8/10 banks don't disclose key personal data they collect
Most banks fail to clearly mention sensitive data like account numbers, PAN, or Aadhaar in their privacy policies. Transparency is missing at the very first step.
How India’s Top Banks
Are Falling Short on DPDP Compliance
We analyzed 25 real customer journeys across India’s top 10 banks.
The result: widespread gaps in consent, transparency,
and data handling.
How Big Is the Privacy Gap?
9/10 banks drop cookies without consent
Tracking begins before users have a choice. Cookie banners are either missing or ineffective, with marketing trackers enabled by default.
0 banks collect parental consent for minors
Despite handling sensitive financial data, not a single bank demonstrated compliant flows for processing minors' data.
9/10 banks rely on misleading or vague privacy policies
Policies are filled with ambiguous language, making it difficult for users to understand what they're agreeing to or how their data is used.
5/10 banks don't clarify third-party data sharing
Half of the banks fail to explain why user data is shared with external parties, leaving a major gap in accountability.
What You'll Gain From This Report
Full audit of 25 banking journeys.
Bank-by-bank compliance gaps.
UX patterns that violate DPDP.
Benchmarking insights.
Actionable recommendations.
Making Headlines Across India
Money Control | Many banks not
collecting DPDP-compliant consent
from customers, says report
The report’s findings showed that none of the banks collected parental consent while processing a minor’s data
Read More![Money Control | Many banks not ,[object Object], ,collecting DPDP-compliant consent ,[object Object], ,from customers, says report](/_next/static/media/publication1.249665de.png)
BW Business World | 80% of Top Banks
Don’t Inform Users About Collection of PAN, Aadhar Data in Privacy Policy
Eight out of ten banks do not inform users about their personally identifiable information (PII), like account number, PAN, and Aadhaar number, being collected in their privacy policy, highlighted a report on Digital Personal Data Protection (DPDPA) Compliance and Indian Banks by IDfy.
Read More![BW Business World | 80% of Top Banks ,[object Object], Don’t Inform Users About Collection of PAN, Aadhar Data in Privacy Policy](/_next/static/media/publication2.3fe46251.png)
Banks not collecting data protection Act-compliant consent, says IDfy
The report, which investigated data privacy in the banking journeys of the top 10 banks in India, said eight out of 10 banks do not mention personally identifiable information (PII) data collected in their privacy policy.
Read More
What This Means For You
This Is Bigger Than Compliance.
If you're a:
Head of Compliance → You’re exposed to regulatory risk
Product Leader → Your UX may be non-compliant
CXO → This impacts trust, brand, and growth
The gap between regulation and reality is widening.
shivani@idfy.com
Unit no. 801, Skyline Icon, 804, Andheri - Kurla Rd, Chimatpada, Marol, Andheri East, Mumbai, Maharashtra 400059
1800 123 4339
