CICRA’s capital, ownership, and governance bar has kept India’s credit bureau market to four licensed players since the Act came into force. CS Chetna Shoor gives you a clear-eyed feasibility assessment before you commit to pursuing what is genuinely one of the hardest RBI-linked licenses to obtain.
A Credit Information Company (CIC) is governed by the Credit Information Companies (Regulation) Act, 2005 (CICRA) — not the RBI Act that governs NBFCs — and was recently brought under a consolidated framework through the RBI (Credit Information Companies) Directions, 2025, effective November 28, 2025. CICs collect, maintain, and disseminate credit information — the credit reports and scores that banks and NBFCs use to assess borrower creditworthiness. Only four entities hold this license in India today: TransUnion CIBIL, Equifax, Experian, and CRIF High Mark.
CICRA sets a minimum capital structure under Section 8 well above standard NBFC thresholds, alongside strict ownership diversification rules — a single shareholder is generally capped at 10% equity, with foreign investment limits ranging from 49% to 74% depending on how diversified the ownership structure is. This page is for institutional promoters — often an established international credit bureau, or a consortium of major financial institutions — genuinely evaluating whether to pursue a CIC license, rather than a first-time fintech founder. Chetna provides an honest feasibility assessment against CICRA’s requirements before any application work begins, since the realistic route for most businesses is becoming a “Specified User” of an existing CIC rather than building a new one.
The entire Indian market today: TransUnion CIBIL, Equifax, Experian, and CRIF High Mark
A minimum capital structure requirement, substantially higher than standard NBFC thresholds
General ownership diversification requirement for FII/FPI shareholders
Lower cap for concentrated ownership, higher cap for well-diversified ownership structures
Maximum period RBI typically grants to fulfill in-principle approval conditions
Legal basis, consolidated under RBI's November 2025 framework
RBI rejects over 40% of NBFC applications on the first attempt. Here’s what actually causes it.
CICRA's capital and ownership bar exists specifically to keep credit bureau ownership concentrated among serious, well-capitalized, diversified institutions. This isn't a gap in the market waiting to be filled by a well-drafted application — it's a deliberately narrow gate that has produced exactly four licensees in roughly two decades.
The FDI cap and single-entity shareholding limits mean a promoter group's cap table typically needs restructuring well before filing, not adjusted reactively after RBI raises a concern. Getting this wrong at the planning stage can add years to a timeline that's already long.
Becoming a Specified User — an entity permitted to access credit information from an existing CIC — is a comparatively simple registration. Founders sometimes approach this page assuming they need a full CIC license when what actually fits their business is Specified User status with one of the four existing CICs.
It’s worth being clear-eyed about which route actually matches your business before committing years to either.
Fits genuinely large-scale promoters — often an international credit bureau or a consortium of major financial institutions — planning to build and operate an independent credit information business.
Fits most fintechs and financial institutions that need to access existing CICs' credit information as a data recipient, without operating a credit bureau themselves — a materially simpler registration process.
Worth checking if your actual need is broader financial data access rather than credit information specifically. See our Account Aggregator License service.
We assess your position against CICRA's capital structure and ownership diversification requirements, honestly, before recommending a path forward.
Shareholding and FDI compliance planning, if the current cap table needs restructuring to meet CICRA's rules.
Application prepared under the Credit Information Companies Regulations, 2006, with the business plan RBI expects.
RBI review and in-principle approval — timelines vary significantly given the scale of scrutiny applied to this license.
Completing the conditions attached to in-principle approval within the period RBI grants.
Governance framework and ongoing compliance aligned to RBI's 2025 Directions established from day one.
Registration comes with ongoing governance obligations under RBI’s consolidated 2025 framework.
Annual provision of a Free Full Credit Report to individuals, including credit scoring.
Half-yearly review of Search & Match matching algorithms for accuracy.
Ongoing grievance redressal and data protection compliance.
Continued ownership diversification compliance as shareholding evolves over time.
CS Chetna Shoor’s team replies within 4 hours on WhatsApp.
A Credit Information Company (CIC) collects, maintains, and disseminates credit information — the credit reports and scores banks and NBFCs use to assess creditworthiness — and is governed by the Credit Information Companies (Regulation) Act, 2005, a separate statute from the RBI Act that governs NBFCs. A CIC does not lend or take deposits itself; its business is entirely about maintaining and sharing credit data.
As of today, four entities hold a CIC license in India: TransUnion CIBIL, Equifax Credit Information Services, Experian Credit Information Company of India, and CRIF High Mark Credit Information Services. This number has remained stable for years, reflecting how restrictive CICRA’s capital and ownership requirements are in practice.
A CIC operates the credit bureau itself, collecting and disseminating credit information under CICRA’s full regulatory framework. A Specified User is an entity permitted to access credit information from an existing CIC as a data recipient — a comparatively simple registration that fits most fintechs and financial institutions far better than pursuing a full CIC license.
CICRA and RBI’s related directions cap a single FII/FPI shareholder generally at under 10% equity, and set foreign direct investment limits of 49% for concentrated ownership structures or up to 74% for well-diversified ones. These rules exist to keep credit bureau ownership broad-based rather than concentrated in a single controlling shareholder.
It’s realistic only for genuinely large-scale promoters — typically an established international credit bureau or a consortium of major financial institutions — capable of meeting CICRA’s capital structure and ownership diversification requirements. For most businesses wanting access to credit information rather than operating a credit bureau, Specified User registration with an existing CIC is the far more practical route.
Qualified Company Secretary · ICSI Member · Founder, Expertvuw Management Pvt Ltd
Chetna has guided NBFC promoters through RBI’s COR process end to end, with particular focus on structuring the Net Owned Fund and business plan so the application survives first-round RBI scrutiny rather than coming back with a query.