SBI Privacy Notice for EU Customers

These documents are part of the State Bank of India’s (SBI) compliance framework to meet international data protection standards, primarily the EU GDPR and UK GDPR.

Below is a summary of what each form covers and why they are necessary for your NRI account.

1. Privacy Notices (EU & UK)

These are mandatory disclosures explaining how SBI handles your Personal Data (PD) and Sensitive Personal Data (SPD).

• SBI Privacy Notice for EU Customers: Designed to comply with the General Data Protection Regulation (GDPR). It outlines your rights to access, rectify, or erase your data and explains that your information is stored for approximately 10 years after the contractual relationship ends.

• Privacy Notice for UK NRI Customers: Very similar to the EU version but specifically references the UK Data Protection Act 2018. It clarifies that while the UK has its own regulations, the standards for data handling remain high.

• Key Disclosure: Both notices highlight that data is transferred from the EU/UK to SBI’s servers in India. Since India is not currently adjudged as an “adequate” country under GDPR Art. 45, the bank must provide these notices to ensure you are aware of the cross-border data flow.

2. Consent Forms

While the Privacy Notice tells you what they do, the Consent Form is the legal “handshake” where you agree to it.

For EU & UK NRI Customers

This form is more detailed due to strict European regulations. By signing it, you explicitly agree to:

• Data Transfer: Acknowledging that data will be moved to India, where privacy laws may be less stringent than in the EU/UK.

• Marketing (Optional): You must specifically tick “Yes” or “No” for receiving the NRI Newsletter or promotional offers via Email, Phone, or SMS.

• Minor Clause: Includes a specific section for legal guardians to consent on behalf of minors (under 18).

• Conflict of Laws: It states that if a conflict arises between EU/UK laws and Indian laws, Indian law shall prevail regarding banking services.

For NRI Customers (Other than EU & UK)

If you reside in the US, Canada, Middle East, or elsewhere, you use this version.

• Standard Compliance: Focused on Indian laws (like the Income Tax Act and FEMA) and the bank’s internal global data policy.

• Verification: Gives the bank permission to share your data with credit bureaus (like CIBIL or Equifax) and regulatory agencies for identity verification and anti-money laundering (AML) checks.

Summary Table: Which one do you need?

Important Links

You can typically find the latest PDF versions of these on the official SBI NRI portal. If you are submitting a Re-KYC or opening a new NRE/NRO account, ensure you use the version labeled “Version 2.0” or the most recent dated copy to avoid processing delays.