RBI’s Listing Mandate for Upper-Layer NBFCs and Core Investment Companies
In a decisive clarification on financial sector governance, Reserve Bank of India (RBI) Governor Sanjay Malhotra emphasized at the NDTV World Summit in New Delhi that Core Investment Companies (CICs) accessing public funds—whether directly or indirectly—must register with the central bank, while non-banking financial companies (NBFCs) placed in the upper layer are required to list on stock exchanges. While explaining the regulatory mandate, Governor Malhotra pointed out that entities like Tata Sons and similar holding companies leverage group balance sheets to access public funds and manage capital for subsidiary enterprises, necessitating robust central bank oversight to contain systemic risks. Conversely, CICs that do not access public funds through any direct or indirect channel are exempted from mandatory registration.
Corporate Restructuring and the Dispute over Listing Exemption
The central bank’s stance arrives amidst heightened discussion around Tata Sons, the holding company of the Tata group. Classified by the RBI as an upper-layer NBFC in 2022, Tata Sons was assigned a three-year window until 2025 to list its shares on public exchanges. In response to the mandate, the company paid off its outstanding debt and sought to surrender its CIC registration. However, the RBI formally rejected this surrender request last month, directing the entity to fulfill all statutory requirements governing upper-layer NBFCs. To navigate this framework, controlling shareholder Tata Trusts proposed merging Tata Electronics Systems Solutions (TESS) and Tata Consulting Engineers (TCE) into Tata Sons. The proposed merger aims to shift the parent firm’s operational mix so that it no longer meets the criteria of an NBFC or CIC, a strategy requiring approval from the Tata Sons board and a no-objection certificate from the RBI.
GST Compliance and Indirect Tax Impact of NBFC Restructuring and Equity Issuance
The regulatory push for upper-layer NBFC listing and corporate re-engineering creates significant indirect tax implications under the Goods and Services Tax (GST) framework. When non-banking financial firms prepare for stock market listings, substantial professional expenditures are incurred, including merchant banking fees, legal advisory costs, auditing charges, and underwriting commissions. Under current tax statutes, these professional and advisory services attract a standard GST rate of 18%. Managing these costs demands rigorous adherence to Input Tax Credit (ITC) rules.
A primary tax challenge during an Initial Public Offering (IPO) or public listing revolves around ITC eligibility under Section 17 of the CGST Act. Under Indian indirect tax jurisprudence, money and securities are defined as neither goods nor services. Consequently, the issuance or transfer of shares is treated as an exempt activity for the purpose of credit apportionment under Rule 42 and Rule 43. Financial institutions executing listing processes must apportion their common input services—such as legal counsel, investment banking, and registry services—reversing ITC linked to exempt operations. Failing to accurately compute tax credit reversals can trigger statutory notices, interest liabilities, and financial penalties during audit cycles.
Tax Dynamics in Corporate Mergers and Business Transfers
Corporate consolidation strategies—such as the proposed integration of TESS and TCE into a holding entity—also introduce intricate GST tax considerations. Under GST notification frameworks, the transfer of a business as a going concern is exempt from indirect tax. However, the operational execution of a merger requires careful corporate restructuring tax planning. To learn more about structural tax frameworks, see our detailed analysis on evaluating corporate tax and GST frameworks in corporate mergers.
When operating entities merge, unutilized Input Tax Credit residing in the electronic credit ledger of the transferor companies must be transferred to the transferee entity under Section 18(3) of the CGST Act using Form GST ITC-02. This transfer requires certified stock and asset audits to ensure that the unutilized tax credits directly correspond to transferred liabilities and assets. Furthermore, once merged, the holding company’s service portfolio expands, transforming pure investment activities into operational service transactions. This shift alters the ratio of taxable services to exempt financial activities, fundamentally reshaping the entity’s overall GST liability and monthly credit eligibility.
Inter-Company Guarantees, Cost Allocation, and Financial Service Taxes
Holding entities sitting atop multi-layered corporate group structures routinely engage in inter-company financial support, including group balance sheet leveraging, performance guarantees, and corporate guarantees provided on behalf of subsidiaries. Under recent GST amendments and Rule 28(2) of the CGST Rules, providing corporate guarantees to subsidiary entities is treated as a taxable supply of service, subject to 18% GST on 1% of the guaranteed amount per annum or the actual consideration, whichever is higher.
Additionally, central management expenses, corporate headquarters overheads, and shared executive services charged by parent companies to group entities must be structured through arm’s-length valuation methods. Discrepancies between underlying accounting ledgers and tax returns can lead to severe tax exposure. Financial institutions must maintain meticulous documentation to prevent tax disputes, similar to strategies analyzed in our study on GST ITC mismatch and tax reconciliation mechanisms.
Monetary Policy Shifts and Cybersecurity Compliance Spend
Beyond structural regulation, Governor Malhotra addressed broader macroeconomic and operational risks. At its recent meeting earlier this month, the Monetary Policy Committee (MPC) raised the policy repo rate by 25 basis points to 5.50 per cent, shifting its stance from neutral to “calibrated tightening.” While interest rates are generally reserved for macroeconomic adjustments rather than direct financial stability interventions, the RBI confirmed that monetary tools remain available if deemed necessary and effective by the MPC.
Simultaneously, the central bank flagged expanding operational vulnerabilities, particularly dark web data leaks and artificial intelligence risks facing banks and NBFCs. Upgrading enterprise risk management, cybersecurity software, and AI safeguard systems involves heavy technology capital expenditure. Software licensing, cloud infrastructure, and cybersecurity auditing services carry an 18% GST rate. For financial sector firms subject to partial credit reversal, technology security compliance increases non-creditable input tax costs. Ensuring that vendor invoices seamlessly align with statutory GST filings is essential to optimize tax recovery while maintaining compliance with RBI security benchmarks.
Frequently Asked Questions
According to RBI Governor Sanjay Malhotra, CICs that access public funds, directly or indirectly, are required to register with the central bank. Only CICs without direct or indirect access to public funds are permitted not to register.
All Non-Banking Financial Companies (NBFCs) that are classified in the upper layer by the Reserve Bank of India are required to list their shares on stock exchanges.
After being classified as an upper-layer NBFC in 2022 with a deadline to list by 2025, Tata Sons repaid its outstanding debt and requested the cancellation of its CIC registration. However, the RBI rejected the request last month and directed Tata Sons to comply with upper-layer NBFC requirements.
Tata Trusts proposed merging Tata Electronics Systems Solutions (TESS) and Tata Consulting Engineers (TCE) into Tata Sons to alter the holding company's business mix so that it would no longer qualify as an NBFC or a CIC.
The MPC raised the policy repo rate by 25 basis points to 5.50 per cent and shifted its monetary policy stance from neutral to 'calibrated tightening'.
The Governor highlighted cybersecurity risks—specifically data security and cyberattacks capable of disrupting systems, as evidenced by dark web data leaks reported by banks—along with stability concerns arising from artificial intelligence (AI).



