e-KYC Setu

Document text

पŐशन िनिध िविनयामक एवं िवकास Ůािधकरण PENSION FUND REGULATORY AND DEVELOPMENT AUTHORITY Page 1 of 7 __________________________________________________________________________________________ बी– १४/ए, छũपितिशवाजीभवन, कुतुबसं˕ागतƗेũ, कटवाįरयासराय,नईिदʟी– 110 016 दूरभाष: 011 - 26517501, 26517503, 26133730 फैƛ: 011 – 26517507, वेबसाइट: www.pfrda.org.in B-14/A, Chhatrapati Shivaji Bhawan, Qutab Institutional Area, Katwaria Sarai, New Delhi – 110 016 Phone : 011 - 26517501, 26517503, 26133730 Fax: 011 – 26517507 website: www.pfrda.org.in पǐरपğ पǐरपğ सं.: पीएफआरडीए/2023/22/आरईजी-पीओपी/05 Ǒदनांक: जुलाई 25, 2023 ĤǓत पीओपी, सीआरए और एनपीएस Ěèट ͪ वषय: धन शोधन Ǔनवारण अͬ धǓनयम, 2002 कȧ धारा 11 ए कȧ उप-धारा (1) के तहत ǐरपोǑटɍग इकाई ɮवारा पहचान का स×यापन राजèव ͪ वभाग, ͪ वƣ मंğालय (डीओआर) ɮवारा जारȣ Ǒदनांक 6 Ǒदसंबर, 2022 कȧ राजपğ अͬ धसूचना एस.ओ.5683 (ई) के माÚयम से (संलÊन ĤǓत संलÊन) के माÚयम से, कɅ ġ सरकार अͬ धसूͬ चत करती है ͩ क आधार (ͪ वƣीय और अÛय सिÞसडी, लाभ और सेवाओं का लͯ ¢त ͪ वतरण) अͬ धǓनयम, 2016 (2016 का 18) (इसके बाद आधार अͬ धǓनयम के Ǿप मɅ संदͧ भ[त) के तहत Ĥमाणीकरण करने के ͧ लए ͪ वǓनयͧ मत संèथाएं धन शोधन Ǔनवारण अͬ धǓनयम कȧ धारा 11 ए के Ĥयोजनɉ के ͧ लए। 2002 ई-केवाईसी सेतु Ĥणालȣ का उपयोग करके ऐसा करने कȧ अनुमǓत दȣ जाए, इस बात से संतुçट होने के बाद ͩ क ई-केवाईसी सेतु Ĥणालȣ आधार अͬ धǓनयम के तहत गोपनीयता और सुर¢ा के मानकɉ का अनुपालन करती है। 2. ई-केवाईसी सेतु भारतीय राçĚȣय भुगतान Ǔनगम (एनपीसीआई) ɮवारा èथाͪ पत एक Ĥणालȣ होगी जो आधार अͬ धǓनयम के तहत Ĥमाणीकरण के माÚयम से एक ǐरपोǑटɍग इकाई ɮवारा Ēाहक या उसके लाभाथȸ माͧ लक कȧ पहचान का स×यापन करने मɅ स¢म होगी। 3. एनपीसीआई को यह सुǓनिæचत करना होगा ͩ क यूआईडीएआई ɮवारा Ǔनधा[ǐरत Ǔनयमɉ के अनुसार Ēाहक के आधार नंबर का उपयोग करके Ĥमाणीकरण ͩ कया जाए, ǐरपोǑटɍग इकाई को पूण[ आधार संÉया का खुलासा ͩ कए ǒबना और Ĥमाणीकरण करने के बाद, एनपीसीआई Ēाहक के आधार नंबर के अंǓतम चार अंकɉ को यूआईडीएआई ɮवारा उपलÞध कराए गए जनसांिÉयकȧय ͪ ववरण के साथ साझा करेगा। ǐरपोǑटɍग इकाई और ǐरपोǑटɍग इकाई के साथ इसके ɮवारा ͫ डिजटल Ǿप से हèता¢ǐरत Ēाहक और एनपीसीआई ɮवारा Ĥदान ͩ कए गए ͪ ववरण के आधार पर Ēाहक कȧ पहचान करेगी। 4. ई-केवाईसी सेतु का उपयोग करके Ĥमाणीकरण करने के उɮदेæय से बोड[ पर शाͧ मल संèथाओं कȧ एक सूची http://npci.org.in/e-KYCsetu/ पर एÈसेस कȧ जा सकती है, िजस तारȣख से उÛहɅ ऑन-बोड[ ͩ कया गया है। पŐशन िनिध िविनयामक एवं िवकास Ůािधकरण PENSION FUND REGULATORY AND DEVELOPMENT AUTHORITY Page 2 of 7 __________________________________________________________________________________________ बी– १४/ए, छũपितिशवाजीभवन, कुतुबसं˕ागतƗेũ, कटवाįरयासराय,नईिदʟी– 110 016 दूरभाष: 011 - 26517501, 26517503, 26133730 फैƛ: 011 – 26517507, वेबसाइट: www.pfrda.org.in B-14/A, Chhatrapati Shivaji Bhawan, Qutab Institutional Area, Katwaria Sarai, New Delhi – 110 016 Phone : 011 - 26517501, 26517503, 26133730 Fax: 011 – 26517507 website: www.pfrda.org.in 5. जबͩ क डीओआर ने पीएमएलए के तहत उन ǐरपोǑटɍग संèथाओं के ͧ लए पूवȾÈत अͬ धसूचना जारȣ कȧ है, जो इसमɅ ͪ वǓनयͧ मत हɇ, हालांͩ क, उसी समय यूआईडीएआई को Ĥमाणीकरण अनुरोध भेजने वालȣ अनुरोध करने वालȣ संèथाओं को आधार (ͪ वƣीय और अÛय सिÞसडी, लाभ और सेवाओं का लͯ ¢त ͪ वतरण) अͬ धǓनयम, 2016 (आधार अͬ धǓनयम) के Ĥासंͬ गक Ĥावधानɉ के तहत ͪ वǓनयͧ मत ͩ कया जाता है। ईकेवाईसी सेतु Ĥणालȣ के तहत ͪ वǓनयͧ मत इकाइयां पीएमएलए के Ĥावधानɉ के अनुसार ǐरपोǑटɍग इकाइयɉ के Ǿप मɅ काय[ करɅगी। तथाͪ प, चूंͩ क आधार संÉया और बायोमेǑĚÈस/ओटȣपी का संĒहण, Ĥमाणीकरण अनुरोध का सृजन, Ĥमाणीकरण लाइसɅस कुंजी का उपयोग, सहमǓत ĤाÜत करने के ͧ लए Ĥमाणीकरण ĤǓतͩ Đया का संचार और भंडारण, ͧ शकायत हɇडͧ लंग तंğ Ĥदान करना आǑद जैसे काय[ हɇ। ͪ वǓनयͧ मत संèथाओं और एनपीसीआई ɮवारा èवतंğ Ǿप से और अलग-अलग ͩ कया जाता है - आधार अͬ धǓनयम के तहत उनकȧ िजàमेदाǐरयां अनुरोध करने वालȣ संèथाओं के Ǿप मɅ तदनुसार उनके ɮवारा ͩ कए गए कायɟ कȧ सीमा तक सीͧ मत हɉगी। 