How to Assess Structural Risk Before Committing a Distribution Line to India

Q: How should operators price India structural risk when the country's macro narrative is favorable?

The brief scores India B2B as *Commission Conditionally* — structural risk has been mispriced downward because the macro narrative has been favorable for a decade. The five-dimension framework identifies which structural risks the macro narrative masks: dispute resolution has grown slower and more expensive not faster, capital flow rules have modernized but still carry sector-specific friction, and regulatory posture toward foreign operators varies materially by state rather than by federal-level signal. Operators pricing India off headline growth data are typically under-pricing the friction cost of actually operating there. The brief specifies where friction cost is worth accepting and where it is disqualifying.

Request a brief

Home

Library

How to Assess Structural Risk Before Committing a Distribution Line to India

India's structural B2B risk profile changed materially in 2025-2026 — the retrospective tax regime shifts, GST enforcement acceleration, and the new data localisation rules under the Digital Personal Data Protection Act. This brief scores four operator postures — CONTINUE, MONITOR, DE-RISK, EXIT — against sector-specific risk, and identifies which sectors carry the highest structural risk premium. Written for mid-market operators evaluating first entry, expansion, or exposure adjustment in the current window.

Brief #05

Aug 2026

15 min read

Download PDF

MAALAT · PROBLEM BRIEF #05

India B2B Structural Risk

The four choke points every foreign operator must score before engaging
India in 2026

+-----------------------------------------------------------------------+

AT A GLANCE
Four choke points. Thirty-one scored dimensions. Four override
triggers across two tiers. One 0.0--5.0 composite that tells a
foreign B2B operator whether an India engagement is workable,
marginal, or structurally unsafe as of July 25, 2026.

India in 2026 is not a repeat of China in 2026. Entry risk has
fallen: PN3 was recalibrated by PN2, insurance FDI is 100% (Insurance
Laws Amendment Act 2025), GST rates are compressed, and 49 QCOs have
been withdrawn. Operational, personnel, and tax-characterisation risk
has not fallen. The Supreme Court applied GAAR to override a treaty
(15 January 2026), the Enforcement Directorate assessed a ₹184 crore
FEMA penalty on a media company (16 February 2026), Look-Out
Circulars still take 4--8 years to quash, and the Data Protection
Board has zero members. Score the tightening layer, not the opening
headline.

Written for CEOs, corporate-development leaders, and country managers
of foreign firms with existing India exposure or an active India
entry decision. Sector-agnostic.

+-----------------------------------------------------------------------+

Published by MAALAT Research Systems · July 25, 2026 · maalat.co

1. The recurring problem

A foreign operator has India exposure. It might be a wholly
foreign-owned enterprise in Chennai, a distributor network in the south,
a joint venture with an Indian promoter, a Mauritius holding company set
up seven years ago, or a services contract with an Indian buyer that
pays through the London branch. The exposure has run for years. In 2026
the paperwork underneath the exposure changes, and most of the change
points in the opposite direction from the headlines.

Entry risk fell. Press Note 3 (April 2020), which required government
approval for every land-border-country investment into India, was
replaced on 15 March 2026 by Press Note 2 (2026 Series) with a 10%
beneficial-ownership threshold and a promised 60-day expedited SOP.
Insurance FDI was raised to 100% via the Insurance Laws Amendment Act
2025 and the Foreign Investment Amendment Rules 2025 (announced in Union
Budget 2025-26). GST rates were compressed to a 5%/18%/40% structure at
the 56th Council on 3 September 2025. Forty-nine Quality Control Orders
were withdrawn since July 2025. Read the headlines and India looks
liberalised.

Exit risk, personnel risk, and tax-characterisation risk did not fall.
The Supreme Court applied the General Anti-Avoidance Rule to override
the India--Mauritius treaty on 15 January 2026 in Tiger Global,
converting a claimed 0% capital gains rate into a confirmed ₹967.52
crore tax demand on a ₹14,500 crore (~USD 1.6 billion) share transfer.
The Enforcement Directorate assessed ₹184 crore in FEMA penalty on ₹92
crore of inflows against PPK Newsclick on 16 February 2026, with
personal director liability. The DPDP Rules 2025 were notified on 13
November 2025 (G.S.R. 846(E)) under the DPDP Act 2023 (assented 11
August 2023) --- the Board is being seated (MeitY OM 6 May 2026 opened
applications for Chair plus 4 Members) but had zero appointed members as
of July 2026 and its constitutional challenge is next heard on 3 August

Look-Out Circulars against Indian directors and promoters are
being quashed by High Courts at a rate of roughly one every two months,
but the average time-to-quash sits at 4 to 8 years --- the population of
quashed LOCs the operator can point to is drawn from Indian nationals
(Kaka Overseas: Nitish and Yadavendra Roy; PPK Newsclick: Prannoy and
Radhika Roy; Parabolic Drugs; IFFCO/Indian Potash), and no reported
foreign-national LOC quashing has been located, meaning the relief
architecture is real but its precedent-fit for a foreign director
remains untested.

