What Happened
- The United States Trade Representative (USTR) released its annual National Trade Estimate (NTE) Report on Foreign Trade Barriers, identifying India's digital payments architecture and data governance rules as significant barriers to US trade.
- The report specifically cited India's Unified Payments Interface (UPI) as a closed system that excludes American payment service providers such as Visa and Mastercard from full participation.
- India's Digital Personal Data Protection Act (DPDPA), 2023 was flagged for its potential to impose data localization requirements and restrict cross-border data flows, hurting US technology and cloud services companies.
- India's preference for domestic satellites for DTH (Direct-to-Home) services and frequent internet shutdowns were also listed as digital trade barriers.
- A six percent "equalization levy" on gross revenue of non-Indian residents providing online advertising services was flagged as discriminatory against US technology firms.
Static Topic Bridges
Unified Payments Interface (UPI) — Architecture and Regulatory Framework
UPI is an instant payment system developed by the National Payments Corporation of India (NPCI) in 2016. It operates on top of the Immediate Payment Service (IMPS) infrastructure and is governed under a dual-layered regulatory structure: the Reserve Bank of India (RBI) provides overarching oversight under the Payment and Settlement Systems Act, 2007, while NPCI manages operational architecture including interoperability standards, Virtual Payment Address (VPA) systems, and API specifications for banks and third-party application providers.
- NPCI is a not-for-profit entity promoted by a consortium of banks under the aegis of RBI and the Indian Banks' Association (IBA).
- UPI processed over 13 billion transactions per month as of 2024, making it the world's largest real-time payments network by volume.
- Third-party payment apps like PhonePe, Google Pay, and Paytm operate as licensed intermediaries on the UPI rails but cannot independently set settlement infrastructure.
- The US has pushed for allowing foreign card networks (Visa, Mastercard) to access UPI settlement infrastructure directly.
Connection to this news: USTR's NTE report frames UPI's closed interoperability model and NPCI's domestic ownership structure as market access barriers under WTO trade obligations — specifically under the General Agreement on Trade in Services (GATS) framework covering financial services.
Digital Personal Data Protection Act (DPDPA), 2023 — Data Governance Framework
The DPDPA, 2023, is India's first comprehensive personal data protection legislation, passed by Parliament in August 2023. It replaced the long-pending Personal Data Protection Bill. The Act adopts a "blacklist" model for cross-border data transfers: personal data may be transferred to any country except those specifically notified as restricted by the Union Government. This is a significant departure from earlier draft bills that mandated data mirroring or localization by default.
- "Significant Data Fiduciaries" (SDFs) — entities processing large volumes or sensitive categories of data — face enhanced compliance requirements including Data Protection Impact Assessments.
- The government retains power under Section 16 to direct SDFs to process certain categories of data only within India.
- Draft rules under the Act impose obligations on data fiduciaries to disclose personal data to the government and restrict cross-border transfers to certain jurisdictions.
- India has not yet notified a restricted-countries list, creating regulatory uncertainty for businesses.
Connection to this news: USTR's concern is that the government's broad discretionary power to impose data localization — especially on SDFs — could effectively block US cloud and tech companies from transferring Indian user data to overseas servers for processing, constituting a de facto market access barrier.
WTO GATS and Digital Trade Rules
The General Agreement on Trade in Services (GATS), in force since 1995, is the primary multilateral framework governing trade in services, including financial and digital services. Unlike goods trade under GATT, GATS obligations are based on "positive list" commitments: countries are bound only in sectors they explicitly schedule. The US has historically pushed for WTO disciplines to cover cross-border digital trade, data flows, and source code requirements under GATS or a dedicated e-commerce framework.
- GATS contains an Annex on Financial Services allowing members to take "prudential measures" to protect financial system stability — a provision India can invoke to justify UPI regulation.
- In the landmark WTO panel ruling on China – Electronic Payment Services, China was found to have violated national treatment obligations by favouring domestic payment processors — a precedent the US may cite against India's UPI architecture.
- The Joint Statement Initiative (JSI) on E-Commerce at WTO, which India has not joined, seeks to establish binding rules on digital trade, data flows, and electronic payment market access.
Connection to this news: The USTR report is partly a precursor to US trade negotiating demands — framing India's digital policies as GATS-inconsistent creates leverage in ongoing bilateral trade deal negotiations.
Key Facts & Data
- UPI processed over 172 billion transactions worth approximately ₹246 lakh crore in FY2024-25.
- India imposes a 6% equalization levy on non-resident digital advertising revenues.
- The DPDPA, 2023 was passed in August 2023; implementing rules are yet to be fully notified as of 2026.
- NPCI is a non-profit organization promoted by RBI and IBA; UPI launched in 2016.
- GATS entered into force in January 1995 as part of the WTO agreements package.
- India and the US are negotiating an interim bilateral trade deal as of April 2026; USTR issues NTE reports annually under US Trade Act of 1974.
- The NTE report identifies three categories of India's digital barriers: UPI market access, data localization (DPDPA), and equalization levy on digital advertising.