6. एनपीसीआई और इस Ĥणालȣ का उपयोग करने वालȣ ǐरपोǑटɍग संèथाओं को सुचाǾ Ǿप से ऑन-बोͫ डɍग, आधार अͬ धǓनयम और उसके तहत ͪ वǓनयमɉ के अनुपालन और घष[ण मुÈत सेवाओं के ͧ लए सहायता करने के ͧ लए ͪ वͧ भÛन Ǒहतधारकɉ कȧ भूͧ मकाएं और िजàमेदाǐरयां Annexure A मɅ Ĥदान कȧ गई हɇ । आशीष कुमार भारती (महाĤबंधक) संलÊन: a / a ASHISH KUMAR BHARATI Digitally signed by ASHISH KUMAR BHARATI पŐशन िनिध िविनयामक एवं िवकास Ůािधकरण PENSION FUND REGULATORY AND DEVELOPMENT AUTHORITY Page 3 of 7 __________________________________________________________________________________________ बी– १४/ए, छũपितिशवाजीभवन, कुतुबसं˕ागतƗेũ, कटवाįरयासराय,नईिदʟी– 110 016 दूरभाष: 011 - 26517501, 26517503, 26133730 फैƛ: 011 – 26517507, वेबसाइट: www.pfrda.org.in B-14/A, Chhatrapati Shivaji Bhawan, Qutab Institutional Area, Katwaria Sarai, New Delhi – 110 016 Phone : 011 - 26517501, 26517503, 26133730 Fax: 011 – 26517507 website: www.pfrda.org.in Circular Circular no.: PFRDA/2023/22/REG-POP/05 Date: July 25, 2023 To PoPs, CRAs and NPS Trust Subject: Verification of Identity by Reporting Entity under sub-section (1) of Section 11A of the Prevention of Money Laundering Act, 2002 Vide Gazette notification S.O. 5683(E) dated 6th December, 2022 , issued by Department of Revenue (DoR), Ministry of Finance (copy attached), Central Government notifies that regulated entities onboarded to perform authentication under the Aadhaar (Targeted Delivery of Financial and Other Subsidies, Benefits and Services) Act, 2016 (18 of 2016)(hereinafter referred to as the Aadhaar Act) for the purposes of section 11A of the Prevention of Money-laundering Act, 2002 using the e-KYC setu system be permitted to do so, after being satisfied that the e-KYC setu system complies with the standards of privacy and security under the Aadhaar Act. 2. The e-KYC setu shall be a system put in place by National Payments Corporation of India (NPCI) to enable verification of identity of a client or its beneficial owner by a reporting entity through authentication under the Aadhaar Act without disclosing the Aadhaar number of the individual to the reporting entity. 3. NPCI is required to ensure that the authentication is carried out using the Aadhaar number of the client as per the regulations laid down by UIDAI, without disclosing full Aadhaar number to the reporting entity and after carrying out authentication, NPCI shall share the last four digits of the Aadhaar number of the client, along with his demographic details made available to it by UIDAI, digitally signed by it, with the reporting entity and the reporting entity shall carry out identification of the client based on the details provided by the client and NPCI. 4. A list of entities on boarded for the purpose of carrying out the authentication using the e- KYC setu can be accessed at http://npci.org.in/e-KYCsetu/ along with the date from which they have been on-boarded. 