Chapter 3: Depository and its Business Partners
A Depository Participant (DP) is a registered agent of the depository who serves as the direct operational interface between the central depository and beneficial owner investors. Just as retail and corporate clients open savings and checking accounts with bank branches rather than directly with the Reserve Bank of India, investors open and manage demat accounts through registered DPs rather than directly with NSDL or CDSL.
+-----------------------------------------------------------------------------------+
| DEPOSITORY BUSINESS PARTNER ECOSYSTEM |
+-----------------------------------------------------------------------------------+
| |
| +------------------------+ |
| | CENTRAL DEPOSITORY | |
| | (NSDL / CDSL) | |
| +-----------+------------+ |
| | |
| +-----------------------+-----------------------+ |
| | | |
| v v |
| +------------------------+ +------------------------+ |
| | DEPOSITORY PARTICIPANT | | ISSUERS / RTAS | |
| | - Commercial Banks | | - Maintain Register | |
| | - Stockbrokers | | - Confirm Demat/Remat | |
| | - Custodians / NBFCs | | - Execute Corp Actions | |
| +-----------+------------+ +------------------------+ |
| | |
| v |
| +------------------------+ |
| | BENEFICIAL OWNER | |
| | (Retail/Corp Investor) | |
| +------------------------+ |
+-----------------------------------------------------------------------------------+
3.1.1 Eligibility Criteria for Becoming a Depository Participant
Under the SEBI (Depositories and Participants) Regulations, 2018, only specific classes of institutions are eligible to apply for registration as a DP:
- Public financial institutions as defined in the Companies Act, 2013;
- Scheduled commercial banks, including foreign banks operating in India;
- State financial corporations;
- Custodians of securities;
- Registered clearing houses or clearing corporations of stock exchanges;
- Registered stockbrokers holding membership in a recognized stock exchange;
- Non-Banking Financial Companies (NBFCs) meeting prescribed capital adequacy norms;
- Registrar and Transfer Agents (RTAs) meeting capital and infrastructure thresholds.
3.1.2 Minimum Net Worth Requirements for DPs
To ensure solvency and systemic protection, SEBI and depositories mandate rigorous financial net worth criteria:
- Stockbroker DP: Must maintain a minimum net worth of ₹3 Crore (which may be scaled up depending on whether the broker extends margin financing or depository services).
- Non-Banking Financial Companies (NBFCs): Must maintain a minimum net worth of ₹50 Crore.
- Registrars and Share Transfer Agents: Must maintain a minimum net worth of ₹10 Crore.
- Adequacy of Capital: DPs must submit annual net worth certificates certified by practicing Chartered Accountants within prescribed timelines to the depository.
3.1.3 Rights and Obligations of Depository Participants
- Opening and Servicing Demat Accounts: DPs are authorized to verify KYC documents, conduct In-Person Verification (IPV), and onboard clients.
- Execution of Instructions: DPs must promptly process Delivery Instruction Slips (DIS) and electronic transfer instructions (e-DIS, SPEED-e, easiest) received from clients, verifying signatures and mandates.
- Account Freezing and Pledging: DPs execute account freeze requests, pledge creation, invocation, and unpledge instructions in accordance with business rules.
- Confidentiality and Fiduciary Duty: DPs must maintain strict confidentiality regarding client balances and trading activities, disclosing information only to statutory regulatory bodies, tax authorities, or under court orders.
- Prohibition of Misuse: DPs are strictly prohibited from transferring, pledging, or manipulating client securities without explicit, verifiable client authorization.
To become an operational Depository Participant, an applicant entity must successfully navigate a rigorous multi-tier statutory process:
- Submission of Application (Form E): The applicant submits an application in Form E to SEBI through the sponsoring depository (NSDL or CDSL), accompanied by financial statements, net worth certificates, constitutive charter documents (MoA/AoA), board resolutions, and business plans.
- Depository Evaluation and Due Diligence: The depository inspects the applicant's physical premises, computer systems, connectivity, cybersecurity infrastructure, and operational staff credentials.
- Fit and Proper Person Verification: The applicant and its promoters, directors, and designated compliance officers must fulfill SEBI's "Fit and Proper Person" standards stipulated under Schedule II of the SEBI (Intermediaries) Regulations, 2008.
- Grant of Registration Certificate: Upon being satisfied that all statutory criteria are met, SEBI grants a Certificate of Registration to the DP.
- Execution of Participant Agreement & Depository Connectivity: The DP executes a formal legal agreement with the depository, pays the prescribed security deposits and admission fees, and connects its internal DP module (DPM in NSDL or CDAS terminal in CDSL) via dedicated leased lines or encrypted virtual private networks (VPN).
- Appointment of Qualified Personnel & Compliance Officer: The DP must appoint a designated Compliance Officer responsible for regulatory reporting and ensure that operational personnel clear the NISM-Series-VI: Depository Operations Certification Examination.
An Issuer is any legal entity (corporate company, statutory body, government agency, or mutual fund trust) that issues securities to the public or via private placement.
A Registrar and Transfer Agent (RTA) is a specialized agency registered under SEBI regulations that acts on behalf of the issuer to manage the registry of securities holders, facilitate corporate actions, and process physical/demat transfers.
3.3.1 Tripartite Agreement
To enable dematerialisation of an issuer's securities, a formal Tripartite Agreement is executed between:
- The Issuer Company;
- The Registrar and Transfer Agent (RTA); and
- The Depository (NSDL or CDSL).