This is not one movement in two directions. It is a policy design:
liberalise the entry surface aggressively; hold or intensify enforcement
on operations, personnel, and structure. An operator who scores only the
entry surface will misprice the whole exposure. This brief scores
against the operational and enforcement layer, not the headline.

THE MEASURABLE STATE, JULY 2026

PN3 was replaced by PN2 (2026 Series) on 15 March 2026 with a 10%
beneficial-ownership threshold and a revised Standard Operating
Procedure on 4 May 2026 targeting 60-day expedited clearance ([[DPIIT
Press Note 2
(2026)]{.underline}](https://www.dpiit.gov.in/static/uploads/2026/03/b9da5830b052c2f2d788593e97d07c63.pdf)).
Observed reality remains 6--9 months per counsel ([[White &
Case]{.underline}](https://www.whitecase.com/insight-our-thinking/foreign-direct-investment-reviews-2026-india)).
Dixon--Vivo 51/49 JV was approved on 8 July 2026 under the new SOP
([Econiti]{.underline}).
The Supreme Court in Tiger Global (15 January 2026) held that GAAR
overrides the India--Mauritius DTAA Article 13(4) and that a Tax
Residency Certificate is not conclusive. The share transfer
consideration was ₹14,500 crore (~USD 1.6 billion) and the confirmed
tax demand is ₹967.52 crore ([[SC
judgment]{.underline}](https://api.sci.gov.in/supremecourt/2025/1251/1251_2025_7_1501_67552_Judgement_15-Jan-2026.pdf);
[[KPMG
analysis]{.underline}](https://kpmg.com/us/en/taxnewsflash/news/2026/01/tnf-india-gaar-applied-to-deny-capital-gains-exemption-for-indirect-share-transfer-under-mauritius-treaty-supreme-court-decision.html)).
The Mauritius Cabinet approved Protocol ratification on 17 July 2026;
India is not yet notified ([[Mauritius
PMO]{.underline}](https://pmo.govmu.org/CabinetDecision/2026/Final_Highlights_of_Cabinet_Meeting_Friday_17.07.2026.pdf)).
The Digital Personal Data Protection Rules 2025 were notified on 13
November 2025 (G.S.R. 846(E)). The Act is in force for machinery
provisions but substantive obligations are pushed to 13 May 2027.
The Data Protection Board of India has zero members as of July
2026; the constitutional challenge is next heard on 3 August 2026
before a three-judge bench ([[DPO Club
tracker]{.underline}](https://dpo-club.org/constitutionality-of-the-digital-personal-data-protection-act-2023);
[Judicio]{.underline}).
The enforceable layer today is the RBI 2018 payment-localisation
circular, not DPDP ([[RBI
FAQ]{.underline}](https://www.rbi.org.in/commonman/english/scripts/FAQs.aspx?Id=2995)).
The Enforcement Directorate assessed a ₹184 crore FEMA penalty on
PPK Newsclick on 16 February 2026 on ₹92 crore of inflows, including
personal director liability ([[ED press
release]{.underline}](https://www.enforcementdirectorate.gov.in/media/press-release-documents/016264fc-afc6-43b9-ae9d-cb42ace42317_Press%20Release%20PPK%20Newsclick-1622026%201.pdf)).
Chowgule Steamships director was summoned under FEMA on 5 June 2026
([ScanX]{.underline}).
Four Look-Out Circulars against Indian directors and promoters have
been quashed by High Courts in 8 months (Parabolic Drugs, IFFCO/Indian
Potash, USHERA Maria Ramesh, Kaka Overseas), with quashing time
typically 4--8 years ([[Lawyer
eNews]{.underline}](https://lawyerenews.com/legal_detail/mere-pendency-of-investigation-cannot-justify-a-look-out-circular-delhi-high-court-quashes-locs);
[[India
Today]{.underline}](https://www.indiatoday.in/india/story/bombay-high-court-quashes-unlawful-loc-kaka-overseas-directors-customs-evasion-2837958-2025-12-18)).
The 56th GST Council on 3 September 2025 restructured rates to
5%/18%/40% and the GST Appellate Tribunal became operational on 16
February 2026 with a filing deadline extended to 31 July 2026 ---
six days from this brief's as-of date ([[GSTAT
portal]{.underline}](https://www.gstat.gov.in/)). E-invoicing at the
₹5 crore threshold is live from 1 April 2026 ([[Sansa
Legal]{.underline}](https://www.sansalegal.com/post/gst-e-invoicing-april-2026-rs-5-crore-threshold-and-new-compliance-rules)).

These are not five independent trends. They are one integrated pattern:
entry is being liberalised, operational and personnel enforcement is
being intensified, and the two are running in parallel. An operator who
scores only the liberalisation side will underprice the exposure. An
operator who scores only the enforcement side will underprice the
opportunity. This brief scores both, and the ISRS is the single number
that forces both to be reconciled.

