Concept guide · ESG and sustainable finance

    Sector map: banks and NBFCs

    Bookmark
    5 min readLast reviewed: October 2026

    Intuition

    A bank's own offices emit little and use little water. Its ESG risks come through what it lends to and how it treats customers. A loan book heavy in coal power, steel or flood-prone farm lending carries climate risk. Millions of customer records make data privacy and cybersecurity central. And because banks use depositors' money, governance and fair treatment of borrowers are core to the business.

    Mechanics

    Material issues

    IssueFinancial channelWhere to find dataMetric to track
    Climate credit risk and financed emissionsCredit costs, collateral values, future capital needsAnnual report sector exposures; voluntary climate reportsExposure to high-emitting sectors; financed emissions and PCAF data quality
    Data privacy and cybersecurityFines, fraud losses, customer lossBRSR Principle 9; RBI penalty ordersData breaches; customer complaints; penalties
    Responsible lending and customer protectionCredit losses, conduct penalties, reputationRBI orders; ombudsman data; BRSR Principle 9Complaints per lakh accounts; mis-selling penalties
    Financial inclusionGrowth, priority sector complianceAnnual report; BRSR Principle 8Share of lending to MSMEs, farmers and underserved areas
    GovernanceAsset quality surprises, related lendingAnnual report; auditor reports; RBI actionsDivergence in asset classification; board independence; related-party loans

    Indian rules to know

    • RBI climate finance Directions (28 November 2025): rules on green deposits and green finance, with eligible and excluded activities and yearly verification.
    • RBI climate disclosure framework: released as a draft in February 2024 and not yet final at the time of review.
    • Digital Personal Data Protection Rules: notified on 14 November 2025, with core obligations such as notices, consent and security safeguards applying after 18 months. The DPDP Act allows penalties of up to ₹250 crore for failing to protect personal data.

    Sources

    Try it yourself

    Interactive exercises coming soon.

    Key glossary terms

    Related topics

    Stay in the loop

    Roughly one email per month. No spam, no upsells.