AI adoption requires board-driven risk governance, Malhotra warns
Reserve Bank of India Governor Sanjay Malhotra urged banks to adopt artificial intelligence responsibly while building strict risk governance. Speaking at the FIBAC 2026 conference on August 11, Malhotra outlined key priorities ahead of full Basel III implementation in April 2027.
Beyond traditional credit limits
Reserve Bank of India Governor Sanjay Malhotra highlighted five core drivers for artificial intelligence in banking: expanding credit delivery via alternative data, enhancing customer service, driving financial inclusion through local voice interfaces, automating operations, and countering real-time API fraud.
Malhotra confirmed that India remains on target to implement all applicable Basel III guidelines on a calibrated glide path starting April 1, 2027.
Building on public infrastructure like Aadhaar, UPI, Account Aggregators, and the Unified Lending Interface, AI can make financial assessment instant.
However, the central bank expects institutions to maintain board-approved AI policies, audit trails, and mandatory explanation capabilities for automated credit or fraud outcomes.
Seven risks behind the black box
The governor warned against seven major risks: black-box opacity, algorithmic bias, systemic concentration in foundation models, third-party vendor dependence, privacy breaches, adversarial cyber threats, and the erosion of human accountability.
Drawing on recommendations from the RBI's FREE-AI Committee and draft guidelines on Model Risk Management, Malhotra stressed that algorithmic decisions cannot bypass institutional responsibility.
Banks must preserve meaningful human oversight, conduct rigorous red-teaming, and maintain complete inventories of active models.
Governance determines digital winners
The RBI rightly refuses to treat artificial intelligence as a routine IT upgrade.
By placing accountability firmly on bank boards, the regulator prevents institutions from hiding behind opaque algorithms.
True success in Indian banking will depend on governance maturity rather than raw technological speed.