A stock broker is an easy business to misunderstand. You see the app, the order screen and the contract note. Most of the rules that matter to you are somewhere behind those things, in systems you never see.
On 7 January 2026, SEBI replaced the Securities and Exchange Board of India (Stock Brokers) Regulations, 1992 with a new set of regulations. The new framework brings the broker rules together in one place and adds some obligations of its own. Some changes are genuinely new. Others were already required through circulars and have now been written into the main regulations.
That distinction matters. A headline saying that SEBI has introduced a completely new set of protections can make an old rule sound new. It is more useful to ask what your broker actually has to do differently, and what you can expect to notice as a client.
The first change is the rulebook itself
The 2026 regulations are the new base framework for stock brokers and clearing members. They cover registration, general obligations, client protection, governance, record keeping, compliance and other responsibilities.
The practical effect for a retail investor is not that your trading screen suddenly looks different. It is that the duties behind that screen now sit in a newer regulatory framework.
This is the first point worth keeping in mind when reading about the 2026 rules. A regulation can be new even when the underlying obligation is not. Several requirements that brokers were already following through SEBI circulars have been consolidated into the 2026 regulations.
Your complaint must be dealt with within 21 calendar days
A stock broker must take adequate steps to redress investor grievances within 21 calendar days from the date it receives the complaint. The 2026 regulations put this obligation directly into the broker framework.
That does not mean every dispute will be finished permanently in 21 days, or that you will never need to escalate a complaint. It means the broker has a regulatory obligation to address the grievance within that period.
Brokers now have a clearer compliance responsibility
Every stock broker must appoint a compliance officer.
The compliance officer's responsibilities include monitoring compliance with the SEBI Act, the Securities Contracts (Regulation) Act, applicable rules and regulations, and the requirements issued by SEBI and recognised stock exchanges. The officer is also responsible for redressal of investor grievances.
There is an important part that is easy to miss. The regulations require the compliance officer to report non-compliance immediately and independently to the recognised stock exchange.
Your records have to exist for longer
The minimum period for maintaining the books of account and records covered by the regulations is now eight years.
That is longer than the five-year period under the old stock broker regulations.
This is a substantive change rather than simply a consolidation of an earlier requirement. The longer retention period gives regulators a longer trail to inspect when they need to reconstruct what happened.
Client money and securities must stay separate
This is important protection, but it is also easy to misread as a new 2026 rule.
Stock brokers are required to keep client funds and securities separate from the broker's own funds and securities, and from those of other clients, and to use client assets only for permitted purposes. The 2026 regulations set this out as part of the broker's obligations.
But much of the underlying architecture was already in force through SEBI circulars before the 2026 regulations arrived. That includes the rules around client collateral and the upstreaming of client funds.
So the honest description is that the 2026 framework consolidates and codifies an existing protection while keeping it central to the broker's obligations.
This matters because regulatory explainers often use the words "new rules" for everything in a new regulation. A new rulebook does not make every paragraph inside it a new requirement.
Brokers have to think about cyber risk as a client protection issue
The new regulations require stock brokers to have a robust cyber security and cyber resilience framework, as specified by SEBI.
Again, the 2026 regulations are not where cyber obligations began. SEBI had already built a detailed cyber security and cyber resilience framework for market intermediaries. The 2026 regulations bring that responsibility into the main broker framework as well.
For a client, the point is straightforward. The broker is not responsible only for matching your order with an exchange. It also has regulatory responsibilities around the systems that store, process and transmit your information and instructions.
That does not make any trading platform immune from outages or cyber incidents. It does mean resilience is part of the broker's regulated responsibilities rather than simply a technology preference.
What happens when the broker's systems fail
Technology risk has its own rulebook too.
SEBI's January 2026 review of the technical-glitch framework changed how stock brokers must deal with qualifying technical glitches. The revised framework rationalised which brokers and incidents fall within the framework, simplified reporting, extended the reporting window from one hour to two hours, and introduced a common reporting platform.
For a retail trader, none of this guarantees that an app will never fail. What matters is that qualifying failures are subject to a defined regulatory process and that the framework has been adjusted to focus the heavier requirements where they matter most.
There is another important change. In May 2026, SEBI discontinued the Investor Risk Reduction Access, or IRRA, platform, with effect from 7 May 2026. SEBI said the platform had become structurally redundant because brokers and the market infrastructure now have other business-continuity measures, including strengthened disaster recovery, cyber resilience and contingency trading arrangements.
Brokers must have systems to detect fraud and market abuse
The 2026 framework goes beyond protecting investors from operational failures. It also puts institutional responsibilities around fraud and market abuse into the broker regulations.
Brokers are required to establish systems and processes for the prevention, detection and reporting of fraud and market abuse, with requirements covering surveillance and the identification of suspicious activity.
The framework also includes a mechanism for dealing with mule accounts and requires a whistle-blower policy.
This is mostly invisible to a normal investor. You will not see a button labelled "fraud detection" in your trading app. The importance is in what happens behind the scenes when a pattern of activity looks abnormal.
