UPI Apps Must Take User Consent For Collecting Location Data: NPCI Guidelines

Last Updated: July 12, 2022, 5:28 PM IST

Sending of incorrect location coordinates will attract strict action from the NPCI. (Image: Shutterstock)

Apps should continue to provide the UPI services even after the customer has revoked the consent for sharing the location, NPCI

The National Payments Corporation of India (NPCI) has mandated all UPI-based apps to receive the user’s consent before capturing their location. It also said the option to enable or revoke the consent to share the location should also be mandatorily provided for the app to the users.

“If the customer has already given consent to share the location to the UPI apps initially, while availing the services, and then subsequently wants to revoke the consent, the same should also be permitted without denying the UPI services to the customer. Apps should continue to provide the UPI services even after the customer has revoked the consent for sharing the location/ geographical details for the app,” the NPCI said in a statement dated July 5.

It added that for all cases wherein the customer has given consent to capture the location/ geographical details to the app, the same should be correctly passed to UPI. Sending of incorrect location coordinates in such cases will attract strict action from the NPCI.

“If the customer does not give the consent/ not intending to share the location/ geographical details to the UPI apps, then app shall not deny/ disable the UPI services,” it said adding that the guidelines shall be applicable where the customer (payer) is a person/ individual who is initiating transactions and will be applicable to domestic UPI transactions only.

These rules must be followed by all members by December 1, 2022, and they only apply to domestic UPI transactions between individuals.

“Unified payments interface (UPI) provides a set of standard APIs (application program interfaces) to facilitate real-time online payments predominately for both person-to-person and person-to-merchant. The relevant field which the members are required to pass/ populate based on the nature of the transactions is prescribed as part of standard API message specifications,” the NPCI said.

Read all the Latest News, Breaking Newswatch Top Videos and Live TV here.