Where the issuer manages its share registry in-house as an In-House Registrar, a bipartite agreement is entered into directly between the Issuer and the Depository.
3.3.2 Key Roles of RTAs in Depository Operations
- Dematerialisation: Verifies physical share certificates submitted by DPs against the company's register of members, cancels/defaces certificates, and electronically confirms the credit of shares to the depository within 15 days of receiving the physical documents.
- Rematerialisation: Reconstitutes physical share certificates upon receipt of an electronic remat request, updates the physical register of members, prints new physical certificates, and dispatches them to the investor within 30 days.
- Corporate Actions: Reconciles the total capital of the company with the depository's electronic holdings, executes splits, consolidations, bonus issues, and rights issues, and processes cash dividends via direct bank credits based on the Beneficiary Position (BENPOS) record.
Clearing Corporations (CCs) are institutions responsible for clearing and settling trades executed on stock exchanges:
- NSE Clearing Limited (formerly NSCCL) for NSE transactions.
- Indian Clearing Corporation Limited (ICCL) for BSE transactions.
Interface between Clearing Corporations and Depositories
- Trade Matching and Novation: When a trade executes on the stock exchange, the clearing corporation steps in as Central Counterparty (CCP), guaranteeing settlement.
- Pool Accounts: Clearing members maintain specialized accounts with DPs called Clearing Member (CM) Pool Accounts (or Principal Accounts) used exclusively to receive securities from selling clients and transfer securities to the clearing corporation during pay-in.
- Pay-in and Pay-out: On settlement day (T+1):
- Pay-in: Securities are debited from the seller's demat account (or CM pool account) and credited to the Clearing Corporation account.
- Pay-out: Securities are debited from the Clearing Corporation and credited directly to the buying client's demat account (Direct Payout to Client Demat Account), bypassing the broker's pool account to eliminate misappropriation risk.
Depositories and their business partners are subject to continuous multi-layered regulatory oversight to safeguard investor assets:
1. Mandatory Concurrent Audit of DPs
Every Depository Participant is required to appoint an independent practicing Chartered Accountant (CA) or Company Secretary (CS) to conduct a continuous Concurrent Audit covering all critical operational processes:
- Account opening and strict verification of KYC/CKYC documentation;
- Physical custody, issuance, and serial control of Delivery Instruction Slips (DIS);
- Timely execution and verification of transfer instructions;
- Dematerialisation and rematerialisation request processing within statutory timeframes;
- Verification of pledge and margin-pledge records;
- Investor complaint handling and compliance logs.
Concurrent audit reports must be submitted quarterly to the depository, highlighting all non-compliances, procedural lapses, and operational exceptions.
2. Code of Conduct for Depository Participants
Under Schedule III of the SEBI (Depositories and Participants) Regulations, 2018, every DP must observe strict behavioral and professional benchmarks:
- Exercise high standards of integrity, fairness, and due skill in all dealings;
- Maintain strict confidentiality of client accounts and records;
- Ensure adequate internal controls, dual-control mechanisms, and segregation of duties;
- Never indulge in unfair market practices, circular trading, or manipulative transfers;
- Provide prompt account statements and transaction acknowledgments to clients;
- Maintain complete audit trails and preserve records for at least eight years.
3. Depository Inspections and SEBI Enforcement Actions
- Depositories conduct comprehensive annual risk-based inspections of all registered DPs.
- SEBI retains statutory authority under Section 19 of the Depositories Act to inspect the books of accounts, records, infrastructure, and electronic data centers of depositories and DPs at any time.
- Disciplinary Actions: Imposition of monetary penalties, restriction on opening new demat accounts, suspension of participant registration, or termination of DP agreement and transfer of all client accounts to another compliant DP without charging the affected clients.
To maintain uninterruptible operational continuity across millions of daily market transactions, depositories and depository participants must implement enterprise-grade technology safeguards:
1. Dual Site Architecture and Disaster Recovery (DR)
- Primary Data Centre (PDC): Houses the central production servers, database engines, and core settlement modules.
- Near-Site Disaster Recovery (NDR): Located within synchronous replication distance to ensure zero data loss (Recovery Point Objective - RPO = 0) for transactions in progress.
- Far-Site Disaster Recovery (FDR): Located in a different seismic zone at least 250 kilometers away to survive regional disasters, power grid collapses, or geo-political emergencies.
- Disaster Recovery Drills: Depositories are statutorily mandated to perform full-scale disaster recovery drills at least twice every fiscal year, shifting complete live production traffic to the Disaster Recovery Site without market disruption.
2. Cybersecurity Framework and Information Security
Under SEBI circulars on cybersecurity and cyber resilience for Market Infrastructure Institutions and registered intermediaries:
- ISO 27001 Certification: DPs and depositories must maintain certified Information Security Management Systems.
- Periodic Vulnerability Assessment and Penetration Testing (VAPT): Comprehensive VAPT audits must be carried out at least once a year by CERT-In empaneled auditing organizations.
- Network Segmentation and Multi-Tier Firewalls: Core accounting databases (DPM and CDAS) must be isolated within strict demilitarized zones (DMZs) with restricted internal access and multi-factor authentication (MFA).
- SOC Operations: Continuous 24x7 Security Operations Centre (SOC) monitoring for anomaly detection, intrusion prevention, and automated threat mitigation.