Who Regulates Indian Markets, Companies, and Digital Identity

SEBI and the discipline of disclosure

The Securities and Exchange Board of India regulates the securities market: stock exchanges and depositories, listed companies, brokers, merchant bankers, mutual funds, portfolio managers, credit rating agencies and investment advisers. Its statutory objectives are to protect investors, to develop the market and to regulate it, and the three occasionally pull against one another. It holds powers to make regulations, investigate, inspect records, bar persons from the market and impose monetary penalties through adjudication.

Its principal instrument is disclosure rather than merit review. SEBI does not certify that a public issue is a good investment; it requires that the offer document tells prospective investors what they need in order to judge for themselves, including risk factors, pending litigation, related party transactions and the intended use of proceeds. Continuous disclosure obligations then require listed companies to announce material events promptly, on the theory that a price is fair only if information reaches everyone at the same moment.

The same logic explains insider trading rules, which prohibit dealing on unpublished price sensitive information and require companies to maintain structured records of who received it. Investors often expect the regulator to compensate them for losses, which it does not do; recovery normally runs through the securities appellate route, the company law tribunal or the ordinary courts. A grievance against an intermediary is filed on the regulator's complaints platform, which tracks the entity's response.

Insurance supervision under IRDAI

The Insurance Regulatory and Development Authority of India licenses insurers, reinsurers, brokers, corporate agents and surveyors, and approves the products they sell. Its central concern is solvency: an insurance contract is a promise to pay far in the future, so the regulator prescribes how much capital an insurer must hold relative to its liabilities, how reserves are valued, and where premium funds may be invested. A company that cannot maintain the solvency margin faces supervisory intervention.

Conduct regulation covers the rest. Policy wording, exclusions and the process for settling claims are subject to prescribed norms, and grievance handling is standardised so that a policyholder escalates first to the insurer, then to the regulator's grievance system, and then to the insurance ombudsman for disputes within a specified value. The commonest source of disputes remains non-disclosure at the proposal stage, because a claim can be repudiated for material facts omitted when the policy was bought.

The Competition Commission's three questions

The Competition Commission of India enforces competition law and asks three distinct questions. The first concerns agreements: horizontal arrangements between competitors to fix prices, limit output, share markets or rig bids are presumed to harm competition, while vertical arrangements between firms at different levels of a supply chain are assessed on their actual effects rather than presumed to be unlawful.

The second concerns abuse of a dominant position. Dominance itself is not an offence; the law targets its abuse, through conduct such as imposing unfair prices or conditions, limiting production or technical development, denying market access, or leveraging strength in one market to enter another. Establishing dominance requires defining the relevant market in both product and geographic terms, and that definition is usually the most fiercely contested part of any case.

The third is merger control. Transactions above prescribed asset or turnover thresholds must be notified before completion and cannot be consummated until cleared, with the regulator able to approve, approve with modifications, or block. A leniency mechanism allows a cartel participant that discloses first and cooperates to receive a reduced penalty, which is deliberately designed to make cartels unstable, since every member has reason to fear that another will report the arrangement.

Insolvency as a time-bound process

The Insolvency and Bankruptcy Code replaced a scattered set of laws for recovering debt and winding up companies with a single time-bound process. Its central shift was from a debtor-controlled to a creditor-controlled resolution. Once an application is admitted by the National Company Law Tribunal, the existing management is displaced and the company is run by an insolvency professional under the supervision of a committee of creditors.

A moratorium takes effect on admission, freezing suits, enforcement action and the recovery of property, so that the company keeps operating as a going concern while a resolution plan is prepared. Plans are invited from prospective buyers, evaluated by the committee of creditors and approved by the tribunal. If no plan is approved within the statutory period, including permitted extensions, the company proceeds to liquidation, and that hard deadline is what gives the process its bite.

Two features cause most confusion. The code is a resolution mechanism rather than primarily a recovery tool, so creditors frequently accept substantially less than the amount owed in order to preserve a functioning business. And distribution follows a statutory waterfall, in which insolvency costs and workmen's dues rank ahead of unsatisfied secured claims while operational creditors and shareholders rank low, which is why an unsecured supplier usually recovers very little.

Digital public infrastructure as plumbing

Digital public infrastructure describes shared, standardised systems on which many services can be built, in the way that roads carry vehicles nobody planned centrally. In India the layers are usually described as identity, payments and data. Each is defined by open specifications and published interfaces rather than by a single application, so a bank, a government department and a private firm can all plug into the same rails.

