ROC and secretarial compliance
DIR-3 KYC Checklist for DIN Holders Under the Current Regime
A current DIR-3 KYC decision and access workflow for DIN holders after G.S.R. 943(E), covering the triennial cycle, 30-day changes, DIN reactivation, records, and secure filing.
11 min read
Short answer
From 31 March 2026, do not use the old blanket instruction that every DIN holder completes annual DIR-3 KYC by 30 September. G.S.R. 943(E) substituted Rule 12A. It now requires an individual who holds a DIN on 31 March of a financial year to file DIR-3 KYC Web on or before 30 June immediately following every third consecutive financial year. A DIN holder must separately submit DIR-3 KYC Web within 30 days after a change in personal mobile number, email address, or residential address, with the fee prescribed under the Registration Offices and Fees Rules. The same substituted web form also provides a DIN-reactivation purpose. Identify the individual's cycle, changes, DIN status, access, and evidence before selecting a route; current or former company role does not replace the DIN-holder test.
The annual 30 September rule is obsolete
The notification states its commencement date and substitutes Rule 12A, but it does not add a separate transition table assigning every existing DIN holder a bespoke first triennial filing year. Record the person's prior KYC history and current MCA status, then confirm how the live service applies the 'every third consecutive financial year' language before fixing that person's first cycle. This avoids replacing one unsupported universal date with another.
Choose among triennial KYC, change update, and reactivation
| Current fact | Rule or form route to test | Owner action |
|---|---|---|
| Individual holds a DIN on 31 March | Rule 12A(1) triennial KYC intimation | Establish the applicable sequence of three consecutive financial years and the 30 June date immediately following the relevant third year; confirm the live service before recording the cycle. |
| Personal mobile number changed | Rule 12A(2) particulars update | Submit DIR-3 KYC Web within 30 days of change with the fee prescribed by the applicable Fees Rules; do not publish or assume a fixed fee amount. |
| Personal email address changed | Rule 12A(2) particulars update | Restore personal control, verify the changed address, and complete the web-form route within the rule's 30-day period. |
| Permanent or present residential address changed | Rule 12A(2) particulars update | Record the actual change date, prepare current supporting proof, and use the change route within 30 days. |
| DIN is deactivated because KYC compliance is incomplete | Rule 11 read with DIR-3 KYC Web reactivation purpose | Confirm the precise DIN status and default history, then follow the current reactivation workflow and applicable fee rules rather than opening a second DIN application. |
| No listed detail changed and triennial point is not currently due | Monitor, do not invent an annual filing | Keep the DIN-status, last-compliance, access, and next-review record current; reassess after a listed change or at the verified triennial point. |
| Individual resigned or has no current directorship | DIN-holder test still controls | Do not close the KYC control only because a company role ended. Verify whether the person still holds the DIN and which rule path applies. |
Direct answer
Rule 12A speaks to every individual who holds a DIN on 31 March and, for listed changes, every individual holding a DIN. It does not limit the duty to founders of private companies or to people currently shown as directors of one company.
Build a DIN-holder status record before opening the form
- 01
Verify the person and DIN status
Use the DIN holder's controlled records and current MCA status. Record active, deactivated for KYC, surrendered, duplicate concern, or another displayed status exactly as found. Do not treat a company master-data search as the whole KYC conclusion.
- 02
Establish the timing route
Record DIN history, prior KYC acknowledgements, the financial years reviewed, each listed change date, and any deactivation date. Mark triennial, change update, reactivation, or professional review with a written reason.
- 03
Compare current personal particulars
Check personal mobile, personal email, permanent address, and present address against current evidence. The form introduced by the Gazette also contains name, nationality, date of birth, PAN, passport, address and proof fields. A mismatch outside the three Rule 12A(2) change categories may require a different correction path or advice; do not force every discrepancy into one route.
- 04
Confirm access and certification
The notified form uses OTP verification, the DIN holder's digital signature, attachments where particulars change, and certification by a practicing professional. Confirm personal channel access, DSC availability, evidence, and reviewer engagement before the filing session.
- 05
Record completion and the next trigger
Save the submitted form, service request number, acknowledgement, reviewer record, status after filing, next verified cycle review, and a control that captures later mobile, email, or residential-address changes.
Keep authentication and identity evidence under the DIN holder's control
- Use a personal mobile number and email address controlled by the DIN holder; do not use a shared founder, employee, consultant, or generic company inbox as a convenience.
- Have the DIN holder enter OTPs directly in the official session. Never ask the person to send an OTP over chat, email, a ticket, or the public diagnosis form.
- Check DSC validity and access before the filing window, but never record the token PIN, password, recovery code, or copy of the certificate in the tracker.
- Keep PAN, passport, date of birth, nationality, residential address, and proof documents in a restricted evidence location, not in a spreadsheet shared with the whole company.
- Send a practicing professional only the evidence needed for the selected route through an agreed secure channel; retain engagement and certification records.
- Review the acknowledgement and DIN status after submission. A successful OTP or upload does not by itself prove that every underlying particular is correct.
