Director KYC After 31 March 2026: The New 3-Year DIN Compliance Cycle Explained

The director KYC regime under the Companies Act has changed materially in 2026. For years, companies, directors and professionals treated DIR-3 KYC as an annual compliance exercise. That approach is no longer the correct starting point after the Companies (Appointment and Qualification of Directors) Amendment Rules, 2025 came into force on 31 March 2026.

The amendment, notified by the Ministry of Corporate Affairs through G.S.R. 943(E) dated 31 December 2025, revises Rule 12A of the Companies (Appointment and Qualification of Directors) Rules, 2014. MCA’s official January 2026 communication confirms that the annual KYC requirement has been replaced by a simpler KYC intimation once in every three years. For companies, CFOs, company secretaries, directors and professional advisers, the reform reduces repetitive filing but increases the importance of maintaining accurate director data between filing cycles.

What changed from 31 March 2026

The most visible change is the move away from an annual DIN KYC filing cycle. MCA and ICAI have both confirmed that the revised framework substitutes a three-year compliance cycle. ICAI’s Corporate Laws & Corporate Governance Committee states that the amendment is effective from 31 March 2026 and that directors who had completed their KYC under the earlier framework are covered by the new provisions.

For directors whose KYC was already up to date when the new regime took effect, the next KYC filing is stated to be due by 30 June 2028. This is important operationally: compliance calendars that continue to flag an automatic annual DIR-3 KYC filing for every director can now create unnecessary work, while calendars that simply delete KYC controls altogether can create a more serious risk. The correct response is to redesign the control around the new periodic cycle and maintain event-driven monitoring of director particulars.

One revised framework for multiple director-data functions

The revised KYC form is not merely a reduced-frequency version of the old filing. MCA’s official release states that the simpler form may be used for KYC compliance, updating a director’s mobile number, updating email address, updating residential address and re-activating a DIN. This consolidation matters because director master data now needs to be treated as a continuing governance record rather than as information reviewed only when the periodic KYC date arrives.

MCA has also clarified that digital-signature verification by the DIN holder/director and professional certification are required when the KYC form is submitted for updating the mobile number, email address or residential address. That distinction should be built into internal workflows so that a company does not assume every KYC-related interaction carries identical authentication requirements.

Why the reform is more than an ease-of-compliance measure

At first glance, moving from annual filing to a three-year cycle appears to be a straightforward reduction in compliance burden. For well-governed companies, however, the practical effect should be a shift from filing-based control to data-based control. Under the annual model, the yearly filing itself forced directors and professionals to revisit key KYC particulars. Under a three-year model, inaccurate contact or residential information can remain unnoticed for longer unless the company maintains an independent process to capture changes as they occur.

This matters during regulatory notices, DIN-related actions, director appointments and resignations, banking or KYC exercises, due diligence, corporate restructuring and litigation. A director’s statutory record is often cross-checked against board records, MCA filings, identification documents and transaction documentation. A mismatch that was previously likely to surface during an annual compliance cycle may now need to be identified through the company’s own governance system.

What boards and compliance teams should change now

First, companies should replace the old blanket annual-KYC reminder with a director-wise register showing the last completed KYC, the next periodic due date and the current status of the DIN. The transition should be documented rather than assumed, particularly where a company has a large board, nominee directors, independent directors or directors serving across multiple group entities.

Second, director onboarding and annual declarations should include a clear internal requirement to notify the company or secretarial team promptly of changes in personal mobile number, email address or residential address. Even though the statutory filing frequency has been reduced, the quality of the underlying data remains critical.

Third, group companies should avoid duplicate and inconsistent records. Where the same individual serves on multiple boards, the group’s secretarial or compliance function should maintain a common director-data master with controlled updates. This reduces the risk of one entity operating with stale information while another entity has already captured the change.

Fourth, professional certification should remain evidence-driven. Where the revised form is used to update contact or residential particulars, the supporting documentation, director confirmation and certification trail should be retained in a manner that can withstand later regulatory or transaction due diligence.

DIN reactivation and legacy non-compliance

The revised KYC framework also accommodates DIN reactivation. This is particularly relevant for directors whose DIN status was affected by earlier KYC non-compliance. MCA’s January 2026 transition guidance had permitted directors who had not submitted KYC under the earlier regime to continue using the existing reactivation provisions up to 31 March 2026. That transition date has now passed. Accordingly, directors and companies dealing with an inactive or deactivated DIN should check the current MCA status and use the post-31 March 2026 framework rather than relying on old annual-KYC instructions or archived compliance checklists.

Practical implications for transactions and due diligence

The reform should also influence transaction due diligence. A clean DIN status should not be treated as the sole indicator that all director particulars are current. Acquirers, lenders and advisers may need to compare MCA records with identification documents, board records and recent declarations, especially where a director’s KYC is not due for another year or two. The longer statutory interval makes internal documentation more important, not less.

For audit and governance teams, the same principle applies. The reduction in filing frequency does not remove the need to ensure that statutory and corporate records remain consistent. Companies should therefore treat director-data accuracy as part of entity-level compliance controls rather than as a once-in-three-years filing event.

Key professional takeaway

MCA’s 2026 KYC reform is a genuine ease-of-doing-business measure, but it changes the control environment. The annual filing trigger is gone for directors covered by the new cycle; the need for accurate and current director information is not. The strongest compliance model will therefore combine the new three-year statutory calendar with continuous internal monitoring of director particulars, DIN status and supporting records.

Primary references: Ministry of Corporate Affairs / Press Information Bureau release dated 1 January 2026 on replacement of annual director KYC with a three-year cycle; G.S.R. 943(E) dated 31 December 2025; ICAI Corporate Laws & Corporate Governance Committee announcement dated 2 January 2026.

Disclaimer: This article is for general professional information only and does not constitute legal, tax or compliance advice. Companies and directors should review the applicable Companies Act provisions, rules, MCA portal requirements and their specific facts before taking action.