5. Whereas the DoR has issued the ibid notification under PMLA for the Reporting Entities regulated therein, however, at the same time the Requesting Entities sending authentication requests to UIDAI are regulated under the relevant provisions of the Aadhaar (Targeted Delivery of Financial and Other Subsidies, Benefits and Services) Act, 2016 [the Aadhaar Act hereinafter]. Under the eKYC setu system the regulated entities shall function as the Reporting Entities as per provisions of PMLA. However, since the functions like collection of Aadhaar number and biometrics/OTP, creation of authentication request, use of authentication license key, communication and storage of authentication response obtaining consent, providing grievance handling mechanism, etc. are done independently and separately by regulated entities and NPCI — पŐशन िनिध िविनयामक एवं िवकास Ůािधकरण PENSION FUND REGULATORY AND DEVELOPMENT AUTHORITY Page 4 of 7 __________________________________________________________________________________________ बी– १४/ए, छũपितिशवाजीभवन, कुतुबसं˕ागतƗेũ, कटवाįरयासराय,नईिदʟी– 110 016 दूरभाष: 011 - 26517501, 26517503, 26133730 फैƛ: 011 – 26517507, वेबसाइट: www.pfrda.org.in B-14/A, Chhatrapati Shivaji Bhawan, Qutab Institutional Area, Katwaria Sarai, New Delhi – 110 016 Phone : 011 - 26517501, 26517503, 26133730 Fax: 011 – 26517507 website: www.pfrda.org.in their responsibilities under Aadhaar Act as Requesting Entities shall accordingly be limited to the extent of functions performed by them. 6. To aid NPCI and the Reporting Entities using this system for smooth on-boarding, compliance with the Aadhaar Act and Regulations there under and friction free services the roles and responsibilities of various stakeholders are provided at Annexure A. Ashish Kumar Bharati (General Manager) Enclosed: a/a ASHISH KUMAR BHARATI Digitally signed by ASHISH KUMAR BHARATI पŐशन िनिध िविनयामक एवं िवकास Ůािधकरण PENSION FUND REGULATORY AND DEVELOPMENT AUTHORITY Page 5 of 7 __________________________________________________________________________________________ बी– १४/ए, छũपितिशवाजीभवन, कुतुबसं˕ागतƗेũ, कटवाįरयासराय,नईिदʟी– 110 016 दूरभाष: 011 - 26517501, 26517503, 26133730 फैƛ: 011 – 26517507, वेबसाइट: www.pfrda.org.in B-14/A, Chhatrapati Shivaji Bhawan, Qutab Institutional Area, Katwaria Sarai, New Delhi – 110 016 Phone : 011 - 26517501, 26517503, 26133730 Fax: 011 – 26517507 website: www.pfrda.org.in Annexure A A. Reporting Entity: i. The Reporting Entity shall ensure that relevant provisions under the Aadhaar Act, 2016 and Regulations there under and relevant circulars/guidelines issued by UIDAI from time to time are duly complied at all times for continuation of smooth and friction-free authentication services. ii. The Reporting Entity shall submit license fee at prescribed rates to UIDAI subsequent to which a unique/identifier entity code shall be allotted to Reporting Entity from UIDAI. iii. Reporting Entity shall not collect, use or store Aadhaar number or biometric information of any client or beneficial owner for any purpose. iv. Reporting Entity shall obtain the consent of an individual before collecting his identity information for the purpose of authentication in such manner as specified by the Aadhaar Act, 2016 and regulations there under. v. Reporting Entity shall notify its client or beneficial owner about any Aadhaar authentication, including success or failure of authentication of each request, performed by them through SMS, email or any other digital means or paper-based acknowledgement. vi. Reporting Entity shall provide a mechanism for the client or its beneficial owner to revoke his consent given to Reporting Entity and