IFSCA Master Circular for Broker Dealers & Clearing Members, 2026: Key Changes from Earlier Circulars and the 2021 Framework

The International Financial Services Centres Authority (IFSCA) has issued the Master Circular for Broker Dealers and Clearing Members dated May 12, 2026, consolidating various circulars issued between 2020 and 2024 into a unified regulatory framework. The circular aligns with the IFSCA (Capital Market Intermediaries) Regulations, 2025 and marks a significant transition from a fragmented compliance structure to a more integrated and risk-based supervisory regime for IFSC intermediaries.

These developments form part of the broader broker dealer compliance framework in GIFT IFSC, which now emphasizes governance, operational resilience, reporting, and technology supervision.

The new framework materially strengthens governance, operational resilience, technology supervision, cyber security expectations, and investor protection standards for Broker Dealers and Clearing Members operating in GIFT IFSC.

Major Structural Shift: 2021 Regulations vs 2025 Regulations

The regulatory evolution from the IFSCA (Capital Market Intermediaries) Regulations, 2021 to the 2025 framework reflects a clear shift in supervisory philosophy. The earlier framework primarily focused on registration and operational eligibility of intermediaries. In contrast, the 2025 framework introduces a significantly broader compliance architecture centered around governance, technology controls, operational resilience, market conduct, and continuous oversight.

The 2026 Master Circular further operationalizes these expectations by consolidating earlier standalone circulars relating to authorized persons, DR sites, client fund settlement, system audits, and market access frameworks into a single compliance document.

The new regime also expands the scope of intermediaries and introduces enhanced governance expectations applicable to Principal Officers, Compliance Officers, technology systems, cyber resilience, and periodic reporting obligations. Additionally, the framework introduces the concept of Unified Registration (“Master Key”), enabling intermediaries to obtain multiple capital market registrations under a harmonized structure.

Comparison of Earlier Framework vs 2025/2026 Framework

Area	Earlier Framework	2025/2026 Framework
Regulatory focus	Registration-centric	Governance & supervision-centric
Technology controls	Limited	Extensive operational controls
Cyber security	Principle-based	Detailed cyber resilience framework
Reporting	Periodic	Continuous & risk-based
AI/ML governance	Not addressed	Specifically covered
Vendor oversight	Minimal	Structured governance framework
Operational resilience	Basic	Comprehensive BCP-DR framework

The regulatory direction clearly demonstrates IFSCA’s intention to align IFSC capital market regulation with mature global financial market standards.

Technology Governance: The Biggest Regulatory Upgrade

One of the most significant changes introduced under the 2026 Master Circular is the extensive expansion of technology governance requirements applicable to Broker Dealers and Clearing Members.

The earlier framework contained limited guidance on software governance and technology controls. However, the new circular introduces a highly detailed framework covering software testing, mock trading sessions, algorithmic trading controls, API governance, vendor oversight, and technology incident management.

The circular now mandates:

• simulated testing environments,
• mandatory mock trading sessions,
• User Acceptance Testing (UAT),
• periodic system audits,
• software approval mechanisms by exchanges,
• monitoring of algorithmic trading systems,
• participation requirements for algorithmic traders in mock sessions,
• structured API access frameworks, and
• enhanced oversight over software vendors.

The evolving regulatory treatment of automated trading systems is further detailed in the algorithmic trading regulatory framework in GIFT IFSC, particularly in relation to risk controls, APIs, and testing obligations.

Further, the circular places significant responsibility on intermediaries to maintain robust internal controls over technology infrastructure and software deployment. Broker Dealers are now required to ensure that any software changes, upgrades, or modifications undergo proper testing before deployment into live trading environments.

The framework also introduces vendor transition protocols and recommends multi-vendor strategies for large intermediaries to avoid single points of failure. Software malfunction risks are now explicitly addressed through contractual safeguards, insurance expectations, and operational accountability mechanisms.

Technology Governance Upgrade Snapshot

Earlier Position	2026 Position
Basic technology controls	Comprehensive testing framework
Limited vendor oversight	Formal vendor governance
Minimal algo supervision	Mandatory mock testing
Limited audit expectations	Structured system audits
Basic operational controls	Institutional-grade technology governance

The new framework effectively elevates technology governance from a support function to a core regulatory compliance area for IFSC intermediaries.

New Technical Glitch & Incident Reporting Framework

The 2026 Master Circular introduces a detailed framework for identification, reporting, monitoring, and resolution of technical glitches in electronic trading systems.

A “technical glitch” has now been formally defined to include failures, interruptions, or malfunctions in hardware, software, networks, automated systems, or outsourced infrastructure that impact normal operations for a continuous period of five minutes or more.

The framework imposes strict reporting timelines:

• Technical glitch reporting within one hour of occurrence,
• Preliminary Incident Report on T+1 basis,
• Root Cause Analysis (RCA) report within fourteen days.

The RCA must include:

• chronology of events,
• duration of the incident,
• impact assessment,
• root cause identification,
• corrective and preventive actions.

The Stock Exchanges are also required to independently monitor glitches and may publicly disclose technical glitch incidents and RCA findings on their websites.

Additionally, the framework empowers exchanges to impose financial penalties and disciplinary action for repeated or serious failures.

This marks a substantial strengthening of operational accountability and incident governance standards within IFSC capital market infrastructure.

