P2P LENDING IN INDIA: OLD ROADS NEW RULES Introduction Peer to Peer (“P2P”) lending platforms (the “Platforms”) aims to provide individuals and entities with an alternative source for fulfilling their capital requirements. Whether it is for obtaining capital to run a business, financing to complete a personal project, or to obtain a loan for any other purpose, these Platforms allow borrowers and lenders to meet and transact on mutually acceptable terms.The Platform itself typically assists the process by listing lenders and their terms and conditions, verifying the identity and initial creditworthiness of the borrowers, disbursing the loans/tranches, collecting loan repayments etc.For these services, both the borrowers and lenders pay the Platform a commission. Most Platforms follow a ‘reverse auction model’, where the lenders bid with their own terms and conditions for a borrower’s loan proposal, and the borrower has the freedom to choose between the various bids.This gives borrowers who would typically struggle to get loans from banks/NBFCs with a variety of options. Further, the other advantage of the Platforms is that borrowers can now stay away from money lenders/the unorganized sector, as the Platform verifies all lenders and provides a streamlined and regulated process for obtaining loans. Finally, in most cases, the interest rates on loans obtained on the Platforms is also lower than what individual money lenders would usually charge. Since the popularity of P2P Platforms in India has grown in the recent past, they remained unregulated till recently. However, with the growth of the fintech industry and the multiple use cases/benefits of these Platforms, the RBI released a consultation paper on regulating P2P Platforms, in 2016. On receipt of feedback and comments from the public and all stakeholders, the RBI released its Master Direction –Non-Banking Financial Company – Peer to Peer Lending Platform (Reserve Bank) Directions, 2017 (the “Directions”)– recently to officially regulate and monitor P2P Platforms. Thus, it is pertinent to understand and analyse the regulations laid down by the Directions: Registration The Directions provide that only corporate entities registered as a ‘company’can operate and engage in the business of P2P lending. Companies operating existing Platforms will have to obtain a certificate of Registration (“CoR”) from the RBI within a period of 3 months from the date of publication of the Directions.Additionally, the Directions provide for minimum capitalisation requirements, which need to be met before obtaining registration. This requirement is INR 2,00,00,000 (Rupees Two crore only), which is in line with the requirement for all NBFC’s in accordance with Section 45-IA of the Reserve Bank of India Act, 1934. The Directions also provide the criteria on which registration will be determined.This includes ensuring that the Platform has the necessary technological and managerial resources, a robust IT system, fit and proper directors, a viable business plan etc. On being satisfied with an application, the RBI will first give an in-principle approval for setting up and operating a prospective NBFC-P2P platform. Within 12 months from the in-principle approval, the company must develop its technology platform as per the RBIs satisfaction, and also submit all other legal documentation as may be requested. For a platform acting as a mere marketplace for the meeting of lenders and borrowers (one that does not provide any of the additional services described above), the capitalisation requirements contained in the Directions seem a little harsh. Additionally, the requirement may prevent start-ups from entering this space entirely, which will adversely affect innovation in this space.We recommend that the threshold should be revised downwards and can be made incremental with each year of an entity’s operations, to ensure that only companies that are growing continue to retain their license/registration. Permitted Activities As per the Directions, the Platforms can perform the following activities/services:
- Mere Aggregator
The Platform can act as a mere aggregator, intermediary or marketplace to facilitate the meeting of lenders and borrowers. While they can participate in the lending/borrowing process in certain ways (described below), and cannot raise deposits in any capacity.
- Principle, Return and Guarantees
The Platform cannot guarantee the return of a loan to any lender or provide guarantees of no loss. This will ensure that all lenders signing up on the Platform do so at their own risk, and will hopefully bring about transparency by reducing instances of false advertisement/lending in the name of the Platform.
- Nature of the Loan
The Platform can allow lenders to offer only unsecured loans. This was the original idea behind P2P Platforms, and it allows customers with little/no security to avail of loans as well.
- Associated Businesses
The Platform shall not cross-sell any product except for loan specific insurance products.
- Financial don’ts for the Platform
- The Platform cannot hold, on its own balance sheet, funds received from lenders for lending, or funds received from borrowers for servicing loans. This ensures that no money from any of the transaction on the Platform can be compromised by the Platform provider’s own financial standing as an entity;
- The Platform cannot permit the international flow of funds. With this restriction, foreign lenders and/or borrowers have been excluded from participating directly on the Platforms in India, unless they hold a bank account within India.