upon such revocation Reporting Entity shall delete the e-KYC data in a verifiable manner and provide an acknowledgment of the same to the client or beneficial owner. vii. Reporting Entity, after receiving digitally signed response packet including last 4 digits of Aadhaar number of the client along with his demographic details, shall carry out identification of the client based on the above details provided by the client and NPCI. Reporting Entity shall not share e-KYC data, obtained from NPCI under eKYC setu system, with any other entity or agency for any whatsoever reason. viii. Reporting Entity shall retain the logs of authentication transactions (including that of consent taken) in a verifiable and auditable manner for the period as prescribed under the Aadhaar (Authentication and Offline Verification) Regulations, 2021. Purging of such logs upon expiry of the period shall also be in accordance to the Aadhaar Act and/or regulations thereof. ix. The Reporting Entity shall undertake audit of the operations, systems and procedures through CERT-In empanelled IS auditors to ensure the compliance with the Aadhaar Act, rules, regulations, policies, procedures, directions, guidelines, circulars, MoU laid down. Further UIDAI reserves the right to undertake audit of Reporting Entities, either by itself or through audit agencies, appointed by it to ensure the compliance with Aadhaar Act, rules, regulations, policies, procedures, directions, guidelines, circulars, MoU. x. Reporting Entities shall ensure its audit and inspection by NPCI or by any CERT-In empanelled third-party auditor appointed by NPCI or UIDAI, at such frequency or timeline as may be prescribed by NPCI and/or on the direction of UIDAI. xi. The Reporting Entity if found in breach of compliances with Aadhaar Act, 2016, rules, regulations, policies, procedures, directions, guidelines, circulars, MoU shall be liable for पŐशन िनिध िविनयामक एवं िवकास Ůािधकरण PENSION FUND REGULATORY AND DEVELOPMENT AUTHORITY Page 6 of 7 __________________________________________________________________________________________ बी– १४/ए, छũपितिशवाजीभवन, कुतुबसं˕ागतƗेũ, कटवाįरयासराय,नईिदʟी– 110 016 दूरभाष: 011 - 26517501, 26517503, 26133730 फैƛ: 011 – 26517507, वेबसाइट: www.pfrda.org.in B-14/A, Chhatrapati Shivaji Bhawan, Qutab Institutional Area, Katwaria Sarai, New Delhi – 110 016 Phone : 011 - 26517501, 26517503, 26133730 Fax: 011 – 26517507 website: www.pfrda.org.in offences and penalties as prescribed under the Aadhaar Act, 2016, rules and regulations framed there under. xii. Reporting Entity shall immediately stop using the e-KYC Setu Services if its license or authorization to carry out regulated business has been suspended, cancelled or withdrawn by the appropriate regulatory authority. xiii. Reporting Entity shall provide an effective grievance handling mechanism to the resident via multiple channels like website, call center, mobile app, SMS, physical center etc. B. National Payments Corporation of India (NPCI): i. NPCI shall design, develop and maintain e-KYC setu system in compliance with the standard of privacy and security laid down by Unique Identification Authority of India (UIDAI). NPCI shall perform Aadhaar-based eKYC authentication as a service to these Reporting Entities. ii. NPCI shall get the e-KYC setu system audited from CERT-ln empanelled IS Auditor before implementing it. Thereafter, NPCI