Cyber Security & BCP-DR Framework Expansion

The Master Circular significantly strengthens cyber security and business continuity expectations for Broker Dealers and Clearing Members. The framework now directly integrates with the IFSCA Cyber Security and Cyber Resilience Guidelines, 2025 and adopts a proportionality-based approach considering the scale, complexity, and interconnectedness of regulated entities.

The new framework introduces detailed Business Continuity Planning (BCP) and Disaster Recovery (DR) obligations. Broker Dealers identified by exchanges based on scale and operational significance are now required to maintain robust BCP-DR infrastructure and governance mechanisms.

Key enhancements include:

• mandatory DR drills,
• live trading from DR sites,
• continuous system monitoring,
• Recovery Time Objective (RTO) and Recovery Point Objective (RPO) requirements,
• near real-time data replication,
• governance teams for DR invocation,
• one-to-one parity between Primary Data Centre and DR Site.

The framework also requires DR sites to be located in separate seismic zones wherever feasible, or at least 250 kilometers away from the primary site.

Cyber & DR Framework Comparison

Area	Earlier Framework	Current Framework under 2026 Master Circular
Disaster Recovery (DR) framework	Limited clarification on DR site operations	Comprehensive Business Continuity Planning (BCP) and Disaster Recovery governance framework
Cyber security obligations	Principle-based and limited operational guidance	Enterprise-wide cyber security and cyber resilience expectations
DR infrastructure requirements	Basic DR site permissibility	Mandatory DR architecture, redundancy, and operational preparedness
DR site location norms	No detailed geographical standards	DR site to be located in separate seismic zone or minimum 250 km away, wherever feasible
Resilience testing	Minimal testing expectations	Mandatory DR drills, including live trading simulations from DR site
Monitoring requirements	Limited operational monitoring	Continuous infrastructure and capacity monitoring mechanisms
Recovery planning	Broad continuity expectations	Defined Recovery Time Objective (RTO) and Recovery Point Objective (RPO) requirements
Data replication	Limited guidance	Near real-time replication between Primary Data Centre (PDC) and DR Site
Governance structure	Basic operational responsibility	Dedicated governance and response teams for BCP invocation and operational restoration
System resilience approach	Basic operational continuity	Structured operational resilience architecture aligned with global market standards
Certification expectations	No specific certification emphasis	ISO certification expectations for specified Broker Dealers
Audit oversight	Limited supervisory review	Mandatory review of BCP-DR readiness as part of annual system audit

The new framework demonstrates IFSCA’s increasing focus on operational resilience as a key component of market stability and systemic risk management.

These expectations align with the broader cyber security policy framework applicable to IFSC entities, covering governance, incident response, and operational resilience.

Stronger Client Protection & Market Conduct Requirements

The 2026 Master Circular substantially strengthens investor protection and market conduct obligations applicable to Broker Dealers.

The framework now expressly mandates strict segregation of client and proprietary funds and prohibits the use of client funds or collateral for proprietary obligations or for other clients. Any overlap between client and proprietary accounts is characterized as a material breach of fiduciary duty.

The circular also requires Broker Dealers to disclose proprietary trading activities upfront during client onboarding. Additionally, Stock Exchanges, Clearing Corporations, and Depositories are required to develop early warning mechanisms to identify potential diversion of client securities.

These provisions significantly enhance accountability and strengthen the fiduciary obligations of intermediaries handling client assets.

Ease of Doing Business Initiatives

While strengthening supervision, IFSCA has also introduced several ease-of-doing-business measures within the framework.

The circular operationalizes the SWIT (Single Window IT System) platform, enabling integrated registration, GST registration, SEZ approvals, and regulatory applications through a unified mechanism. The framework also recognizes Unified Registration (“Master Key”) for multiple capital market activities.

Further, flexibility has been introduced in running account settlement arrangements through client consent-based mechanisms. The framework also permits INR-based fee remittances for Indian applicants.

These measures aim to improve operational efficiency while maintaining regulatory oversight.

Governance & Compliance Expectations

The 2026 framework significantly enhances governance expectations applicable to IFSC intermediaries.

Broker Dealers and Clearing Members are now required to appoint Principal Officers and Compliance Officers based in IFSC with prescribed qualifications and responsibilities. The circular also introduces structured annual compliance audits, quarterly reporting requirements, and enhanced inspection mechanisms by exchanges and clearing corporations.

The framework further prescribes cooling-off requirements for auditors and promotes coordinated inspections among Market Infrastructure Institutions (MIIs). Event-based surveillance mechanisms and risk-based supervisory frameworks have also been introduced.

The governance structure now resembles institutional regulatory frameworks applicable in mature global financial centers, reflecting IFSCA’s intent to strengthen supervisory depth within GIFT IFSC.

Conclusion

The IFSCA Master Circular for Broker Dealers and Clearing Members, 2026 represents a major regulatory evolution for capital market intermediaries operating in IFSC. The framework moves substantially beyond the earlier registration-oriented regime and introduces deeper governance, cyber resilience, technology supervision, operational risk management, and investor protection standards.

The circular also reflects IFSCA’s broader objective of aligning GIFT IFSC with internationally accepted regulatory and supervisory practices applicable to sophisticated financial market ecosystems.

Broker Dealers, Clearing Members, Custodians, and related intermediaries should proactively reassess their governance frameworks, technology infrastructure, cyber security readiness, operational resilience capabilities, and compliance processes to ensure alignment with the expanded regulatory expectations under the new regime.