2. What "structural risk" means in this brief

Structural risk is not the same as country risk, political risk, or
market risk. It is a different thing, and it needs its own definition.

Country risk is the probability the country deteriorates in ways that
hurt any operator (macro instability, currency collapse, war). Political
risk is the probability a specific policy change hurts a specific
operator (expropriation, licence revocation). Market risk is the
probability the sector shrinks or a competitor wins.

Structural risk, in the MAALAT sense, is different. It is the
probability that the plumbing an operator relies on to do business ---
the licences, the data pipes, the corporate structure, the tax
characterisation, the payment rails --- stops functioning as advertised,
not because of a discretionary policy move, but because the underlying
legal architecture has changed and the operator did not track the
change.

Structural risk is what makes an engagement that worked in 2022
unworkable in 2026 even though nothing about the specific counterparty,
product, or market changed. The operator is running on old assumptions
about how the system works. In India, that is unusually likely: the same
six months that eased PN3, GST, and insurance FDI also produced Tiger
Global, PPK Newsclick, the DPDP Rules, and the SEBI SAST revaluation
deadline. Very few operators have reconciled all six.

THE FOUR CHOKE POINTS

MAALAT groups foreign B2B structural risk in India into four choke
points. Each one, by itself, is enough to stop the engagement. The four
in combination compound. A foreign operator who has not scored all four
is scoring incompletely.

Choke Point 1 --- Capital entry and ownership control. The right
to bring foreign capital into an Indian entity, to hold the equity
stake at the level the business case requires, to receive PLI
incentives on the promised timeline, and to close M&A without a
combination-review reversal.
Choke Point 2 --- Data, digital and personnel. The right to move
data out of India, to run cross-border HR and CRM systems, to keep
foreign executives operationally in country, and to not have a foreign
director lose passport control to an ED summons or a Look-Out
Circular.
Choke Point 3 --- Structure, tax and exit. The right to hold the
Indian entity through the chosen offshore chain, to receive the treaty
rate the offshore chain was built for, to exit at the price and speed
the business case assumed, and to complete an open offer or delisting
under the SEBI SAST framework as amended.
Choke Point 4 --- Indirect tax, trade and payment rails. The right
to know the GST classification of the goods and services being sold,
to complete a customs entry without a certificate-of-origin dispute,
to import without a Quality Control Order lock-out, and to move funds
cross-border without a payment-localisation or intermediary-services
surprise.

The remainder of this brief scores each choke point individually and
then aggregates the four into a single India Structural Risk Score.

3. The method, in one page

The MAALAT India Structural Risk Score (ISRS) is a two-layer rubric.
Each of the four choke points is scored 0.0--5.0 based on its own
weighted dimensions. The four composites are then weighted-averaged into
a single ISRS on the same 0.0--5.0 scale, which maps to one of five
bands. Four override triggers can floor the ISRS at 4.5
(prohibition-tier) or 3.5 (licence-tier) regardless of composite.

The ISRS is the India analogue of the China Structural Risk Score (CSRS,
Brief #04) with an identical 0.0--5.0 architecture. This is deliberate.
The two scores are designed to be read side by side by an operator with
exposure to both countries --- same scale, same bands, same override
logic. What differs is the dimensions and the weights: China's CP1
(export controls) is India's CP1 (capital entry); China's CP4 (payment
rails) is India's CP4 (indirect tax, trade and payment rails). India's
enforcement architecture --- ED, LOCs, PN2 approval discretion, GAAR
override --- sits inside CP2 and CP3, where China's equivalent
enforcement sits inside CP2 (data and personnel).

Choke-point weights

-------- ----------------------------- ------------ ---------------------------
# CHOKE POINT WEIGHT WHY THIS WEIGHT

1 Capital entry and ownership 30%** Highest surface area.
control** Touches every entry, every
JV, every PLI application,
every combination. PN2 SOP
and PLI enforcement are the
two live variables.

2 Data, digital and 25%** DPDP is largely pushed to
personnel** May 2027 but the
enforceable layer today is
FEMA/ED personal liability.
LOC pattern is the India
analogue of China exit-ban
risk.

3 Structure, tax and exit 25% Tiger Global put GAAR above
treaty. Mauritius Protocol
notification is imminent.
Every offshore holding
structure is exposed.

4 Indirect tax, trade and 20%** Rates fell; classification
payment rails** disputes did not.
Intermediary services fix
is live. QCOs still block
imports at line-item level.
-------- ----------------------------- ------------ ---------------------------

Bands

-------------- ----------------- ---------------------------------------
BAND COMPOSITE OPERATOR READING**
RANGE**

Low 0.0 -- 0.9 Engagement operates on stable ground.
Reassess annually.

Moderate 1.0 -- 1.9 Named exposures exist but do not
threaten viability. Track quarterly.

Elevated 2.0 -- 2.9 Structural mitigations required. Do not
add exposure. Rescore semi-annually.

High 3.0 -- 3.9 Active de-risking programme mandatory.
New investment decisions on hold.