shall undertake audit of the system, through a CERT-In empanelled IS Auditor, on yearly basis and shall submit the report to UIDAI. Further UIDAI reserves the right to undertake audit of the eKYC setu system, either by itself or through audit agencies appointed by it, to ensure the compliance with Aadhaar Act, rules, regulations, policies, procedures, directions, guidelines, circulars, MoU. iii. NPCI shall ensure that Memorandum of Understanding (MoU) executed with Reporting Entities must incorporate relevant provisions of Aadhaar Act, 2016 and regulation there under. NPCI to seek concurrence of UIDAI on draft MoU with respect to provisions pertaining to Aadhaar. iv. On receiving an on-boarding request or application from Reporting Entity, NPCI shall send the request details to UIDAI for issuing a unique/identifier entity code for the respective Reporting Entity. v. NPCI to ensure that Reporting Entity puts up a grievance handling mechanism for the resident through its MoU/Agreement with the Reporting Entity. vi. NPCI through adequate provisions of MoU shall ensure audit and inspection of Reporting Entities at such frequency or timeline as may be prescribed by NPCI and/or on the direction of UIDAI. vii. UIDAI has notified the Aadhaar (Pricing of Aadhaar Authentication Services) Regulations, 2021 dated 14.10.2021 whereby UIDAI raise invoices on the basis of criteria laid down in these aforementioned regulations. In this backdrop, following is mentioned for authentication transaction billing purposes: a. UIDAI CIDR provides response to authentication requests within 10 seconds and any response beyond that is not considered for pricing by UIDAI. Therefore, NPCI may keep the response timeout accordingly. It is the responsibility of NPCI to ensure proper connectivity with CIDR. If the response is given by CIDR, it cannot be considered a timeout transaction if not received at NPCI server. पŐशन िनिध िविनयामक एवं िवकास Ůािधकरण PENSION FUND REGULATORY AND DEVELOPMENT AUTHORITY Page 7 of 7 __________________________________________________________________________________________ बी– १४/ए, छũपितिशवाजीभवन, कुतुबसं˕ागतƗेũ, कटवाįरयासराय,नईिदʟी– 110 016 दूरभाष: 011 - 26517501, 26517503, 26133730 फैƛ: 011 – 26517507, वेबसाइट: www.pfrda.org.in B-14/A, Chhatrapati Shivaji Bhawan, Qutab Institutional Area, Katwaria Sarai, New Delhi – 110 016 Phone : 011 - 26517501, 26517503, 26133730 Fax: 011 – 26517507 website: www.pfrda.org.in b. UIDAI will raise invoice on NPCI as per the billing cycle for all the chargeable successful and failed Yes-No & e-KYC transactions as per the criteria mentioned in the Aadhaar (Pricing of Aadhaar Authentication Services) Regulations, 2021. c. It shall be responsibility of NPCI to pay authentication charges within the stipulated time as and when invoice raised by UIDAI in this regard. Any delayed payment or non- payment shall attract appropriate action from UIDAI including but not limited to imposition of interest, suspension of license key and termination of agreement. UIDAI shall not be concerned with any default in payment by clients of NPCI and no concessions/relaxations, whatsoever, be requested from UIDAI on this ground. d. Any dispute between NPCI and its Reporting Entities regarding authentication transaction billing shall be exclusive to them and be dealt in accordance with their mutual agreement. UIDAI shall not have anything to do with