One director must meet a residency requirement
The 2026 regulations also introduce governance requirements that do not have much to do with the investor's daily trading experience.
A stock broker must have at least one “designated director”, as that term is defined in regulation 2(1)(f), who stays in India for at least 182 days during the financial year. Depending on the broker’s legal form, this may be a director, managing/designated partner, proprietor or another person specified by SEBI. Existing brokers were given six months from notification to comply.
What did not suddenly become new in 2026
This is the section worth reading carefully, because it prevents the new rulebook from creating a false impression.
Several major investor protections were already in force through earlier SEBI circulars and frameworks. Client-fund segregation, upstreaming of client funds, pledge and re-pledge arrangements, cyber security requirements and participation in grievance-redressal systems did not wait until January 2026 to appear.
The 2026 regulations consolidate many of these duties into the principal regulation while also adding genuinely new obligations in areas such as record retention, governance and formal fraud and market-abuse systems.
That means the right question is not "What did SEBI ban or introduce yesterday?" It is "What does the broker framework now require, and which parts actually changed?"
What you should notice as a client
Most of the 2026 regulations are not new investing features. They make the broker's responsibilities more explicit and, in some areas, more demanding.
Three things are especially relevant.
First, complaints have a defined 21-calendar-day redressal obligation.
Second, the broker has formal responsibilities for compliance, records, cyber resilience and the protection of client assets.
Third, the broker is expected to have systems for detecting and reporting certain forms of fraud and market abuse rather than treating them as somebody else's problem.
The rest is largely governance and regulatory plumbing. That plumbing matters, but you do not need to understand every regulation number to be a careful investor.
A simple way to read broker rule changes
Whenever you read that SEBI has introduced a "new rule for brokers", ask three questions.
Is it genuinely new? Check whether the same obligation already existed in a circular, master circular or exchange requirement.
Does it affect me directly? Complaint timelines and client-asset protections do. A residency requirement for a director generally does not.
What can I do with the information? That is the most important test. A rule is useful to a retail investor when it changes what they can expect, what they can check, or where they can complain.
Common questions
Did the 2026 rules completely replace the old broker system?
Yes. The SEBI (Stock Brokers) Regulations, 2026 replaced the 1992 regulations as the principal broker regulations. But many requirements carried forward from the old framework or from earlier SEBI circulars, so not everything in the new book is a new obligation.
How quickly must a broker resolve my complaint?
The 2026 regulations require a stock broker to take adequate steps to redress an investor grievance within 21 calendar days of receiving it. Further escalation routes can apply.
Does eight-year record keeping mean my broker stores everything for eight years?
No. The regulation applies the eight-year minimum to the books of account and records covered by the specified record-keeping requirements. It is not a blanket statement that every item of client data must be stored for eight years.
Are client-fund segregation rules new in 2026?
The protection itself predates the 2026 regulations. The new regulations consolidate and codify obligations that were already imposed through SEBI's earlier regulatory framework and circulars.
What does cyber resilience mean for me?
It means the broker has regulatory obligations around the resilience and security of its systems. It does not guarantee that its app can never fail.
What happened to the IRRA platform?
SEBI discontinued the Investor Risk Reduction Access platform with effect from 7 May 2026. SEBI said that other business-continuity and contingency measures had made the platform structurally redundant.
Does the new framework stop brokers from making mistakes?
No. Regulation creates duties, controls and escalation mechanisms. It cannot eliminate operational errors, outages, fraud or market risk.
Can I see whether my broker follows these rules?
For some obligations, yes. Investor disclosures, complaint information, grievance contacts and certain policies should be available through the broker's website or other prescribed channels. Other requirements, such as surveillance controls and internal cyber processes, are primarily matters for the regulator and the broker to demonstrate through supervision.
What should I do if my complaint is not resolved?
Keep the complaint reference and the broker's response or lack of response. If the matter is not resolved through the broker's process, you can use the applicable escalation routes, including SEBI's SCORES system and the securities-market online dispute resolution mechanism.
What changed underneath
The most important change in 2026 is not a new button inside your broker's app. It is a more consolidated regulatory framework for the organisation behind the app.
Some requirements are genuinely new. The eight-year record-retention period is one example. Formal fraud and market-abuse systems and the whistle-blower requirement are others. Some other protections are older requirements that have now been brought into the main broker regulations.
That distinction is worth remembering whenever you read a headline about "new broker rules". The useful question is not how dramatic the announcement sounds. It is what your broker is now required to do, what was already required before, and what you can actually check as an investor.
Risk disclosure
Hem Finlease Private Limited, SEBI Registration No. INZ000167734. Hem Securities Limited, SEBI Reg. No. IN-DP-568-2021, CDSL: 17700/17701.
Investments in the securities market are subject to market risks. Read all the related documents carefully before investing. Registration granted by SEBI and membership of recognised stock exchanges do not guarantee the performance of the intermediary or provide any assurance of returns to investors.
All Topics