Severe 4.0 -- 5.0 Structural exit or containment decision
on the table. Contain and unwind, not
optimise.
-------------- ----------------- ---------------------------------------

Scoring perimeter

Two analysts scoring the same operator will produce different ISRS
results if the perimeter is undefined. The canonical ISRS perimeter is:

The operator's own entity, plus any entity in which the operator
holds ≥50% equity or exercises equivalent control (voting rights,
board majority, contractual control), including any Indian wholly
owned subsidiary (WOS), JV, LLP, or branch office.
Any offshore holding company (Mauritius, Singapore, Netherlands, UAE)
in the chain between the ultimate parent and the Indian entity that
claims India treaty benefit or holds Indian securities.
Direct counterparties inside India above a materiality threshold the
operator sets in writing (typical thresholds: >10% of India revenue,
>10% of India COGS, single-source for a critical input, or any
counterparty in a regulated sector or holding a PLI/QCO exemption).
Tier-two counterparties only where a documented single-source
dependency exists (one supplier, one bank, one logistics provider).
Personnel with India nexus: any executive who has signed on behalf of
the entity, holds resident-director status under s.149(3) Companies
Act, has Indian residency, or holds Indian nationality, plus any
employee travelling to India on operator business.

The perimeter itself must be documented in the scoring worksheet. An
ISRS produced with an ambiguous perimeter is not defensible.

Rules of the rubric

Each dimension is scored 0.0--5.0 by the operator using the anchor
scale in the appendix. 0 = negligible exposure; 5 = disqualifying
exposure.
Composite of each choke point is a weighted average across its
dimensions. Half-up rounding to one decimal on the composite;
intermediate calculations remain full precision.
The canonical ISRS uses the 30/25/25/20 choke-point weights above.
Operators may run an internal "operator-adjusted ISRS" using
different weights that reflect their profile, but only the 30/25/25/20
result is the ISRS. Both may be reported side by side; the label must
be distinct.
Override triggers (Section 10) can floor the ISRS at 4.5
(prohibition-tier) or 3.5 (licence-tier) regardless of the weighted
composite. When multiple triggers fire, the highest floor applies.
Every score must cite the evidence supporting it. Dimensions scored
without cited evidence are tagged Indicative; more than three
Indicative dimensions in the same choke point invalidates the
composite for that point.
Correlation rule: a real-world fact may support multiple dimensions
where it creates distinct exposure mechanisms. The override is applied
after dimension scoring and is not an additional arithmetic increment.
When one event maps to more than one dimension, the score in each
dimension must cite the specific exposure mechanism it captures ---
not the underlying event.
N/A treatment: dimensions that structurally do not apply to the
operator (for example, CP4 dimension 5 for an operator with no OECD
Pillar Two footprint) are marked N/A and excluded. The remaining
dimension weights within that choke point are renormalised to sum to
100%.

4. Five-minute read --- state of the four choke points

For the reader with five minutes and no time for the full rubric: this
is the one-line state of each choke point as of July 25, 2026. Every
line here is expanded in Sections 5--8 with sources.

CP1 --- Capital entry and ownership control (30% weight)

PN3 (April 2020) was replaced by PN2 (2026 Series) on 15 March 2026
with a 10% beneficial-ownership threshold and a revised SOP promising
60-day clearance; observed reality is 6--9 months; Dixon--Vivo 51/49
cleared 8 July 2026.
Insurance FDI moved to 100% via the Insurance Laws Amendment Act 2025
and Foreign Investment Amendment Rules 2025; operational control (not
the FDI cap) is what is driving JV restructurings --- Allianz exit
€2.3bn (17 March 2025), Aviva 100% (9 July 2026), MetLife pursuing
majority.
PLI has disbursed ₹35,354 crore across 892 approvals by 31 March 2026;
Solar PV PLI is at zero disbursement against a ₹24,000 crore outlay; a
WTO panel was constituted on PLI in February 2026.
CCI has never prohibited a combination; the Amazon INR 202 crore
penalty was overturned on 27 May 2026 and the Grasim INR 301.61 crore
penalty was set aside on 5 May 2026 --- the combination-review path is
functional but reversible on appeal.

CP2 --- Data, digital and personnel (25% weight)

DPDP Rules 2025 were notified on 13 November 2025 (G.S.R. 846(E));
substantive obligations are pushed to 13 May 2027; the Data Protection
Board has zero members; the constitutional challenge is next heard on
3 August 2026.
The enforceable data layer today is the RBI 2018 payment-localisation
circular, not DPDP; DPDP penalties (₹250 crore ceiling) become
operationally real only when the Board is staffed.
The Enforcement Directorate assessed ₹184 crore FEMA penalty on PPK
Newsclick on 16 February 2026 on ₹92 crore of inflows with personal
director liability; Chowgule Steamships director was summoned on 5
June 2026; Indo-MIM was penalised for the resident-director
requirement on 9 March 2026.
Four Look-Out Circulars against Indian directors and promoters were
quashed by High Courts in 8 months (Parabolic Drugs, IFFCO/Indian
Potash, USHERA Maria Ramesh, Kaka Overseas); the average quashing time
remains 4--8 years, meaning the LOC itself, not the outcome, is the
operational risk.

