In a move to safeguard India's financial sector from unpredictable AI behavior, the Reserve Bank of India has introduced draft guidelines requiring banks and NBFCs to implement rigorous risk management controls, including an AI kill switch for immediate deactivation of faulty models.
- RBI sets broad AI governance rules across banks and NBFCs.
- Mandates ‘kill switch’ and human oversight on AI models.
- Institutions to inventory and validate all AI systems.
What happened
The Reserve Bank of India has published draft guidelines titled 'Guidance on Regulatory Principles for Model Risk Management, 2026,' proposing a comprehensive framework to manage AI-related risks in regulated financial entities. Central to the draft is the introduction of AI risk mitigants including explainability thresholds, regular monitoring for bias and anomalies, and fail-safe mechanisms like a kill switch that can instantly deactivate AI models exhibiting harmful or unexpected behavior.
These guidelines apply broadly across commercial banks, small finance banks, payment banks, cooperative banks, NBFCs, and other financial institutions. The RBI also requires continuous validation and stress testing of models, whether developed in-house or sourced from third parties. Feedback on the draft is open until July 24, 2026.
Why it matters
As Indian financial institutions increasingly rely on AI-driven systems—from customer support chatbots to complex loan underwriting—risks such as AI hallucinations, data privacy issues, and biased decision-making pose severe operational and reputational threats. The RBI’s framework seeks to embed accountability and governance to mitigate these risks before they materialize at scale.
The requirement for a comprehensive model inventory challenges institutions to document legacy and third-party AI-driven tools previously overlooked in governance frameworks. This broad interpretation ensures even seemingly simple decision engines fall under regulatory oversight, reinforcing safety and transparency throughout the AI lifecycle.
What to watch next
Industry participants and stakeholders will be closely monitoring the consultation process leading up to the July 24 deadline for feedback submissions. The degree of flexibility or stringency in the final guidelines could significantly affect compliance costs and operational changes for banks and NBFCs.
Additionally, attention will focus on how institutions implement the kill switch and human-in-command protocols, balancing automation benefits with necessary human supervision. How the RBI enforces the framework and supports institutions through this transition will also be critical in shaping the future AI governance landscape in India's financial sector.