Banking and Financial Systems — Legal Reforms

Entry	Year	Description	Impact
Information Technology Amendment Act	2008	Introduced Section 70A establishing the National Critical Information Infrastructure Protection Centre (NCIIPC) with mandate to protect critical information infrastructure including banking and financial services. Added provisions for cyber terrorism and enhanced penalties for cybercrimes affecting critical infrastructure.	Created institutional framework for protecting banking infrastructure and established legal basis for sector-specific cybersecurity regulations. Enabled coordinated national response to cyber threats against financial systems.
Banking Regulation Amendment Act	2020	Explicitly included information technology and cybersecurity within RBI's regulatory purview under Section 35A. Strengthened RBI's powers to issue directions on operational matters including cyber risk management and incident response requirements.	Provided clear legal authority for RBI's cybersecurity regulations and enabled enforcement of comprehensive cybersecurity frameworks across the banking sector. Enhanced regulatory oversight of fintech partnerships and digital banking operations.