CP3 --- Structure, tax and exit (25% weight)

The Supreme Court in Tiger Global (15 January 2026) applied GAAR to
override the India--Mauritius DTAA Article 13(4) on a ₹14,500 crore
(~USD 1.6bn) share transfer; TRC is no longer conclusive; confirmed
demand ₹967.52 crore.
Mauritius Cabinet approved Protocol ratification on 17 July 2026;
India's gazette notification is imminent and would insert PPT-style
denial into India's largest treaty-shopping route.
The Hyatt International ruling (24 July 2025) established
premises-and-disposal-driven Permanent Establishment; the
India--France Protocol was signed on 23 February 2026 (dividend WHT
revised to 5%/15%, MFN clause removed) but is not yet in force pending
ratification and gazette notification; buyback tax was abolished 1
October 2024 and buybacks are now taxed as dividend.
SEBI SAST amendment (2 January 2026, transition to 2 October 2026)
requires Independent Registered Valuer for open offers; the
merchant-banker valuation grandfather closes on 2 October 2026 and
reprices every in-flight listed-company acquisition.

CP4 --- Indirect tax, trade and payment rails (20% weight)

56th GST Council (3 September 2025) restructured rates to 5%/18%/40%;
the compensation cess expired 31 March 2026; the 57th Council has not
been convened in the 10 months since (no constitutional cadence rule
exists, but the Council's own practice has been more frequent); GSTAT
is operational with an appeal deadline of 31 July 2026.
§13(8)(b) IGST was omitted on 30 March 2026, fixing the intermediary
place-of-supply issue that had generated a ~₹30 billion dispute pool;
e-invoicing at ₹5 crore threshold went live on 1 April 2026.
49 Quality Control Orders were withdrawn since July 2025 (WTO
communication 8 January 2026); the DPIIT Transition Facilitation QCO
2026 was notified on 25 June 2026 but only Companies Act entities are
eligible --- a live carve-out.
India operates no autonomous sanctions regime; sanctions exposure is
transmitted through counterparty banks and FEMA; the enforceable layer
for foreign operators is the RBI 2018 localisation circular plus
counterparty-bank de-risking behaviour.

Aggregate read

The signal across all four is not that India has become harder. It is
that India has become bimodal: entry is genuinely easier and enforcement
is genuinely harder, and any operator whose India plan has not been
rescored since the January 2026 Budget cycle is operating on assumptions
that the last six months have invalidated in at least two choke points.

5. Choke Point 1 --- Capital entry and ownership control

The right to bring foreign capital into an Indian entity, to hold the
equity stake at the level the business case requires, to receive the
incentives that were part of the entry decision, and to complete an M&A
transaction without a combination-review reversal, sits at the
intersection of the DPIIT Foreign Investment Negative List, the FEMA
(NDI) Rules, Press Note 2 (2026 Series), the PLI schemes, and the
Competition Act 2002 as amended. Every one of these has moved materially
in the twelve months to July 2026, all in the same direction: entry has
been opened, but with a discretion overhang that keeps the effective
clearance timeline well above the promised one.