that and it shall not be approached for any mediation or resolution of such disputes, whatsoever. viii. NPCI shall, at all times, ensure compliance of provisions of Aadhaar Act, its associated regulations and other circulars/instructions issued by UIDAI from time to time and also obligations as per the agreement with UIDAI. It shall ensure compliance on the part of Reporting Entities also through its MoU/Agreement with them. ix. Any Reporting Entity found to be in violation as per provisions of Para 6 of the DoR Notification shall be de-boarded by NPCI as per provisions of the said Para of the DoR notification. ******************************************************************************** 8102 GI/2022 (1) रजिस्ट्री सं. डी.एल.- 33004/99 REGD. No. D. L.-33004/99 xxxGIDHxxx xxxGIDExxx असाधारण EXTRAORDINARY भाग II—खण् ड 3—उप-खण् ड (ii) PART II—Section 3—Sub-section (ii) प्राजधकार से प्रकाजित PUBLISHED BY AUTHORITY जित्त मंत्रालय (रािस्ट्ि जिभाग) अजधसूचना नई दिल्ली, 6 दिसम् बर, 2022 का.आ. 5683(अ).—केंद्रीय सरकार का, भारतीय जिजिष्ट पहचान प्राजधकरण (यूआईडीएआई), भारतीय ररििव बैंक, भारतीय प्रजतभूजत जिजनमय बोडव, भारतीय बीमा जिजनयामक प्राजधकरण और भारतीय पेंिन जनजध जिजनयामक प्राजधकरण, िो समुजचत जिजनयामक हैं, से परामिव करने के पश्चात्, धन-िोधन जनिारण अजधजनयम, 2002 (2003 का 15) की धारा 11क की उपधारा (1) द्वारा प्रित्त िजियों का प्रयोग करते हुए, यह समाधान हो िाने पर दक ऐसा करना आिश्यक है, यह अजधसूजचत करती है दक यह समाधान हो िाने के पश्चात् दक ई-केिाईसी सेतु प्रणाली आधार अजधजनयम के अधीन जनिता और सुरक्षा के मानकों का अनुपालन करती है, ई-केिाईसी सेतु प्रणाली का प्रयोग करते हुए धन-िोधन जनिारण अजधजनयम, 2002 की धारा 11क के प्रयोिनों के जलए आधार (जित्तीय और अन्य सहाजयदकयों, प्रसुजिधाओं तथा सेिाओं का लजययत पररिान) अजधजनयम, 2016 (2016 का 18) (जिसे इसमें इसके पश्चात् आधार अजधजनयम कहा गया है) के अधीन अजधप्रमाणन का जनष्पािन करने के जलए बोडव पर रखे गए इकाइयों को ऐसा करने के जलए अनुज्ञात दकया िाए । 2. ई-केिाईसी सेतु एक ऐसी प्रणाली होगी जिसे राष्ट्रीय भारतीय भुगतान जनगम (एनपीसीआई) द्वारा लागू दकया गया है जिससे ररपोर्टिंग इकाई को व्यजष्ट का अधार संखयांक बताए जबना आधार अजधजनयम के अधीन अजधप्रमाणन के माध्यम से ररपोर्टिंग इकाई द्वारा ग्राहक या उसके जहताजधकारी स्ट्िामी की पहचान का सत्यापन हो सके । 3. राष्ट्रीय भारतीय भुगतान जनगम यह सुजनजश्चत करेगा दक ररपोर्टिंग इकाई को आधार पूरा संखयांक बताए जबना भारतीय जिजिष्ट पहचान प्राजधकरण द्वारा अजधकजथत जिजनयमों के अनुसार ग्राहक के आधार संखयांक का प्रयोग करते हुए सं. 5451] नई दिल्ली, मंगलिार, दिसम् बर 6, 2022/अग्रहायण 15, 1944 No. 5451] NEW DELHI, TUESDAY, DECEMBER 6, 2022/AGRAHAYANA 15, 1944 सी.जी.-डी.एल.-अ.-06122022-240840 CG-DL-E-06122022-240840 2 THE GAZETTE OF INDIA : EXTRAORDINARY [PART II—SEC. 3(ii)] अजधप्रमाणन दकया िाता है और अजधप्रमाणन करने के पश्चात्, राष्ट्रीय भारतीय भुगतान जनगम ग्राहक के आधार संखयांक के चार अंजतम अंकों को भारतीय जिजिष्ट पहचान प्राजधकरण, उसके द्वारा अंकीय रूप से हस्ट्ताक्षररत उसे उपलब्ध कराए गए उसके िनसांजखयकीय ब्यौरों सजहत ररपोर्टिंग इकाई के साथ साझा करेगा और ररपोर्टिंग इकाई ग्राहक और राष्ट्रीय भारतीय भुगतान जनगम द्वारा उपलब्ध कराए गए ब्यौरों के आधार पर ग्राहक की पहचान करेगा । 4. भारतीय जिजिष्ट पहचान प्राजधकरण ऐसा सत्यापन, जिसमें िास्ट्तजिक पहचान भी है, कर सकेगा, िो िह यह सुजनजश्चत करने के जलए ठीक समझे दक राष्ट्रीय भारतीय भुगतान जनगम द्वारा लागू की गई प्रणाली उनके द्वारा िारी जिजनयमों और उनके द्वारा अजधकजथत अपेक्षाओं का अनुपालन करती है और यदि भारतीय जिजिष्ट पहचान प्राजधकरण इस जनष्कर्व पर पहुंचती है दक अजतररि उपाय जिजनयमों और अन्य अपेक्षाओं, यदि कोई हो, का अनुपालन करते हुए प्रणाली को लागू करने के जलए अपेजक्षत हैं, तो िह ऐसे समय के भीतर, िो िह ठीक समझे, अनुपालन दकए िाने िाले ऐसे जनिेि िारी कर सकेगा। 