Today We came across this post in a Linked in account which states that Canara Bank has taken a trend setting decision to start their DPDPA compliance with a Rs 52.19 crore contract to a IT solutions provider along with a Six month contract to an AI platform developer for an additional cost. They have also reportedly contracted with an Audit form for Rs 82 lakhs to provide resources for DPDPA Compliance. (Refer here) (Also here) All together we can assume that there is an investment of around Rs 60 crores on this exercise.
Since Canara Bank has a market share of around 7% in the Indian Banking sector, this investment of Rs 60 crores represents a possible industry level investment of around Rs 860 crores purely for DPDPA compliance.
We are now getting an idea of the financial impact of DPDPA compliance on the industry.
Canara Bank is still owned by the Government to the extent of Rs 62.93% and essentially a Public sector Bank which is also declared as a Section 70 protected system in parts. Its RFP may indicate more details of what this payment of Rs 52.91 crores represent in terms of delivery.
We also came across an RFP of Nabard Bank for DPDPA contract which we understand has been awarded to another IT company. Some other Banks have gone to the Big4 audit companies to be on the safer side.
We appreciate the ingenuity of IT companies for selling DPDPA compliance as a software project.
These projects will come up for audit after 13th may 2027 and we will know how efficient is the investment made by these Banks.
In the meantime, let us sit back and watch how the other members of the Banking industry respond to the Canara Bank lead.
For curiocity, we visited the website of Kendryl IT solutions and found that it is a company that designs, build, manage, and modernize the world’s critical, technology systems. Hopefully this includes Privacy related IT systems also.
The PrivaSapien on the other hand declares that it is driven by the singular mission to empoer organizations with cutting-edge privacy management and privacyy enhancing technology products acrss the Data& AI Life cycle.
We presume that both these companies together would make Canara Bank an “AI Driven” Bank in the coming days.
We hope Canara Bank has taken note of the Risks associated with DPDPA compliance in an AI environment.
It would be interesting for shareholders of Canara Bank to know how much of provision has been made in the Books of the bank towards potential penalties under DPDPA for the year 2026-27, 2027-28 and 2028-29. The website of Canara Bank does not have a contact of the DPO nor a Greivacne officer for the time being and I suppose they will soon update the same.
We wish Canara Bank all the best in this AI driven DPDPA Compliance drive.
Naavi
