RBI Governor Insists All Data Centres Remain Under Indian Sovereignty

The Reserve Bank of India’s governor delivered a decisive statement at a fintech summit, insisting that all data centres handling financial information must remain under Indian sovereign control. This pronouncement came after a series of cyber‑security audits revealed vulnerabilities in offshore hosting arrangements used by several banks for transaction processing and regulatory reporting. By mandating domestic localisation, the RBI aims to shield the nation’s monetary infrastructure from foreign interference and to align with emerging global trends that tie data residency to national security.

The policy shift reflects mounting pressure from both political leaders and industry stakeholders who argue that reliance on foreign cloud providers exposes critical financial data to espionage and jurisdictional disputes. Institutional friction has surfaced as multinational technology firms lobby for a more flexible framework, citing cost efficiencies and scalability, while the central bank underscores the need for a robust legal regime that can enforce compliance and impose penalties for breaches. The move also dovetails with broader governmental initiatives to promote ‘Digital India’ and to cultivate a domestic data‑centre ecosystem.

The ripple effects include a surge in demand for Indian data‑centre capacity, prompting investment from domestic infrastructure firms and potentially attracting foreign capital under strict ownership caps. Banks may incur short‑term migration costs as they transition workloads, but the long‑term expectation is enhanced resilience against cyber threats and greater regulatory oversight. Within twelve months, the localisation mandate could catalyse the emergence of a competitive market for secure cloud services, while also prompting revisions to international data‑transfer agreements that affect cross‑border financial operations.