RBI has, by way of Notification dated March 7, 2024, amended the RBI (Credit Card and Debit Card – Issuance and Conduct) Directions, 2022 (‘Credit Card Directions’) and has also published frequently asked questions in relation to the Credit Card Directions. Key changes include: (i) co-brand partners are allowed to display card transaction related data on their platform (with robust security) by drawing the data directly from the card-issuer’s system through an encrypted form, subject to: (a) such information being visible only to the cardholder; and (b) the co-brand partner not being able to access or store the same; (ii) prohibition on card issuers for sharing of card data (including transaction data) with outsourcing partners, unless sharing of such data is essential to discharge the functions assigned to such outsourcing partner subject to: (a) the explicit consent of the cardholder being obtained for sharing the data; and (b) storage and ownership of card data remaining with the card-issuer.