STATE OF PLAY, JULY 2026

DPIIT Press Note 2 of 2026 replaced PN3 on 15 March 2026 with a
10% beneficial-ownership threshold (down from the earlier "any share,
ownership or beneficial interest" test) and a revised Standard
Operating Procedure on 4 May 2026 targeting a 60-day expedited
timeline through NSWS ([[DPIIT PN2
(2026)]{.underline}](https://www.dpiit.gov.in/static/uploads/2026/03/b9da5830b052c2f2d788593e97d07c63.pdf);
[[Luthra
SOP]{.underline}](https://luthra.com/wp-content/uploads/2026/06/Update-SOP-2026-PN2-22.05.2026.pdf)).
White & Case reports observed clearance at 6--9 months against the
SOP's 60 days ([[White & Case FDI Reviews
2026]{.underline}](https://www.whitecase.com/insight-our-thinking/foreign-direct-investment-reviews-2026-india)).
The Cabinet approved a Land-Border-Country FDI easing package on 10
March 2026; DPIIT clarified two days later that the easing does not
extend to Chinese firms
([PIB]{.underline};
[[Business
Standard]{.underline}](https://www.business-standard.com/economy/news/govt-clarifies-fdi-easing-not-meant-for-chinese-firms-126031101315_1.html)).
The Dixon--Vivo 51/49 JV was approved on 8 July 2026 under the new
SOP
([Econiti]{.underline}).
Seven sectors were fast-tracked for China FDI on 1 May 2026 ([[New
Indian
Express]{.underline}](https://www.newindianexpress.com/india/2026/May/01/fast-track-nod-for-china-fdi-in-seven-sectors)).
Insurance FDI moved to 100% in the February 2026 Budget cycle
([PIB]{.underline}).
Aviva took full control of Aviva Life Insurance on 9 July 2026 ([[ET
BFSI]{.underline}](https://bfsi.economictimes.indiatimes.com/articles/aviva-seizes-full-control-of-aviva-life-insurance-by-acquiring-remaining-stake-from-dabur/132283512));
Allianz announced exit from its India JVs on 17 March 2025 for €2.3
billion
([Reuters]{.underline}).
Livemint reports that operational control, not the FDI cap, is driving
the wave of insurance M&A
([Livemint]{.underline}).
PLI schemes have disbursed ₹35,354 crore across 892 approvals as
of 31 March 2026 ([[ET
Manufacturing]{.underline}](https://manufacturing.economictimes.indiatimes.com/amp/news/industry/indias-pli-schemes-drive-35354-crore-in-disbursements-and-240-lakh-crore-investments/132604380)).
Solar PV PLI is at zero disbursement against a ₹24,000 crore
outlay because projects await post-commissioning eligibility
([[Energetica
India]{.underline}](https://www.energetica-india.net/news/-inr-24000-cr-solar-pli-scheme-sees-zero-disbursal-as-projects-await-post-commissioning-eligibility)).
A WTO panel on PLI was constituted in February 2026
([Carnegie]{.underline}).
The Competition Commission of India has never prohibited a
combination; both the Amazon INR 202 crore gun-jumping penalty
(overturned on 27 May 2026) and the Grasim INR 301.61 crore
penalty (set aside on 5 May 2026) demonstrate that even confirmed
penalties are reversible on appeal
([LiveLaw]{.underline};
[Trilegal]{.underline}).
The 10 September 2024 deal-value threshold added a filing trigger for
tech-heavy acquisitions ([[Morgan
Lewis]{.underline}](https://www.morganlewis.com/pubs/2024/09/competition-commission-of-india-provides-updated-deal-value-threshold)).
MCA strike-off pattern: 2,03,107 companies over six years, with
MCA findings shared with the Enforcement Directorate, Income Tax, and
GST --- meaning a foreign parent holding a dormant Indian subsidiary
can trigger a coordinated enforcement footprint by failing to file
rather than by doing anything ([[CNBC
TV18]{.underline}](https://www.cnbctv18.com/business/companies/government-imposed-penalties-totalling-rs-55-crore-on-703-companies-for-non-compliance-with-companies-law-19845916.htm);
[TaxGuru]{.underline}).
C-PACE now offers 70--90 day exits for defunct entities ([[Business
Standard]{.underline}](https://www.business-standard.com/india-news/corporate-exits-now-happening-in-70-90-days-under-c-pace-says-govt-in-ls-124112700791_1.html)).

Dimensions and weights

-------- --------------------------- ------------ ----------------------------------
# DIMENSION WEIGHT WHAT AN OPERATOR IS SCORING

1 PN2 / land-border-country 15%** Beneficial-ownership chain
exposure** touching China, Pakistan,
Bangladesh, Nepal, Bhutan,
Myanmar, Afghanistan at ≥10%. SOP
timeline exposure: 60 days
promised, 6--9 months observed.

2 Sectoral cap and 15%** Sector still requires government
approval-route exposure** route or capped equity (defence
74%/100%, insurance now 100%,
print media, satellite, atomic
minerals). Discretion in approval
is the binding constraint.

3 Ownership control vs de 15%** Insurance-M&A pattern: FDI cap
facto control gap** eased but operational control
drives restructuring. Same dynamic
in defence, retail multi-brand,
single-brand retail with 30% local
sourcing.

4 PLI eligibility, 15%** PLI outlay committed vs disbursed
disbursement and clawback (Solar PV ₹24,000 crore at zero;
exposure** auto distortion). WTO panel
exposure.
Post-commissioning-eligibility
trap. Conditionality by
non-payment.

5 CCI combination-review 10%** Deal-value threshold (10 Sep 2024)
exposure** plus gun-jumping penalty exposure
(Amazon 202 crore overturned;
Grasim 301.61 crore set aside).
Green-channel eligibility test.

6 MCA/RoC compliance and 10%** Dormant subsidiary, missed annual
strike-off exposure** filing, resident-director gap
(Indo-MIM precedent). MCA findings
shared with ED/IT/GST creates
cross-agency escalation risk.

7 ECB and cross-border 10%** FEMA (Borrowing and Lending) First
borrowing exposure** Amendment Regulations 2026
streamlined ECB framework; RBI
NBFC Amendment Directions 2026 (5
May 2026) apply to NBFC
subsidiaries; PRAVAAH
deregistration deadline 31 Dec
2026.

