Consider the following statements: The Reserve Bank of India’s recent directives relating to ‘Storage of Payment System Data’, popularly known as data diktat, command the payment system providers that
1. they shall ensure that entire date relating to payment systems operated by them are stored in a system only in India
2. they shall ensure that the systems are owned and operated by public sector enterprises
3. they shall submit the consolidated system audit report to the Comptroller and Auditor General of India by the end of the calendar year
Which of the statements given above is/are correct?
Statement 1 is Correct (Data storage in India): This is the core requirement of the directive. It mandates that the entire payment system data be stored in systems located only in India. This aims to improve data security and regulatory oversight. Statement 2 is Incorrect (Public sector ownership): The directive doesn't specify ownership requirements for the data storage systems. Private companies can also store data as long as the systems are located within India. Statement 3 is Incorrect (Audit report submission): The directive des not have reporting requirements for system audits to the Comptroller and Auditor General of India (CAG) which typically audits government entities.