Drawing the attention of SEBI on Karvy Consultants

Karvy Consultants is one of the prominent share registrars in the country besides engaging themselves in trading and demat services. It is good if such a prominent registrar is serious about the legal responsibilities such as the requirement of KYC for share holders. However, Karvy appears to have lost sight of the basic purpose of share registry service which is to provide a facilitation for share investors to manage their investments. Karvy uses the requirements under KYC to harass the investors. I am not sure if this is a ploy to make more such investors to use Karvy sister company services for demat and trading services or is a simple inefficiency issue.

For the last several years I have been having a running battle with Karvy to get my addresses in some of the companies where I held shares changed. I have been an investor in the pre-demat era and most of my holdings were from the era where KYC was not a norm for either application for shares or for registration of shares. Share registers were held by respective companies and the system of recording proper name and address was not fully developed. There used to be number of mistakes in spelling in the names even in the share certificate itself. Spelling mistakes in addresses did not matter since the postal authorities would deliver the dividend warrants and other communication despite small errors. Hence the system was tolerant of some human errors in recording correct name, initials and address.

With the computerization, the deficient records got computerized along with the deficiencies and some times more of it. In the last few years there have been a spate of different identity documents issued to investors which has complicated the issue further. Presently documents such as the Passport, Aadhar Card, Bank Passbok, PAN Card, Ration Card, Voter Card, Driving license are all used as identity documents. Land line Phone bills, Electricity bill or Gas bill is often used as address proof.

These documents become defining documents which determine the KYC formalities. When there are discrepancies in such documents and they are not compatible, it gives raise to a serious difficulty in transactions involving KYC.

In the net world also we find such multiple IDs creating a problem either on the e-mail or social network. Some foreign digital signature certificate issuing companies provide facilities for attaching multiple e-mail IDs to one digital certificate which solves problems arising out of such multiple e mail IDs.

In view of the computerization and inconsistencies in different documents the inconsistencies in different ID documents and also the errors in registration of investors is creating a serious problem to genuine investors.

I have been personally experiencing the difficulties in this regard and the harassment I have felt from Karvy has forced me to go out of new investments and almost abandon my earlier investments. Add to this the Companies which have been de-listed and not traceable, Corporate investments have become untenable except for professional investors. These problems will get compounded when the investments need to be inherited by the legal heirs. Many legal heirs will be unable to encash or transfer the securities owned by their parents.

It is the responsibility of SEBI to find a solution to this problem.

For example, I am registered with several companies as share holders in names such as “Vijayashankar Nagaraja Rao” which can be taken as an official name. But in its rendition, the name may be written as “Vijayashankar Nagarajarao”, “Na.Vijayashankar”, “Vijaya Shankar” (with or without initials), “Vijaya Shanker” (with or without space and initials) etc. Similar issues may arise in the rendition of names for the joint account holder which will add one more name along with errors in its rendition. I am sure that there are others with more complicated name structures who may have even more problems.

When a registrar like Karvy needs to complete KYC for such investors, they need to know how to overcome what apparently is a human error in registration of names.

My experience with Karvy is that they often misplace old records and whenever a new transaction is to be done, they hold the transaction and request for new KYC. In my case they have held back address change requests and demat requests on the basis of signature differences and KYC requirements. I suspect that the reason is because they must have lost the old records and want to only update the records with new documents.

There is no issue on updation of records except that according to the procedure which Karvy has introduced, the share holder needs to spend around Rs 325/- for each change along with the physical problems associated with getting a Rs 100 stamp paper, an affidavit thereon and a letter from a Bank (Forw hcih Banks charge a hefty amount as fees) . Even after this, it is not possible to fulfill the formalities entirely to the satisfaction of Karvy since the documents are badly drafted in the first place.

I therefore urge SEBI to take a fresh look at the problems and design a proper procedure to set right the human errors that have crept into the system. One suggestion I have is that I should be permitted to create one “Omnibus Identity Affidavit” which can be usedd across companies and across registrars, demat agencies and Banks where I declare that ” I hold multiple IDs in the following different renditions. My recommended name rendition is ………, I authorize all agencies to make suitable changes in their records to synchronize with my main ID document which is my Passport where my name is rendered as ….  and my address is rendered presently as ……… I indemnify such agencies against any loss they may suffer on account of such change.”. ..etc

Copies of such affidavits should be considered sufficient for every KYC application. Beyond this, if the agency has issues, they should conduct a personal inspection and complete the process. If after this, they are not satisfied with the request for change, then they may handle such cases as exceptions through a responsible personal relationship manager.

Karvy consultants have in my case failed to respond even to such documents submitted  and have created irreparable damage to my investment holdings which are stuck . I have suffered financial losses on account of the unreasonably rigid and untenable stand that they have taken in relation to KYC. I urge that they should take a fresh look at their procedures. I also urge SEBI to take suitable action in this regard to introduce acceptance of an “Omnibus Identity Affidavit”

If Karvy or SEBI need further information on my particular problem, I am willing to share the details. However, what I am looking forward is a system change which will be helpful to all investors who have such problems.

Naavi

Posted in Cyber Law | Leave a comment

Karnataka Human Rights Commission forces reopening of Adjudication in the State

Karnataka State Human Rights Commission has done a yeomen service to the Cyber Crime victims of Karnataka by facilitating the reopening of the Adjdudication under ITA 2008 in the State.

It may be recalled that the IT Secretary of a State is the “Adjudicating Officer” of a State under ITA 2008 and has sole jurisdiction to adjudicate civil compensation claims under iTA 2008 for any contravention of ITA 2008 where the compensation claimed is less than Rs 5 crores.