8 Insurance/BFSI-specific 10%** For BFSI operators: 100% FDI
structural exposure** insurance is live but IRDAI
conditions (surplus repatriation,
Indian ownership of key management
personnel) can bind harder than
the FDI cap.
-------- --------------------------- ------------ ----------------------------------

How to score it

An electronics manufacturer with a Chinese JV partner on the buy-side
scores high on dimension 1 (PN2 exposure) even after the 15 March 2026
replacement of PN3, because the 60-day SOP is aspirational and the
observed timeline still runs to two quarters. A pharmaceutical company
with a wholly foreign-owned enterprise in a non-restricted sector scores
near zero on dimensions 1--3 but should score dimension 4 (PLI)
carefully if it participated in the pharmaceutical PLI, because
disbursement lag and post-commissioning eligibility are the binding
operational risks. A financial-services entrant post-100%-FDI scores low
on dimension 8 nominally but should score dimension 3 (operational
control gap) high, because IRDAI's de facto conditions do not track the
FDI cap.

The rule of thumb: dimensions 1--3 measure who can legally own what.
Dimensions 4--5 measure whether the deal-level economics survive the
incentive and combination-review layers. Dimensions 6--8 measure whether
the operator can maintain the entity and its capital structure in good
standing without a cross-agency escalation event.

6. Choke Point 2 --- Data, digital and personnel

The right to move data out of India, to run cross-border HR and CRM
systems, to keep foreign executives operationally in country, and to not
have a foreign director lose passport control to an Enforcement
Directorate summons or a Look-Out Circular, sits at the intersection of
the Digital Personal Data Protection Act 2023, the RBI 2018
payment-localisation circular, the Foreign Exchange Management Act as
enforced by ED, the Companies Act 2013 s.149(3) resident-director
requirement, and Look-Out Circular practice as clarified by four High
Court quashings in 8 months. The DPDP is the future layer. FEMA/ED and
LOC are the present layer.

STATE OF PLAY, JULY 2026

The DPDP Rules 2025 were notified on 13 November 2025 (G.S.R.
846(E)) in three phases: machinery from November 2025, consent-manager
registration from 13/14 November 2026, and substantive obligations
from 13 May 2027. Penalties reach ₹250 crore
([PIB]{.underline};
[[Judicio
tracker]{.underline}](https://judicio.ai/blogs/india-dpdp-act-enforcement-tracker);
[[Recording
Law]{.underline}](https://www.recordinglaw.com/world-laws/world-data-privacy-laws/india-data-privacy-laws/dpdp-act-implementation-status/)).
The Data Protection Board of India has zero members as of July
2026; MeitY circular F.No.2(1)/2026-Pers.I invited applications on 6
May 2026 ([[MeitY
circular]{.underline}](https://www.meity.gov.in/static/uploads/2026/05/cd481c027470b420b4cb85fb40a91c53.pdf)).
The DPDP Act constitutional challenge (5 consolidated petitions) is
next heard on 3 August 2026 before a three-judge bench; no interim
stay was granted ([[DPO Club
tracker]{.underline}](https://dpo-club.org/constitutionality-of-the-digital-personal-data-protection-act-2023);
[SCObserver]{.underline}).
Sources disagree on bench composition --- three-judge per DPO Club vs
five-judge per Naavi --- resolution expected at the August hearing
([Naavi]{.underline}).
The enforceable data layer today is the RBI 2018 payment-localisation
circular (all payment-system data storage in India only, foreign
copies for cross-border transactions permissible) ([[RBI
FAQ]{.underline}](https://www.rbi.org.in/commonman/english/scripts/FAQs.aspx?Id=2995)).
IT Rules 2026 amendments (in force 20 February 2026) reduced takedown
windows from 36 hours to 3 hours for certain categories ([[Khaitan
& Co]{.underline}](https://www.khaitanco.com/thought-leadership/MeitY-notifies-the-IT-Amendment-Rules-2026);
[Freshfields]{.underline}).
The Enforcement Directorate assessed ₹184 crore FEMA penalty on
PPK Newsclick on 16 February 2026 --- 2x the underlying inflows of ₹92
crore --- with named director liability ([[ED press
release]{.underline}](https://www.enforcementdirectorate.gov.in/media/press-release-documents/016264fc-afc6-43b9-ae9d-cb42ace42317_Press%20Release%20PPK%20Newsclick-1622026%201.pdf)).
FEMA has no statutory investigation deadline, requires pre-deposit
before appeal, and carries 3x penalty exposure with personal liability
([[L&S FEMA
guide]{.underline}](https://www.lkslaw.com/insights/articles/guide-to-investigation-adjudication-and-appeal-under-indian-foreign-exchange-law-1)).
Chowgule Steamships director was summoned on 5 June 2026
([ScanX]{.underline}).
Indo-MIM was penalised ₹6 lakh for resident-director requirement on 9
March 2026 ([[SAG
Infotech]{.underline}](https://blog.saginfotech.com/roc-penalises-indo-mim-limited-companies-act-resident-director)).
Four Look-Out Circulars against Indian directors and promoters were
quashed by High Courts in 8 months: **Parabolic Drugs, IFFCO/Indian
Potash, USHERA Maria Ramesh, Kaka Overseas** --- the Delhi and Bombay
High Courts held that mere pendency of investigation cannot justify an
LOC ([[Lawyer
eNews]{.underline}](https://lawyerenews.com/legal_detail/mere-pendency-of-investigation-cannot-justify-a-look-out-circular-delhi-high-court-quashes-locs);
[[India
Today]{.underline}](https://www.indiatoday.in/india/story/bombay-high-court-quashes-unlawful-loc-kaka-overseas-directors-customs-evasion-2837958-2025-12-18);
[[Maria Ramesh
order]{.underline}](https://indiankanoon.org/doc/126251031/)). Average
time-to-quash: 4--8 years, meaning the LOC itself is the operational
risk, not the outcome.

