Notification under Section 11A for RBI reporting entities.

## Policy Analysis Report: Notification S.O. 2012(E) - Aadhaar Authentication for Reporting Entities under the Prevention of Money Laundering Act, 2002 **1. Executive Summary:** This report analyzes Notification S.O. 2012(E), issued by the Ministry of Finance, Department of Revenue on May 5th, 2025. This is a new policy that permits specific reporting entities, as defined under the Prevention of Money-laundering Act, 2002, to perform authentication using Aadhaar, in compliance with the Aadhaar (Targeted Delivery of Financial and Other Subsidies, Benefits and Services) Act, 2016. The core purpose is to facilitate the authentication process for these entities under the Prevention of Money-laundering Act by leveraging the Aadhaar infrastructure, provided they meet the specified privacy and security standards. The key finding is that the notification aims to streamline the identification and verification processes for designated financial institutions, enhancing their ability to comply with anti-money laundering regulations. **2. Introduction:** This report aims to provide a comprehensive overview and analysis of Notification S.O. 2012(E), published in the Gazette of India on May 5th, 2025. The analysis is based solely on the text of the notification provided and intends to inform affected industry stakeholders about the key provisions and implications of this policy. **3. Policy Overview:** * Core Objective(s): The primary objective, as inferred from the text, is to permit specific reporting entities under the Prevention of Money-laundering Act, 2002, to utilize Aadhaar authentication for the purposes of Section 11A of that Act, provided they adhere to the privacy and security standards mandated by the Aadhaar Act, 2016. The policy aims to provide a recognized authentication mechanism. **4. Background and Rationale:** * The policy addresses the need for efficient and secure authentication mechanisms for reporting entities obligated to comply with the Prevention of Money-laundering Act, 2002. The notification suggests that leveraging Aadhaar authentication can streamline customer identification and verification processes (KYC), potentially improving the efficiency and effectiveness of anti-money laundering efforts. The text indicates the need to balance these benefits with privacy and security considerations, as it mandates compliance with the Aadhaar Act, 2016. **5. Key Provisions / Changes:** * **New Policy:** The core provision of the notification is the permission granted to the reporting entities listed in the TABLE to perform authentication under the Aadhaar Act for the purposes of Section 11A of the Prevention of Money-laundering Act, 2002. * The Central Government grants this permission after being satisfied that these reporting entities will comply with the privacy and security standards under the Aadhaar Act, 2016. * The notification lists the specific entities authorized to perform Aadhaar authentication: 1. Oxyzo Financial Services Limited 2. Berar Finance Limited 3. Finkurve Financial Services Limited 4. Tata Capital Limited 5. BOBCARD Limited **6. Target Audience and Stakeholders:** The primary target audience consists of the five specific reporting entities listed in the notification: Oxyzo Financial Services Limited, Berar Finance Limited, Finkurve Financial Services Limited, Tata Capital Limited, and BOBCARD Limited. Other stakeholders include: * The Central Government (Ministry of Finance, Department of Revenue). * The Unique Identification Authority of India (UIDAI). * The Reserve Bank of India (RBI), as the appropriate regulator. * Customers of these reporting entities, as the authentication process directly impacts them. **7. Implementation Aspects (Inferred):** * **Responsible agency/bodies:** The Ministry of Finance (Department of Revenue) is the issuing authority. The UIDAI and the RBI are involved in consultations prior to the notification. The listed reporting entities are responsible for implementing the Aadhaar authentication process while adhering to the privacy and security standards of the Aadhaar Act, 2016. * **Timelines or procedures:** No specific timelines or detailed procedures are outlined within the notification text itself. It can be inferred that the listed entities can begin implementation upon publication of the notification, assuming they meet the prerequisites for privacy and security standards under the Aadhaar Act. Specific authentication procedures will likely be governed by UIDAI guidelines and the entities' own internal policies. **8. Expected Outcomes / Impact of Changes:** * The likely intended outcomes of this policy are: * Streamlined customer verification processes for the listed financial institutions. * Enhanced efficiency in complying with KYC requirements under the Prevention of Money-laundering Act, 2002. * Reduced operational costs associated with customer verification (potential). * Improved detection and prevention of money laundering activities (potential). * The impact is contingent upon the listed entities' ability to effectively implement Aadhaar authentication while adhering to the prescribed privacy and security standards. **9. Conclusion:** Notification S.O. 2012(E) represents a move towards leveraging Aadhaar authentication to strengthen compliance with anti-money laundering regulations. By explicitly permitting the listed reporting entities to use Aadhaar for authentication, the policy aims to streamline the verification process and improve the efficiency of financial institutions' anti-money laundering efforts. However, the success of this policy hinges on the ability of these entities to implement Aadhaar authentication securely and in compliance with the privacy safeguards outlined in the Aadhaar Act, 2016. Further guidance from the UIDAI and the RBI on specific implementation procedures would be beneficial for the affected entities.

Key Entities Referenced