Unfortunately, the earstwhile IT Secretary of the State namely Mr M.N.Vidyashankar had ruled that no cases can be registered for contraventions under Section 43 of the Act either by a Company or against a Company. This ruling though absurd defined the legal position in the State since around December 2011.

Naavi has been fighting to get this ruling reviewed and had been repeatedly knocking at the doors of the IT Secretary, Chief Secretary as well as the ministers such as Mr Suresh Kumar, Mr Yeddyurappa, Mr Sadananda Gowda and Jagadish Shettar. However none had taken any action so far.

The last letter written in this regard to the new IT Secretary had been marked as a copy to the Karnataka State Human Rights Commission since non availability of judicial redressal is a matter concerning “Human Rights”. The Commission took cognizance of the matter and issued notices to the parties mentioned in the complaint which included the Chief Minister of the State.

A few days back, the Chief Minister’s secretariat had sent an acknowledgement stating that necessary directions had been given to the IT Secretary. Yesterday, one of the complainant who has been adversely affected in the process received a communication that the current IT Secretary has decided to review the case and take up fresh hearing. We hope that other pending cases in a similar status will also come up for review.

Naavi.org welcomes the decision of the new IT Secretary and thanks the Karnataka Human Rights Commission for having taken up the cause of the public of Karnataka. Even before the Commission could have a hearing, positive action has already been initiated by the IT Secretary and it comes as a very pleasant surprise.

Naavi

Posted in Cyber Crime, ITA 2008 | Leave a comment

Competitive Compliance is the need of the hour.. Naavi

Speaking at the workshop on Safe E Banking, Naavi highlighted the regulatory aspects of Information Security in E Banking and the need for compliance. Speaking on the Risk mitigation guidelines released by RBI on February 28, 2013 and the fast approaching deadline for implementation by June 30, 2013, Naavi indicated that the regulations were a continuation of the G.Goplakrishna Working group (GGWG) recommendations and various other guidelines. He also pointed out that the GGWG as well as other regulatory guidelines had provided a time bound implementation plan for Bankers.

Refering to the comment of Mr G.Gopalakrishna during his introductory speech that the compliance of GGWG recommendations were only aroudn 38%, Naavi urged bankers to take urgent steps to improve the level of compliance.  In this context Naavi stated that what is required for Bankers is not only comply with the provisions of the GGWG recommendations but try to excel further as new technologies unfold. He pointed out that some Banks have a tendency to wait for other larger banks to comply before undertaking their own compliance measures and expressed his wish that Banks develop a sense of “Competitive Compliance” trying to do things better than other peers. He reminded that GGWG provided the “Flexibility” for the use of technology except where it was legally mandated and hence each Bank can explore better ways of achieving the security objective considering the GGWG recommendations as the base requirement.

Naavi

Posted in Bank, Information Assurance, RBI | Leave a comment

Security Protocol for Bankers

E Mudhra consumer Services, a company associated with the certifying authority, E Mudhra, has announced launch of what it calls as an online banking security protocol. The product named “TRUSTFACTOR” is a combination of an authentication server solution, digital signature certificates, customized crypto-tokens and a secured process for issuance, The Company is also setting up certain dedicated centers which will provide a customer interface for issuance of digital certificates.

(See report here)

The initiative appears promising.

Naavi

Posted in Cyber Law | Leave a comment

Cyber Warriors under production-

In recent days the media has highlighted some statements from the Central Government about the need of 5 lakh Cyber Security professionals in India. In order to address the skill gaps in Cyber Security professionals  that India may require in the future, EC Council (International Council of E-Commerce Consultants), a provider of certifications and training on information security has launched a publicity drive  to market its services.  In association with its training partners in India, the US-based company is expecting to offer training to about 40,000 people on areas such as Ethical Hacking, Computer Hacking Forensics Investigation, Security Analysis and Penetration Testing.

EC Council has been in business in India for quite some time and has been focussing on its “Ethical Hacking” programs. While such programs are attractive to youngsters, it is necessary for Cyber Security professionals to be developed on a foundation of “Responsibility”. Merely training youngsters on skills of hacking would lead to development of a large number of potential problem elements.

It is essential for every “Ethical hacking” training programs to be peppered with a teaching of “Cyber Law” as well as fortified with a proper “background Checks”, “Post training monitoring” and behavioural training.

There is therefore an urgent need for proper supervision of all “Ethical Hacking” training programs.

It is not clear if the Department of IT, Government of India nor DSCI, the Nasscom initiative is addressing this issue before trying to create a Frankenstein.

A serious national debate is required to evaluate the outcome of this publicity blitz undertaken by E C Council whose press release is cleverly implying endorsement of INCERT and DSCI. (See this report of Business Standard).

Naavi

Posted in Cyber Law | Leave a comment

National Law School to launch Cyber Law and Cyber Security Course

National Law School University of India (NLSUI), Bangalore the premier law education center in the country  is launching a distance learning course on Cyber Law and Cyber Security from the next quarter.

Admissions are now open. However the admissions may be open only for a short period and interested persons may take this opportunity to enroll themselves immediately.

Presently not many traditional law colleges have been conducting courses on Cyber Law. Also this course is a combination of Cyber Law, Cyber Security and Cyber Forensics and it is expected that apart from Legal professionals, Police and Technology professionals may also find the course useful. The course would be a one year course with contact classes.

For more information visit : http://ded.nls.ac.in/courses_available#PGDCLCF

Naavi

Posted in Cyber Crime, Cyber Law | 15 Comments