The Insurance Regulatory and Development Authority of India (IRDAI) has imposed a monetary penalty of Rs 1 crore on ICICI Lombard General Insurance Company for lapses related to outsourcing activities, vendor management, internal controls and corporate governance. Regulatory action follows onsite inspection conducted by the insurance regulator in September 2019, and enforcement proceedings are ongoing.
IRDAI issued its order on 7 September 2026 after reviewing the results of the inspection, the report by ICICI Lombard and the company's comments at a personal hearing. There were some concerns in outsourcing practices and compliance with governance requirements and, therefore, some violations on outsourcing and the governance requirements were made during the hearings, the regulator said.
The penalty is imposed under Section 102 of the Insurance Act 1938. IRDAI said the action was in line with IRDAI (Outsourcing of Activities by Indian Insurers) Regulations, 2017 which is linked to the regulator’s Corporate Governance Guidelines for insurers. The regulatory framework is intended to provide insurance companies with the appropriate oversight of activities which are carried out by external actors and internal controls.
One of the issues the regulator took up was the event management of agents of other insurance companies. ICICI Lombard was found to have spent significant amounts in the “sales marketing and business support” category in financial year 2018-19. The insurer said that part of this expenditure was payments to individual agents of other insurers.
IRDAI believed that some event management services should have been treated as outsourced activities, IRDAI said. The regulator also said the insurer did not adequately classify these activities and report the related expenses in the outsourcing returns of its operations or that they were not reported to the regulator through the appropriate outsourcing reporting mechanism.
The case underscores the importance of vendor due diligence and documentation in the insurance sector. Insurers tend to use third-party service providers for various operational functions of their business, but outsourcing has no role to play in the reinsurance system for that. Regulatory requirements are required to assure that outsourced work is under appropriate controls, documentation and monitoring are maintained for those functions in the insurance sector.
The IRDAI action also tackled more general issues like record maintenance, internal controls, governance and regulatory compliance. Such requirements are essential since insurance companies have huge volumes of customer information, premiums and claims and transparency and accountability are essential to the health and safety of the sector.
Apart from the Rs 1 crore monetary penalty, IRDAI issued some directions and advisories to ICICI Lombard on compliance deficiencies. The regulator also flagged issues on unallocated premium and delay in processing requests for free-look cancellations. The company is asked to bring the regulatory order to the Board and submit an Action Taken Report within the specified time frame.
ICICI Lombard has acknowledged receiving the IRDAI order. The company’s regulatory disclosure said that the financial impact is limited to the Rs 1 crore penalty and that no impact is expected on its activities or other activities. The insurance arm is also required to comply with the further directions and advisories issued by the regulator.
A key aspect of the development is the time gap between inspection and final regulatory order. IRDAI’s onsite inspection took place in September 2019 while the penalty order was issued on 7 September 2026. The enforcement process included further regulatory correspondence, submissions from the insurer and a personal hearing before the matter was concluded.
The move comes as IRDAI is putting more and more emphasis on governance, compliance and policyholder protection in India’s insurance industry. Regulatory scrutiny of outsourcing arrangements is particularly important, since insurers are now outsourcing work to external vendors and service providers for marketing, technology, customer service and other business functions.
The penalty does not mean that insurance policies have been cancelled or that ICICI Lombard has been stopped in operation. The company points out that there is no operational impact from the order apart from financial penalty. Instead, the regulatory action is focused on specific compliance shortcomings identified by IRDAI.
The result does serve as a reminder, however, that insurance companies must have robust systems even when business is conducted with third-party firms. Proper classification of outsourced work and proper regulatory reporting, vendor due diligence, record keeping and effective internal controls are critical to sound insurance governance.
As ICICI Lombard responds to IRDAI's directions and action taken report, the company's compliance measures and Action Taken Report will be relevant to the regulator's supervisory process. The case also supports IRDAI’s overall point that insurers are also responsible for ensuring that outsourced activities are held to certain regulatory standards.
On the whole, the Rs 1 crore penalty against ICICI Lombard is evidence of the growing regulatory compliance in India’s insurance industry. The company’s financial impact on the company is limited to the penalty but the order shows how outsourcing classification, documentation, vendor oversight and governance can lead to regulatory action years after an initial inspection.
Comments
Please to leave a comment on this article.