RBI's New Operational Risk Capital Rules for Banks Explained: What Changes From April 2027
Key Takeaways
- The RBI issued the Second Amendment Directions, 2026 on 23 October 2026, and the new operational risk capital framework takes effect on 1 April 2027.
- It implements the Basel III Standardised Approach for commercial banks, excluding Small Finance Banks, Payment Banks and Regional Rural Banks.
- The Business Indicator has three parts — the Interest, Lease and Dividend Component, the Services Component and the Financial Component — mapped to financial statement schedules.
- The Loss Component for the Internal Loss Multiplier equals 15 times average annual operational risk losses, net of recoveries, ordinarily over ten years of data, or five-plus years for first-time calculators.
- The rules are a capital safety buffer for banks; they do not change customer interest rates, fees or account terms.
What Happened
The Reserve Bank of India (RBI) has finalised the start date and the detailed calculation rules for the new operational risk capital framework for commercial banks. On 23 October 2026, the central bank issued the Reserve Bank of India (Commercial Banks – Forthcoming Instructions) Second Amendment Directions, 2026, numbered RBI/2026-27/299. The new rules will come into force on 1 April 2027.
In plain terms, the directions tell banks how much capital they must set aside for operational risk — the risk of loss from failed internal processes, people, systems or external events — and exactly how that amount is to be worked out. This is not a new tax on banks, nor a change in interest rates. It is a safety buffer rule: a bank must hold enough of its own capital to absorb losses that do not come from loans going bad or markets moving, but from things going wrong inside the bank itself.
The Hindu BusinessLine reported on 23 October 2026 that the RBI had amended its operational risk capital framework ahead of implementation from 1 April 2027, with detailed guidance on the computation of Operational Risk Capital (ORC), including an indicative mapping of Business Indicator items to balance sheet and profit-and-loss schedules. Angel One's summary of the same directions, also dated around 23 October, confirms the 1 April 2027 start date and the revised rules for income and loss calculations. TaxGuru's reproduction of the RBI directions gives the full reference and the operative details used in this article.
Background: Where These Rules Come From
This amendment does not stand alone. The RBI had issued the Reserve Bank of India (Commercial Banks – Forthcoming Instructions) Directions, 2025 on 28 November 2025. Chapter IV of those directions prescribed the minimum capital requirements for operational risk, but it left two things for later: the effective date of implementation, and the indicative mapping of the components of the Business Indicator to the schedules and line items of banks' financial statements.
The gap was then filled in stages. In a statement dated 1 October 2025, the RBI Governor announced that the revised Basel III capital adequacy framework for commercial banks would come into effect from 1 April 2027. Small Finance Banks, Payment Banks and Regional Rural Banks are excluded from this particular framework. After the 2025 directions, the Basel Committee on Banking Supervision — the global standard-setter whose Basel III standards these rules implement — issued certain additional clarifications.
The Second Amendment Directions, 2026 bring those threads together. They specify the implementation date for the new Standardised Approach, known as Basel III SA, for minimum operational risk regulatory capital requirements, provide the indicative mapping of Business Indicator components, and incorporate the additional Basel Committee clarifications. In short, the 2025 directions set the destination, and the 2026 amendment supplies the date and the map for getting there.
How the Calculation Works: The Business Indicator
At the heart of the framework is the Business Indicator, or BI. Think of it as a measure of the scale of a bank's ordinary business, built from its income and expense figures, which is then used to work out how much operational risk capital it must hold. The directions divide the Business Indicator into three components.
The first is the Interest, Lease and Dividend Component, or ILDC. According to Angel One's summary of the directions, this covers interest income from loans and advances, securities, financial and operating leases, hedge accounting derivatives and other interest income. On the expense side, it includes interest paid on deposits, debt securities and leases, as well as rental expenses, depreciation and impairment of operating leased assets. Banks must include gross outstanding loans and advances, interest-bearing securities — including government securities — and leased assets in their year-end interest-earning assets, and non-performing assets must also be included.
The second and third components are the Services Component (SC) and the Financial Component (FC). Together with the ILDC, they make up the Business Indicator. The directions provide an indicative mapping of each of these constituents to the schedules and line items of banks' financial statements, so that a bank can trace each figure back to its published accounts. TaxGuru's summary adds an important rider: where financial statement measurement, classification or presentation differs from the framework, banks must follow the operational risk framework's descriptions and sub-items. The mapping is a guide to finding the numbers, not a licence to reclassify them to suit the accounts.
Two finer points in the ILDC deserve attention because they show how precise the RBI has chosen to be. First, the revised table clarifies the treatment of operating lease rentals, expenses, depreciation and impairment, so that lease-related figures are not double-counted or left out. Second, interest rate derivative assets that affect interest income must be included in interest-earning assets at positive fair value, without subtracting negative fair values. In other words, a bank cannot net a losing derivative position against a winning one for this purpose; only the positive side counts.
How Losses Are Counted: The Internal Loss Multiplier
The Business Indicator alone does not set the final capital number. It is adjusted by a factor that reflects the bank's own history of operational losses, called the Internal Loss Multiplier, or ILM. This is where the amendment's most concrete numbers appear.
