The Ministry of Electronics and Information Technology has declared the computer resources relating to the Core Banking Solution and Unified Payments Interface (UPI) Switch of Paytm Payments Bank Ltd. as 'protected systems' under the Information Technology Act, 2000. This designation signifies that these systems are considered Critical Information Infrastructure.
Key Changes
The notification, S.O. 3343(E), was issued on July 26, 2023, and became effective on the same date.
The declaration is made under Section 70, sub-sections (1) and (2) of the Information Technology Act, 2000.
The notification authorizes specific personnel to access these protected systems, including designated employees of Paytm Payments Bank Ltd., contractual managed service providers or third-party vendors (with need-based authorization), and consultants, regulators, government officials, auditors, and stakeholders (on a case-by-case basis), all requiring written authorization from Paytm Payments Bank Ltd.
Impact Analysis
Paytm Payments Bank Ltd.
Action Item: Conduct a comprehensive review of current access control mechanisms and authorization procedures. Develop and implement enhanced security protocols and documentation processes to comply with the notification.
Action Item: Ensure all personnel who require access to the designated systems are aware of the new requirements and have received the necessary authorization and training.
Regulators and Government Officials
Action Item: Review existing oversight and auditing procedures to incorporate the new framework for accessing Paytm Payments Bank Ltd.'s protected systems.
Customers of Paytm Payments Bank Ltd.
Action Item: Communicate the enhanced security measures to customers to reinforce trust and confidence in the bank's services.
Key Entities Referenced
Ministry of Electronics and Information Technology: The issuing authority of the notification, responsible for matters related to electronics and information technology in India.
Paytm Payments Bank Ltd.: The entity whose Core Banking Solution and Unified Payments Interface Switch are designated as protected systems.
Information Technology Act, 2000: The primary legislation under which the notification is issued, providing the legal framework for information technology, cybersecurity, and related matters.
रजिस्ट्री स.ं डी.एल.- 33004/99 REGD. No. D. L.-33004/99
xxxGIDHxxx
सी.जी.-डी.एल.-अ.-26072023-247616
xxxGIDExxx
CG-DL-E-26072023-247616
असाधारण
EXTRAORDINARY
भाग II—खण् ड 3—उप-खण्ड (ii)
PART II—Section 3—Sub-section (ii)
प्राजधकार स ेप्रकाजित
PUBLISHED BY AUTHORITY
स.ं 3198] औई दिल्ली, बुधवार, िुलाई 26, 2023/िावण 4, 1945
No. 3198] NEW DELHI, WEDNESDAY, JULY 26, 2023/SHRAVANA 4, 1945
इलक्टे र ॉजऔक ूर सप औा प्रोगिकीजगक रलं ालय
अजधसप औा
औई दिल्ली, 26 िुलाई, 2023
का.आ. 3343(अ).—केंद्रीय सरकार, स पऔा प्रोगिकीजगक अजधजऔयर, 2000 (2000 का 21) क धारा 70 क
उप-धारा (1) ूर उप-धारा (2) द्वारा प्रित्त िजियों का प्रयीग करते हुए, पेटीएर पेरटें बैंक जल. क औािुक स पऔा
अवसंरपऔा हीऔे के कारण रहत्वप णण बैंककारी सराधाऔ (कीर बैंककंग सील्यि औ) ूर एक कृत भुगताऔ इंटरफेस जस्ट्वप
(य जऔफाइड पेरेंट्स इंटरफेस जस्ट्वप) स े संबंजधत कंप्य टर संसाधऔों एवं इसके सहयुि आजितताओं के कंप्य टर संसाधऔों की
उि अजधजऔयर के प्रयीिऔ के जलए एतद्द्वारा संरजित प्रणाली घीजित करती ह ै ूर जऔम्नजलजखत कार्रणकों की संरजित
प्रणाजलयों तक पहुपं बऔाऔ े के जलए प्राजधकृत करती ह,ै अर्ाणत् :-
(क) संरजित प्रणाली तक पहुपं बऔाऔे के जलए, पेटीएर पेरेंट बैंक जल. द्वारा जलजखत रूप र ें प्राजधकृत पेटीएर पेरेंट
बैंक जल. का कीई अजभजहत करणपारी;
(ख) संजविात्रक प्रबंजधत सेवा-प्रिाता या तृतीय पिकार जवक्रेता के िल का कीई सिस्ट्य जिसे आवश्यकता के
आधार पर पहुपं बऔाऔे के जलए पेटीएर पेरेंट बैंक जल. द्वारा जलजखत रूप र ेंप्राजधकृत दकया गया ह;ै ूर
(ग) रारला िर रारला के आधार पर, पेटीएर पेरेंट बैंक जल. द्वारा जलजखत रूप र ें प्राजधकृत कीई परारिी,
जवजऔयारक, सरकारी पिाजधकारी, संपरीिक ूर पणधारी।
2. यह अजधस पऔा रािपल रें इसके प्रकािऔ क जतजर् स ेप्रभावी हीगी।
[फा. सं. 2(5)/2022-सीएल]
संिीप पटिी, वैज्ञाजऔक िी
4815 GI/2023 (1)2 THE GAZETTE OF INDIA : EXTRAORDINARY [PART II—SEC. 3(ii)]
MINISTRY OF ELECTRONICS AND INFORMATION TECHNOLOGY
NOTIFICATION
New Delhi, the 26th July, 2023
S.O. 3343(E).—In exercise of the powers conferred by sub-sections (1) and (2) of section 70 of the
Information Technology Act, 2000 (21 of 2000), the Central Government hereby declares the computer resources
relating to the Core Banking Solution and Unified Payments Interface Switch, being Critical Information
Infrastructure of the Paytm Payments Bank Ltd., and the computer resources of its associated dependencies, to be
protected systems for the purpose of the said Act and authorises the following personnel to access the protected
systems, namely:—
(a) any designated employee of the Paytm Payments Bank Ltd. authorised in writing by the Paytm
Payments Bank Ltd. to access the protected system;
(b) any team member of contractual managed service provider or third-party vendor who have been
authorised in writing by the Paytm Payments Bank Ltd. for need-based access; and
(c) any consultant, regulator, Government official, auditor and stakeholder authorised in writing by the
Paytm Payments Bank Ltd. on case to case basis.
2. This notification shall come into force on the date of its publication in the Official Gazette.
[F. No. 2(5)/2022-CL]
SANDIP CHATTERJEE, Scientist G
Uploaded by Dte. of Printing at Government of India Press, Ring Road, Mayapuri, New Delhi-110064
and Published by the Controller of Publications, Delhi-110054.