Compliance teams are not constrained by regulation. They are constrained by the cost of meeting it
Indian financial institutions operate under overlapping frameworks: RBI KYC Master Direction, PMLA, FIU-IND reporting obligations, I4C coordination requirements, the DPDP Act and RBI Outsourcing of IT Services Directions. Each carries distinct filing requirements, SLA deadlines and penalty structures. ₹25,000 per missed STR filing. Multi-week EDD cycles that exceed regulatory timelines. LEA correspondence that remains unactioned because the capacity to parse, classify and route it does not exist at the required volume.
Detection infrastructure has improved. Institutions have deployed TMS platforms, AML screening tools and alert engines. What has not improved is the speed at which alerts are converted into defensible, filed, auditable decisions. Alerts are generated at API speed. Cases continue to close at human speed. Regulatory risk accumulates in that gap.