The Loss Component used in calculating the ILM will equal 15 times the average annual operational risk losses, net of recoveries. That last phrase matters. If a bank loses money to fraud, for example, but later recovers part of it, only the net loss counts. The BusinessLine report highlights exactly this clarification: operational risk losses used for calculating the ILM will be considered net of recoveries.
The average itself must ordinarily be based on ten years of high-quality annual operational risk loss data. Ten years is a demanding standard, and the RBI has built in a practical exception. A bank that is calculating the ILM for the first time may use the high-quality data it has available, provided it covers five years or more, when ten years of data are unavailable. This recognises that some banks may not have a full decade of consistently recorded loss data in the form the new framework requires, without letting a bank with almost no loss history escape the calculation altogether.
Damaged Assets: A Worked-Out Example of the Detail
The directions also spell out how to measure a loss when a bank's own assets are damaged or destroyed — the kind of event that is easy to describe in general terms but hard to put a number on. The RBI gives three cases, and the treatment differs in each.
If an asset is not repaired or replaced, the loss is its reduction in book value plus any residual clean-up or disposal costs. If the bank fully repairs or replaces the asset, the loss is the full repair or replacement cost, along with such additional costs. If the bank undertakes only a partial repair, leaving the asset with a lower book value than before the event, the calculation includes the repair costs and the reduction in book value relative to its pre-event value.
The logic is consistent across all three cases: count what was actually lost or spent, and do not count the same loss twice. A bank that restores an asset completely has spent the repair bill; a bank that leaves it damaged has lost part of its value; a bank that does a bit of both has incurred both kinds of cost. By writing these rules down in advance, the RBI reduces the scope for banks to argue, after an incident, about which figure should have been used.
Why It Matters: For Banks, Customers and the System
For banks, the immediate task is preparation, not panic. The rules take effect on 1 April 2027, giving banks the months between now and then to map their financial statement items to the Business Indicator components, assemble or clean up their loss data, and check that their ILM calculations follow the net-of-recoveries rule. Banks with a full ten-year loss history will have a straightforward, if laborious, task. Banks relying on the five-year exception will need to show that their data is genuinely high-quality and that ten years is genuinely unavailable.
For customers, the effect is indirect but real. Capital rules do not set the interest rate on a home loan or a deposit, and nothing in these directions changes those rates. What they do is strengthen the cushion that protects depositors if a bank suffers a large operational loss — a major fraud, a systems failure, or damage to its own assets. A bank that holds capital against such risks is less likely to need emergency support, and its depositors are less likely to face disruption, when something goes wrong. The framework is therefore best understood as part of the plumbing of financial stability, not as a consumer product change.
For the financial system as a whole, the amendment matters because it aligns India with the revised Basel III standard. International investors, rating agencies and counterparties compare banks across countries, and a common standard for measuring operational risk makes those comparisons meaningful. The indicative mapping to Indian financial statement schedules is the bridge between a global standard and Indian accounts. Without it, two banks could report the same business in different ways and arrive at different capital numbers; with it, the calculation is at least starting from the same map.
There are also limits to what this amendment does, and they are worth stating plainly. It does not change the capital rules for credit risk or market risk. It does not apply to Small Finance Banks, Payment Banks or Regional Rural Banks, which remain outside this framework. And it does not, by itself, prevent operational losses. A capital buffer absorbs a loss after it happens; it does not stop a fraud, fix a system, or repair a building. Prevention still depends on banks' internal controls, audits and governance, which are governed by other RBI directions.
What to Watch Next
The most useful thing to watch between now and 1 April 2027 is not the date itself, but the preparation. Banks' annual reports and investor presentations may begin to refer to their Basel III SA readiness, their Business Indicator mapping, and their loss-data position. Any further RBI clarification — for example, on reporting formats or on how the five-year exception will be assessed in practice — would also be significant, because the current amendment deliberately leaves some operational detail to be worked through in implementation.
Readers should also be careful about a common misunderstanding. Headlines about "new RBI rules for banks" sometimes get read as new rules for bank customers — new charges, new account conditions, or new loan terms. Nothing in the Second Amendment Directions, 2026 imposes such customer-facing changes. If a bank later changes a fee or a rate, that will be a separate commercial decision, not a requirement of this operational risk framework, and it should be judged on its own terms.
Conclusion
The RBI's Second Amendment Directions, 2026 answer two questions that the 2025 framework left open: when does the new operational risk capital regime start, and how exactly are its key numbers to be found and counted? The answers are 1 April 2027, and through a Business Indicator built from interest, services and financial components mapped to financial statement schedules, adjusted by a loss multiplier based on 15 times average annual net losses over ten years — or at least five for first-time calculators.
It is technical, and deliberately so. Capital rules work precisely because they leave little room for improvisation. For anyone trying to understand why Indian banks are talking about operational risk in 2026 and 2027, this amendment is the document to start with: a start date, a map, and a set of counting rules, all aimed at making sure that when something goes wrong inside a bank, the bank itself has the capital to absorb it.