IRDAI - Information and Cyber Security Guidelines, 2026 (covering circular)
AI / PRIVACY / CYBER RELEVANCE
Current insurance-sector cyber-guidelines covering circular; the detailed 2026 controls are in Annexure B, absent from this uploaded PDF.
AI: ContextualPrivacy: HighCybersecurity: Very High
READ FIRST
- Para 1 - revises the 2023 Guidelines issued on 24 April 2023
- Para 4 - Guidelines in Annexure B set minimum standards and governance mechanisms
- Para 5 - entities covered and compliance from the current financial year
- Note - Annexures A and B are not part of the uploaded file
PURVIEW
Issues revised Information and Cyber Security Guidelines, 2026, replacing the 2023 Guidelines in light of the evolving threat landscape, industry feedback and recommendations of IRDAI committees. The Guidelines set the minimum standards and governance mechanisms for all regulated entities: insurers including foreign reinsurance branches, brokers, corporate agents, web aggregators, TPAs, IMFs, insurance repositories, ISNPs, corporate surveyors, MISPs, common service centres and the Insurance Information Bureau of India. They must strictly comply from the current financial year. The uploaded file is the two-page covering circular. It refers to Annexure A, a summary of the major changes, and Annexure B, the Guidelines, but neither is included, so check the detailed controls against the full text on the IRDAI website.
Classification and legal status. Circular IRDAI/GA&HR/CIR/MISC/51/4/2026 dated 6 April 2026 to all insurers, insurance intermediaries and the Insurance Information Bureau; compliance from the current financial year.