The design intent is interoperability and competition. A payments interface that lets any compliant application initiate a transfer between any two accounts prevents a single provider from locking users in, and consent-based data sharing frameworks let an individual authorise a lender to receive verified financial records instead of submitting scanned documents. The corresponding risks are concentration and exclusion: when one rail becomes indispensable, an outage or a mistaken record can shut a person out of services entirely.

Aadhaar: what the Act permits

The Aadhaar Act provides the statutory basis for a unique identity number issued to residents, along with the collection of the demographic and biometric information used to establish uniqueness. Its structure is important: the number is proof of identity, not of citizenship, and enrolment is open to residents satisfying a residency condition rather than to citizens alone. Authentication returns essentially a yes or no answer to the question of whether a presented identity matches the record.

Constitutional litigation shaped the current scheme. Mandatory linkage was upheld for the receipt of subsidies, benefits and services funded from the consolidated fund and for certain statutory purposes, while requirements imposed by private entities as a condition of service were curtailed. The consequence for everyday life is that a service provider generally cannot compel Aadhaar authentication without a legal basis, and voluntary use requires informed consent and an alternative means of establishing identity.

The Act also creates offences for impersonation, unauthorised access to the identity database and improper disclosure of identity information, and it limits the circumstances in which information may be shared. A resident may lock biometrics, use a virtual identity number in place of the actual number for authentication, and check the history of authentications performed against their record. Those are the practical controls available to an individual, and they are considerably underused.

UIDAI's role and its boundaries

The Unique Identification Authority of India is the statutory body that issues numbers, maintains the central identities data repository, sets standards for enrolment and authentication, and appoints and supervises the registrars and agencies that carry out enrolment on the ground. It also handles updates to demographic details and the correction of records, which is where most residents actually interact with it.

Its boundaries are worth stating plainly. The authority does not decide who is entitled to a welfare benefit, does not maintain the beneficiary lists held by ministries and state departments, and does not control how a scheme treats an authentication failure. When a person is denied rations or a pension because authentication failed, the remedy lies with the administering department, which is required to provide alternative means of establishing identity rather than turning the person away.

Indian Railways: a department that runs a business

Indian Railways is not a company but a departmental undertaking of the Union government, run by a ministry with a board at its head. Operations are organised into zones, each divided into divisions, with production units manufacturing coaches and locomotives and a separate research organisation setting technical standards. Zonal and divisional managers hold considerable operational autonomy over scheduling, maintenance and local works.

Its finances have a structural feature that explains most policy debate about it. Passenger services, particularly in the lower classes, are generally priced below the cost of provision, and the shortfall is cross-subsidised by freight, which is priced above cost. That makes freight tariffs sensitive to competition from road transport: if freight moves to trucks, the subsidy base narrows, which is why dedicated freight corridors and freight market share are treated as strategic rather than merely commercial questions.

Funding comes from internal earnings, budgetary support from the Union government and borrowing through a dedicated finance company, with additional structures used for specific projects in partnership with state governments. A regulatory question recurs alongside this: because the same organisation sets fares, runs trains and enforces safety standards, proposals to separate those functions surface periodically, and the safety review and accident inquiry machinery is deliberately kept at a remove from operational management.

The tribunals sitting above the regulators

Most Indian regulators sit within an appellate structure rather than at the end of the line. Orders of the securities regulator are appealed to the Securities Appellate Tribunal, competition orders to the National Company Law Appellate Tribunal, insolvency orders from the company law tribunal to that same appellate body, and telecom and electricity matters to their own specialised tribunals. A further appeal usually lies to the Supreme Court on questions of law.

This layering exists because regulatory decisions mix technical judgement with legal consequence, and a generalist court reviewing a tariff calculation or a market definition is at a disadvantage. It also means that a regulatory order reported as final may be years away from being settled. Before treating a penalty or a direction as concluded, check whether the appeal period has run and whether the operation of the order has been stayed.

Finding the rule that actually applies

Regulators speak through a hierarchy of instruments, and confusing them leads to confident errors. The parent Act sets out powers. Regulations made under it are subordinate legislation with the force of law. Circulars, directions, master circulars and guidelines interpret and administer those regulations. A press release announcing a decision is none of these and creates no obligation by itself, however widely it is reported.

For anything that matters, locate the instrument itself on the regulator's website, note its date of effect, and check whether a later amendment or a consolidated master direction has superseded it. Consultation papers, which invite comment before a rule is made, are frequently reported as though the change had already taken place. The difference between a proposal open for comment and a notified regulation is the difference between speculation and compliance.