5. (i) ई-केिाईसी सेतु का प्रयोग करते हुए अजधप्रमाणन करने के प्रयोिन के जलए बोडव पर रखी गई इकाइयों की सूची http://npci.org.in/e-KYCsetu/ पर राष्ट्रीय भारतीय भुगतान जनगम द्वारा बनाए रखी िाएगी जिसके अंतगवत िह तारीख भी है, जिससे उन्हें बोडव पर रखा गया है । (ii) इस प्रयोिन के जलए दकसी इकाई को बोडव पर रखने से पूिव, राष्ट्रीय भारतीय भुगतान जनगम यह सुजनजश्चत करेगा दक इकाई ई-केिाईसी सेतु के माध्यम से अजधप्रमाणन करने के जलए सभी अपेक्षाओं को पूरा करती है । (iii) राष्ट्रीय भारतीय भुगतान जनगम यह भी सुजनजश्चत करेगा दक इकाई अपेजक्षत जिजनयामक अनापजत्त रखता है, यदि अपेजक्षत हो, ऐसा जित्तीय कारबार करने के जलए, जिसके जलए यह अपने ग्राहकों की पहचान को अजधप्रमाजणत करने के जलए आिजयत है । 6. दकसी इकाई तक ई-केिाईसी सेतु प्रणाली तक ऐसी पहुंच, िो— (क) ई-केिाईसी सेतु का प्रयोग करके अपने ग्राहकों का अजधप्रमाणन करने के जलए इच्छुक नहीं है ; (ख) ई-केिाईसी सेतु का प्रयोग करके अपने ग्राहकों के सत्यापन के जलए राष्ट्रीय भारतीय भुगतान जनगम या भारतीय जिजिष्ट पहचान प्राजधकरण द्वारा अजधकजथत अपेक्षाओं के भंग में पाया िाता है ; (ग) समुजचत जिजनयामक द्वारा जित्तीय कारबार करने के जलए अनुज्ञात नहीं दकया िाता है ; या (घ) छह मास की अिजध के जलए दकसी ग्राहक का सत्यापन नहीं करता है, राष्ट्रीय भारतीय भुगतान जनगम द्वारा बंि कर दिया िाएगा और ऐसे इकाइयों की पृथक् सूची http://npci.org.in/ e-KYCsetu/ पर बनाए रखी िाएगी, जिसमें ऐसी तारीख भी है, जिससे ऐसे बंि होने के कारणों सजहत पहुंच को बंि कर दिया गया है और दकसी ऐसे प्रक्रम पर, यदि भारतीय जिजिष्ट पहचान प्राजधकरण, राष्ट्रीय भारतीय भुगतान जनगम या समुजचत जिजनयामक इस जनष्कर्व पर पहुंचता है दक दकसी इकाई तक ई-केिाईसी सेतु प्रणाली की पहुंच बंि कर िेनी चाजहए, तो िह इसकी सूचना इस संबंध में राष्ट्रीय भारतीय भुगतान जनगम को तुरंत िेगा और राष्ट्रीय भारतीय भुगतान जनगम ऐसे इकाई तक पहुंच के जलए तुरंत इन्कार करेगा । 7. बोडव पर रखे गए इकाइयों तथा बंि दकए गए अजस्ट्तत्िों के ब्यौरे ऐसी कारविाई के सात दिन के भीतर राष्ट्रीय भारतीय भुगतान जनगम द्वारा भारतीय जिजिष्ट पहचान प्राजधकरण को और समुजचत जिजनयामक को अजधसूजचत की िाएगी । 8. यह अजधसूचना रािपत्र में प्रकािन की तारीख से प्रिृत्त होगी । [फा. सं. पी-12011/11/2021-ईएस सेल-डीओआर] ििांक जमश्रा, जनिेिक (मुखयालय) MINISTRY OF FINANCE (Department of Revenue) NOTIFICATION New Delhi, the 6th December, 2022 S.O. 5683(E).—In exercise of the powers conferred by sub-section (1) of section 11A of the Prevention of Money-laundering Act, 2002 (15 of 2003), in consultation with Unique Identification Authority of India (UIDAI), the Reserve Bank of India, the Securities Exchange Board of India, the [भागII—खण् ड 3(ii)] भारत का रािपत्र : असाधारण 3 Insurance Regulatory Authority of India and the Pension Fund Regulatory Authority of India, being the appropriate regulator, the Central Government, being satisfied that it is necessary to do so, hereby notifies that entities onboarded to perform authentication under the Aadhaar (Targeted Delivery of Financial and Other Subsidies, Benefits and Services) Act, 2016 (18 of 2016)(hereinafter referred to as the Aadhaar Act) for the purposes of section 11A of the Prevention of Money-laundering Act, 2002 using the e-KYC setu system be permitted to do so, after being satisfied that the e-KYC setu system complies with the standards of privacy and security under the Aadhaar Act. 2. The e-KYC setu shall be a system put in place by National Payments Corporation of India (NPCI) to enable verification of identity of a client or its beneficial owner by a reporting entity through authentication under the Aadhaar Act without disclosing the Aadhaar number of the individual to the reporting entity. 