India’s Account Aggregator Framework: Consent-Based Data Sharing Without Seeing the Data

Open bankingBy: Farzad Didehbaz2 min readSource: RBI
India’s Account Aggregator Framework: Consent-Based Data Sharing Without Seeing the Data

1Introduction

The Reserve Bank of India issued NBFC Account Aggregator directions in 2016, and the ecosystem launched at scale in September 2021. An aggregator is a licensed intermediary that moves a customer’s financial data from information providers (such as banks) to information users (such as lenders) only with explicit digital consent.

2Discussion

Crucially, the aggregator neither reads nor stores the data, which flows encrypted. Consent follows a standard structure: what data, for what purpose, for how long and how often.

3Conclusion

Part of the India Stack alongside digital ID and UPI, the framework helps small businesses borrow by showing real transaction flows instead of heavy collateral, proving open finance can work without centralising data.

Share:TelegramWhatsAppLinkedIn

Sources

  1. Reserve Bank of India — Master Direction, NBFC Account Aggregator Directions, 2016 ↗
  2. Sahamati — Account Aggregator ecosystem ↗
همفکران فناوری شریفThis article summarises the official sources cited, prepared by the Hamfekran Fanavari Sharif team for finance leaders.
Want to see these solutions in your organisation?Book a free demo

Related articles

Open bankingHFS Podcast | S. Mohsen Shahmoradi on open banking and the future of fintech in IranThe first episode of the Hamfekran Fanavari Sharif podcast. Listen to the full conversation right here.Open bankingConsent management in open banking: trust, transparency and data controlIn open banking, data belongs to the customer. A transparent, revocable consent mechanism is the foundation of trust.Open bankingStandard banking APIs: why interface consistency is key to open bankingWhen every bank has its own API, integration costs multiply for fintechs. Standardisation shortens the path.Open bankingOpen banking in Iran: bank APIs and the need for a common standardSeveral Iranian banks offer API platforms, but a common standard and consent framework are still missing.