The Free Full Credit Report — Entitlement and Obligations
Every individual has the right to one Free Full Credit Report (FFCR) per calendar year from each CIC. The FFCR must include all credit information held by the CIC about the individual, including the credit score. It is not a summary — it is the complete credit information record.
CICs must also have a Board-approved FFCR policy. The 24-hour delivery SLA is non-negotiable — and failures to deliver within this window are subject to the compensation framework.
The Seven-Stage Grievance Process
Consumer complaints about credit information errors follow a structured seven-stage process with defined timelines at each stage. The key principle is that both the CI (which reported incorrect data) and the CIC (which holds and disseminates it) have specific responsibilities and timelines.
| Stage | Owner | Timeline | Action |
|---|---|---|---|
| Stage 1 | CI or CIC | Day 0 | Complaint received and registered |
| Stage 2 | CI or CIC | Within 2 business days | Acknowledgement issued to complainant |
| Stage 3 | CI | Within 21 calendar days | CI provides updated credit information to CIC |
| Stage 4 | CIC | Within 30 calendar days from filing | CIC resolves complaint and updates CIR |
| Stage 5 ⚡ | CIC / CI | Day 31 onwards if unresolved | Compensation accrues at ₹100 per calendar day |
| Stage 6 | CI | Within 45 calendar days | Root Cause Analysis (RCA) and rectification of underlying data error |
| Stage 7 | RBIOS / IO | Post-30-day unresolved | Escalation to Internal Ombudsman, then RBIOS 2026 |
The ₹100/Day Compensation Framework — How Liability Is Allocated
₹100 per calendar day is payable to the complainant for each day the complaint remains unresolved beyond 30 calendar days from the date of filing. This creates a compounding liability — a complaint unresolved for 90 days generates ₹6,000 in compensation. At scale, this is a material financial risk.
| Scenario | Who Bears Compensation |
|---|---|
| CI fails to update CIC within 21 days | CI bears compensation for the period of CI's delay |
| CIC fails to resolve after receiving updated information from CI | CIC bears the compensation |
| Both CI and CIC at fault for portions of the delay | Compensation distributed proportionately between CI and CIC |
| Complaints under CICRA Section 18 (arbitration/conciliation) | Excluded from compensation framework |
| Credit score computation methodology disputes | Excluded from compensation framework |
The Internal Ombudsman and RBIOS 2026 — The New Escalation Architecture
The RBI (CIC–Internal Ombudsman) Directions, 2026 (January 16, 2026) require CICs to appoint an Internal Ombudsman. The IO is the first internal escalation point for complaints that are rejected or not resolved by the CIC within 30 days. The IO must be independent — not a current or recent employee of the CIC.
Above the IO sits the Reserve Bank–Integrated Ombudsman Scheme 2026 (RBIOS). Complainants who are not satisfied with the IO's determination, or whose complaints are not resolved within the prescribed timelines, can escalate to RBIOS. The RBIOS scheme creates a direct regulatory interface between individual consumers and RBI on CIC-related complaints.
The practical implication is that CICs now have three distinct complaint resolution structures operating in parallel — their own internal grievance mechanism, the Internal Ombudsman, and RBIOS. Each has defined timelines and escalation triggers. CICs that do not have adequately staffed and governed grievance functions will find themselves in systemic non-compliance.
Where Most CICs Have Consumer Protection Gaps
The most common consumer protection compliance gaps we encounter are not about policy — they are about operational execution:
Grievance tracking systems that do not automatically calculate the 30-day compensation trigger date
Stage 3 notifications to the CI not sent within 2 business days of complaint receipt — meaning the 21-day CI update window starts late
FFCR delivery processes that take 48-72 hours rather than 24 hours for identity-verified requests
Internal Ombudsman not yet appointed or the appointment not meeting the independence criteria in the January 2026 Directions
Compensation payments not being correctly allocated between CI and CIC where shared liability applies
Is your consumer protection framework RBI-ready?
A structured review of your grievance process, compensation tracking, FFCR delivery, and Internal Ombudsman structure will identify operational gaps before they become regulatory findings.
Book a CIC Consumer Protection Review