3. NPCI shall ensure that the authentication is carried out using the Aadhaar number of the client as per the regulations laid down by UIDAI, without disclosing full Aadhaar number to the reporting entity, and after carrying out authentication, NPCI shall share the last four digits of the Aadhaar number of the client, alongwith his demographic details made available to it by UIDAI, digitally signed by it, with the reporting entity and the reporting entity shall carry out identification of the client based on the details provided by the client and NPCI. 4. UIDAI may carry out such verification, including physical verification, as it may deem fit to ensure that the system put in place by NPCI is in compliance with the regulations issued by them and the requirements laid down by them and in case the UIDAI comes to a conclusion that additional measures are required to bring the system in compliance with regulations and other requirements, if any, it may issue such directions to be complied with in such time as it may deem fit. 5. (i) A list of entities on boarded for the purpose of carrying out the authentication using the e-KYC setu shall be maintained by NPCI at http://npci.org.in/e-KYCsetu/ including the date from which they have been on-boarded. (ii) Before on-boarding any entity for this purpose, NPCI shall ensure that the entity satisfies all the requirements for carrying out authentication through the e-KYC setu. (iii) NPCI shall also ensure that the entity has requisite regulatory clearance, if required, to carry out the financial business for which it intends to authenticate identity of its clients. 6. Access to the e-KYC setu system to an entity, which,- (a) is no longer desirous of carrying out authentication of its clients using e-KYC setu; (b) is found to be in breach of the requirements laid down by NPCI or UIDAI for verification of its clients using e-KYC setu; (c) is no longer allowed to carry out the financial business by the appropriate regulator; or (d) does not carry out verification of any client for a period of six months, shall be discontinued by NPCI and a separate list of such entities shall be maintained at http://npci.org.in/e- KYCsetu/ including the date from which the access has been discontinued alongwith the reasons for such discontinuation and at any stage, if UIDAI, NPCI or appropriate regulator comes to the conclusion that access to the e-KYC setu system to any entity should be discontinued, it shall inform the same to NPCI immediately in this regard and NPCI shall deny access to such entity forthwith. 7. The details of entities onboarded and entities discontinued shall be notified by NPCI to UIDAI and the appropriate regulator within seven days of such action. 8. This notification shall come into force from the date of its publication in the Official Gazette. [F. No. P-12011/11/2021-ES Cell-DOR] SHASHANK MISRA, Director (Headquarter) Uploaded by Dte. of Printing at Government of India Press, Ring Road, Mayapuri, New Delhi-110064 and Published by the Controller of Publications, Delhi-110054. ALOK KUMAR Digitally signed by ALOK KUMAR Date: 2022.12.06 22:48:51 +05'30'