- Duties of the Platform
- The Platforms are required to conduct a due-diligence on all participants in the Platform. This includes a credit risk assessment and risk profiling of all borrowers registering on the Platform. This information is also required to be disclosed to the lenders, and it helps in creating a transparent environment on the Platform;
- Platforms can render services for recovery of loans originated on the Platform;
- Platforms can undertake the documentation of loan agreements; and
- Platforms can provide assistance in disbursement and repayments of loans.
Prudential Requirements
- Permissible Thresholds of Lending and Borrowing
Any registered lender or borrower cannot lend or borrow more than INR 10,00,000/- (Rupees Ten Lakhs only) across all registered and authorised P2P Platforms. Further, no single lender can lend more than INR 50,000/- (Rupees Fifty Thousand only) to any single borrower across all Platforms. While these thresholds may seem conservative at first, considering the nascent stage of the P2P lending industry we believe that these limits are appropriate. The Platforms were anyway meant to facilitate small, unsecured loans from individual lenders, and if demand rises the limits can be revised in the future.
- Maturity Period: No loan provided via a Platform can have a maturity period of more than 36 (thirty-six) months. This seems apt, given the loan value is also capped at a number that is not very high.
Operational Guidelines The Platform is required to have and implement a policy approved by the Board of Directors of the Company (the “Board”) regarding the eligibility criteria for participants, pricing of their services, and detailed rules for matching lenders with borrowers on an equitable and non-discriminatory manner, and other matters concerning the operation of the Platform. Additionally, any and all liabilities regarding the collection, storage and protection of personal data by the Platform will have to be borne by the Platform itself, even if any of these functions are outsourced to third-party service providers. The Platforms are also required to maintain 2 escrow accounts for the transfer of funds – one for funds from lenders and the other one for funds collected from borrowers.Cash transactions are prohibited, which will help in accounting for all money being transacted via a particular Platform. Enhanced Transparency and Disclosure Requirements Previously, the scant availability of information regarding a borrowers’ credit history and defaults made the sheltering of defaulters easy. The Directions are aimed at rectifying this situation.They seek to introduce transparency and information symmetry between the borrowers and lenders, while simultaneously protecting the privacy of the data belonging to both parties.
- Disclosure to the Lenders:
Prior to accepting any loan arrangement on a Platform, the lenders should be made aware of the personal identity of the borrower, the loan amount, the credit score determined by the Platform and other details regarding the borrower.This ensures that the lenders can be made an informed decision regarding engaging with any borrower.
- Disclosure to the Borrower:
Borrowers are made aware of fewer details than the lender – they are informed about the lender's proposal, repayment terms and interest rate, but are not informed of the lender's personal identity, contact information and other personal information. This seems logical, as the borrower’s decision regarding the lender’s proposal should be based purely on the commercial terms offered, and not on the details of the particular lender.
- Public Disclosures:
The Platform is required to publish on its website the overview of the credit assessment methodology and factors considered; data protection and privacy measures; dispute settlement mechanism; portfolio performance including a share of non-performing assets monthly and segregation by age; and its broad business model.This is intended to give any individual/entity looking to register on the Platform the opportunity to make an informed decision. Data Security and IT Framework Considering the volume of personal data collected, stored and analysed on the Platform, ensuring a robust IT and data security framework is one of the foremost necessities. In light of this, the Directions lay down some robust standards:
- All Platforms are required to have “adequate safeguards” in their IT systems to protect against unauthorized access, destruction, modification, utilization etc. of the data. While the Directions do not lay down any specific minimum standard for maintaining these safeguards since the Platforms deal with personal data it can be assumed that they fall within the stipulations of the IT Reasonable Security Practice Rules, 2011;
- All Platforms are required to have a Board approved Business Continuity Plan in place for safekeeping of information and documents and servicing of loans for full tenure in case of closure of the Platform;
- The Platform has to carry out a yearly information system audit, as well adhere to all requirements under the Master Direction on Information Technology Framework for the NBFC Sector, June 8, 2017.
Conclusion With India marching towards the aim of being a paperless, cashless and consent-secured data sharing economy, these Directions are expected to open up new avenues for obtaining capital for individuals and small businesses, while simultaneously maintaining transparency and accountability in the process.Perhaps the only clause missing from the Directions is one on penalties, describing the repercussions if a Platform fails to adhere to any of the given guidelines. Yet overall, the Directions seem to be apt for P2P Platforms and well-thought through, especially considering that the industry around such Platforms is still nascent in India. As these Platforms gain more prominence the Directions can be modified accordingly, but for now, they seem to be a good starting point. Author: Ayushi Singh; Reviewed by Madhav Rangrass