Regulation 15 - Functions and obligations of the KRA - Securities and Exchange Board of India {KYC (Know Your Client) Registration Agency} Regulations, 2011

Functions and obligations of the KRA 15. The KRA has the following functions and obligations (a) KRA may prepare the Operating Instructions in co-ordination with other KRA(s) andissue the same to implement the requirements of these regulations. (b) KRA(s) shall have electronic connectivity and with other KRA(s) in order to establish interoperability among KRAs. Explanation: Inter-operability means the ability of the KRA to determine whether the KYC documents of the client are in the custody of another KRA. (c) KRA shall have a secure data transmission link with other KRA(s) and with each intermediary that uploads the KYC documents on its system and relies upon its data. (d) KRA shall be responsible for storing, safeguarding and retrieving the KYC documents and submit to the Board or any other statutory authority as and when required. 3 [ (da) KRA shall carry out an independent validation of the KYC records uploaded onto its system by the intermediary in such a manner as specified by the Board from time to time. ] (e) KRA shall retain the 1 [] KYC documents of the client, in 2 [] electronic form for the period specified by 4 [ rules made under the Prevention of Money Laundering Act, 2002 (15 of 2003) ] , as well as ensuring that retrieval of KYC information is facilitated within stipulated time period. (f) Any information updated about a client shall be disseminated by KRA to all intermediaries that avail of the services of the KRA in respect of that client. (g) KRA shall ensure that the integrity of the automatic data processing systems for electronic records is maintained at all times. (h) KRA shall take all precautions necessary to ensure that the KYC documents/records are not lost, destroyed or tampered with and that sufficient back up of electronic records is available at all times at a different place. (i) KRA shall have adequate mechanisms for the purposes of reviewing, monitoring and evaluating its controls, systems, procedures and safeguards. (j) KRA shall cause an audit of its controls, systems, procedures and safeguards to be carried out periodically and take corrective actions for deficiencies, if any and report to Board. (k) KRA shall take all reasonable measures to prevent unauthorized access to its database and have audit of its systems and procedures at regular intervals 5 [ as specified by the Board from time to time ] . (l) KRA shall have checks built in its system so that an intermediary can access theinformation only for the clients who approach him. (m)KRA shall appoint a compliance officer who shall be responsible for monitoring the compliance of the Act, rules and regulations, notifications, guidelines, instructions, etc., issued by the Board or the Central Government and for redressal of client s grievances. The compliance officer shall immediately and independently report to the Board any noncompliance observed by him. (n) KRA shall send a letter to each client after receipt of the KYC documents from theintermediary, confirming the client s details thereof. (o) KRA shall take adequate steps for redressal of the grievances of the clients within one month of the date of receipt of the complaint and keep the Board informed about the number, nature and other particulars of the complaints from such investors. 6 [ (p) KRA shall maintain an audit trail of any upload/ modification /download regarding the KYC records of each client. ] ******* 1 Omitted by SEBI {KYC(Know Your Client) Registration Agency} (Amendment) Regulations, 2013 w.e.f. 22- 03-2013. 2 ibid. 3. Inserted vide Notification No. SEBI/LAD-NRO/GN/2022/72 dated 28-01-2022 4. Substituted vide Notification No. SEBI/LAD-NRO/GN/2022/72 dated 28-01-2022 before it was read as Rules 5. Substituted vide Notification No. SEBI/LAD-NRO/GN/2022/72 dated 28-01-2022 before it was read as as prescribed by the Board 6. Inserted vide Notification No. SEBI/LAD-NRO/GN/2022/72 dated 28-01-2022