bureau update timelines.

#16-18
Dispute Resolution

Borrower dispute TAT, correction reporting to bureaus, and internal SLA requirements.

#19-21
Consumer Access & Governance

Free credit score access, CIC inspection readiness, and compliance monitoring.

The Most Common Gaps

The gaps we find most consistently across NBFCs: SMA-0 and SMA-1 accounts that are not being reported to bureaus on time; TUDF/Metro 2 format errors causing systematic rejection of records; dispute TAT breaches because the internal process does not loop in the bureau correction within the prescribed timeframe; and LMS systems that are generating incorrect NPA dates, creating downstream errors in bureau data.

These are not policy gaps — they are operational gaps that exist because the compliance obligation is not properly translated into the LMS system logic and the operations process. This is precisely where the combination of LMS experience and CIC compliance knowledge is critical.

Related Articles
CIC
July 1, 2026 — The Most Consequential CIC Compliance Deadline
DQI
RBI's Data Quality Index for Credit Information
ARC
ARC Obligations to CICs — What ARCs Must Now Report

Want a full review of your CIC compliance posture?

A 30-minute discovery call will identify your highest-priority CIC compliance gaps.

Book a Discovery Call