RBI Deputy Governor Highlights Banks’ Accountability for Outsourced Services in Personal-Views Column

Why a bank outsourcing opinion matters to branch and risk teams

Reserve Bank of India Deputy Governor Swaminathan J wrote in Business Standard on 5 November 2026 about the growing role of external service providers in Indian banking. The article, updated shortly after midnight on 6 November, considers business correspondents, card-processing and cash-handling partners, technology infrastructure, fintech distribution, cloud services, fraud-detection systems and parts of credit assessment. It is explicitly labelled as the writer’s personal views.

Outsourcing can let a bank access specialist expertise, scale operations and offer services in areas where building all capabilities internally would be expensive. Business correspondents, for example, can extend the reach of services beyond a conventional branch. The column also points to the vulnerability created when many institutions depend on shared service providers.

Accountability does not move to a contractor

The central point of the column is that a bank may transfer performance of certain tasks to a vendor, but cannot simply transfer its accountability for customer outcomes or regulatory obligations. That distinction matters when a customer encounters a failed outsourced transaction, mishandling of personal data, mis-selling, questionable recovery conduct or unresolved complaints.

Contracts can distribute duties and commercial liabilities, but a bank still needs to understand how essential services operate, assess whether controls are working and intervene when an arrangement falls short. The column warns that losing in-house knowledge of an outsourced function can weaken effective supervision.

Key operational risks identified

• Common service-provider dependence: an outage at shared infrastructure may affect several banks at once.
• Information security: vendor systems, subcontractors and partner access can expose confidential customer information.
• Customer treatment: outsourced sales, account servicing and collections can lead to mis-selling, complaints and unfair practices if inadequately supervised.
• Artificial intelligence: opaque or biased external models may affect fraud or credit decisions. The bank still needs to explain and challenge the results.
• Operational resilience: tested backup arrangements, access to critical data and workable exit plans matter when suppliers fail.

Practical relevance for bank employees

For branch managers, operations staff, internal auditors, information-security teams and vendor-management officials, the argument reinforces the importance of documenting third-party incidents, escalating service failures, reviewing customer complaints and following the bank’s actual approved outsourcing-control processes. Vendor selection alone is insufficient without regular monitoring, assurance and corrective action.

The column refers to the RBI’s consolidated 2025 outsourcing directions and its 2026 cybersecurity and technology-risk framework, but it does not itself amend those documents or announce a fresh compliance deadline. Any mandatory requirement, affected institution or effective date must be checked against the applicable original RBI direction and the bank’s own approved policy.

Sources and References

• Business Standard — Swaminathan J, “Making outsourcing work,” first published 5 November 2026, updated 6 November 2026