Handle a missed or uncertain case without inventing a result
| Exception | Do now | Do not do |
|---|---|---|
| Old annual calendar conflicts with the new rule | Retire the 30 September recurring task; document G.S.R. 943(E), effective date, prior KYC history, and the cycle needing confirmation. | Assume the old date remains current because an MCA PDF or search result is still indexed. |
| DIN status shows deactivated | Capture the exact displayed reason and use Rule 11 / DIR-3 KYC Web reactivation analysis. | Apply for another DIN or promise instant reactivation. |
| Mobile or email is inaccessible | Restore lawful personal control and obtain advice on the current update/authentication route. | Borrow another person's number, intercept OTPs, or keep a former employee's channel. |
| Address changed more than 30 days ago | Record the actual date, current proof, status and applicable fee-rule review; escalate before submission. | Alter the change date or state that no consequence applies. |
| Name, PAN, passport, nationality, or birth details conflict | Separate the KYC route from the underlying DIN or identity correction and obtain professional review. | Overwrite a verified field merely to make the form submit. |
| First triennial cycle is unclear | Retain prior acknowledgements and confirm current MCA implementation of the substituted rule for the individual. | Publish a universal first-due year not stated in G.S.R. 943(E). |
Rule 11 links KYC non-compliance to DIN deactivation and now points reactivation to Form No. DIR-3 KYC Web. Status recovery can affect a person's ability to use the DIN in company actions, but this guide does not predict the portal result, processing time, fee, or effect of a separate disqualification, duplicate-DIN, surrender, or identity issue. Keep those questions distinct and escalate before a deadline or transaction depends on the DIN.
Maintain a trigger-based KYC control
- 01
Assign the DIN holder
The individual owns accuracy, personal channels, OTPs, signature, and disclosure of changes. A company or adviser may remind and coordinate, but it should not impersonate the holder or control personal authentication.
- 02
Assign the compliance coordinator
Track DIN status, verified triennial cycle, listed changes, deadlines, evidence readiness, reviewer, acknowledgement and next trigger without storing sensitive values in the calendar.
- 03
Use event prompts
Ask about mobile, email, permanent-address, and present-address changes during director onboarding, resignation, annual company review, address relocation, and before a filing that depends on the DIN. An annual review prompt is useful; it is not an annual DIR-3 KYC filing rule.
- 04
Refresh authority before each filing
Check the current Gazette-backed rule, live MCA form and status immediately before acting. Record access and review date. Mutable portal screens cannot override Rule 12A, while an old instruction kit cannot revive the superseded annual regime.
Sources and review
Published by ThynkBored. Published 13 July 2026. Content review completed 13 July 2026.
- G.S.R. 943(E), Companies (Appointment and Qualification of Directors) Amendment Rules, 2025
Gazette of India, Ministry of Corporate Affairs. Accessed 13 July 2026.
Supports: Rules notified on 31 December 2025 and brought into force on 31 March 2026; Substituted Rule 12A triennial filing by 30 June immediately following every third consecutive financial year; Thirty-day update after change in personal mobile number, email address, or residential address, with fee under the applicable Fees Rules; Rule 11 reactivation references and replacement of the old form pair with Form No. DIR-3 KYC Web; Notified form purposes, identity fields, OTPs, change proof, digital signature, and practicing-professional certification.
- Companies Act, 2013 — section 153: Application for allotment of Director Identification Number
India Code, Government of India. Accessed 13 July 2026.
Supports: DIN begins with an individual application in the prescribed form and manner; DIN identity should be treated as an individual control rather than a company credential.
- Companies Act, 2013 — section 154: Allotment of Director Identification Number
India Code, Government of India. Accessed 13 July 2026.
Supports: Central Government allotment of a DIN to the applicant under the statutory DIN framework; Company role and DIN status are related but distinct records.
- Companies Act, 2013 — section 155: Prohibition to obtain more than one Director Identification Number
India Code, Government of India. Accessed 13 July 2026.
Supports: A person who has already been allotted a DIN must not apply for, obtain, or possess another DIN; A KYC or reactivation problem must not be handled by opening a second DIN application.
This guide explains the Rule 12A regime substituted by G.S.R. 943(E) with effect from 31 March 2026. It is educational, not a determination of an individual's filing cycle, DIN status, fee, reactivation outcome, or separate disqualification, surrender, duplicate-DIN, identity, residency, nationality, PAN, passport, or professional-certification issue. The notification does not contain a separate person-by-person transition schedule; confirm current MCA implementation and the holder's prior KYC record before fixing the first triennial cycle. Form fields, authentication, attachments, status labels, fee rules, and portal steps can change. Do not use an obsolete annual/30 September instruction after the effective date, invent a fee amount, falsify a change date, obtain a second DIN, share OTPs or credentials, or treat portal acceptance as proof that every underlying particular is correct.
Identify the current DIN route without exposing identity data
Share whether the person still holds a DIN, the broad displayed status, whether personal mobile, email, or residential address changed, the approximate change period, prior KYC acknowledgement availability, and the nearest company action that depends on the DIN. ThynkBored can help separate triennial, update, reactivation, and correction questions.
List status and record categories only, such as prior KYC acknowledgement, current DIN status, listed change type, DSC availability, address-proof category, and professional-review status. Do not send or upload the DIN, PAN, Aadhaar, passport, date of birth, address, proof files, personal phone or email, signatures, SRN, MCA credentials, passwords, recovery codes, DSC token or PIN, or OTPs through the form. Never forward an OTP; agree a secure handoff before sharing identity evidence.
Diagnose this issueQuestions owners ask
Who should track DIR-3 KYC?
Every individual holding a DIN should own the accuracy of personal particulars, authentication channels, signature, listed changes, and the verified triennial cycle. A company or adviser can maintain reminders and coordinate evidence, but the duty follows the DIN holder and does not end merely because one private-company directorship ends.
What happens if director KYC is missed?
Rule 11 can result in DIN deactivation for KYC non-compliance and now points reactivation to DIR-3 KYC Web. The exact route, fee, timing, and effect depend on the displayed DIN status, missed triennial or change facts, prior record, and current portal process. Capture the reason, preserve personal access and evidence, and obtain professional review instead of applying for another DIN or using an obsolete annual instruction.
Useful context for this decision
Follow the records, definitions, comparisons, and next actions connected to this page.