Dimensions and weights

-------- ----------------------- ------------ ----------------------------------
# DIMENSION WEIGHT WHAT AN OPERATOR IS SCORING

1 DPDP Act readiness 15%** Whether operator will be a Data
and SDF exposure** Fiduciary and/or Significant Data
Fiduciary; consent-manager
onboarding by 13 Nov 2026;
substantive obligations by 13 May
2027. Penalty ceiling ₹250 crore.

2 Cross-border 15%** Whether HR, CRM, group reporting
data-transfer route flow rely on DPDP §16 mechanism
dependency** (yet to be operationalised) or on
the RBI 2018 payment-localisation
circular (enforceable today).

3 IT Rules 2026 10%** 3-hour takedown for named
takedown-window categories; grievance appellate
exposure** committee jurisdiction;
intermediary safe-harbour
conditionality. Consumer-facing
and platform operators only.

4 FEMA/ED enforcement 15%** Historic inbound investments
exposure** defensible to FEMA;
capital-account transactions
properly documented; 3x penalty
exposure per PPK Newsclick
precedent; no statutory deadline
for ED investigation.

5 Look-Out Circular 15%** Foreign director signing on Indian
exposure on foreign entity, especially where any
directors** Indian counterparty has an
unresolved dispute, MCA/ED/IT
scrutiny, or a defaulted loan.
4--8 year time-to-quash.

6 Resident-director / 10%** s.149(3) Companies Act requires
KMP compliance** one director resident in India
≥182 days; Indo-MIM ₹6 lakh
precedent. Cross-agency escalation
if failure sits alongside
strike-off risk.

7 Employment-visa and 10%** Employment visa floor
FRRO exposure** US$25,000/year; FRRO registration
within 14 days for stays >180
days; renewal at year 5 requires
reset. Expat rotation and
executive travel planning depend
on this.

8 Personnel with dual 10%** OCI-holder in KMP role; potential
nationality / OCI DIN-deactivation exposure;
status** interaction with sanctions and PN2
discipline (no named 2025--26 case
but exposure surface exists).
-------- ----------------------- ------------ ----------------------------------

How to score it

A software vendor with no India entity but SaaS customers in India
scores low on dimensions 1--2 (no India-side data at rest) until DPDP
§16 is operationalised. A manufacturing WOS with expatriate directors
scores high on dimensions 5--6 by construction: every foreign director
on the Indian board is a potential LOC vector, and s.149(3)
resident-director compliance is a check every registrar runs. A
financial-services firm with cross-border data flows for HR, CRM, and
group reporting scores high on dimension 2 today (RBI 2018 circular is
enforceable) and will score high on dimension 1 from 13 May 2027 (DPDP
substantive obligations).

The rule of thumb: dimensions 1--3 measure standing data-and-digital
exposure. Dimensions 4--5 measure enforcement exposure to FEMA/ED/LOC
--- the India-specific personnel-risk cluster. Dimensions 6--8 measure
compliance-plumbing exposure, where the failure mode is usually a filing
missed rather than a policy violated.

7. Choke Point 3 --- Structure, tax and exit

The right to hold the Indian entity through the offshore chain that was
chosen at incorporation, to receive the treaty rate the chain was built
for, to exit at a price that reflects the underlying business rather
than a discounted merchant-banker valuation, and to complete an open
offer or delisting under the SEBI SAST framework as amended, sits at the
intersection of the Income Tax Act (as interpreted by the Supreme Court
in Tiger Global), the India--Mauritius DTAA and its pending Protocol,
the Foreign Exchange Management Act, the SEBI (SAST) Regulations 2011 as
amended in 2025, and the Companies Act 2013 s.230--232 for mergers. The
tax and treaty layer is where the sharpest 2026 movement occurred.

STATE OF PLAY, JULY 2026

The Supreme Court on 15 January 2026 held in AAR v. Tiger Global
International that GAAR overrides the India--Mauritius DTAA Article
13(4) capital gains exemption and that a Tax Residency Certificate is
not conclusive. The transaction was USD **1.6 billion (consideration
₹14,500 crore)**; the confirmed tax demand on Tiger Global is ₹967.52
crore, disallowing the India--Mauritius DTAA Article 13(4) exemption
([[SC
judgment]{.underline}](https://api.sci.gov.in/supremecourt/2025/1251/1251_2025_7_1501_67552_Judgement_15-Jan-2026.pdf);
[KPMG]{.underline};
[[EY India
alert]{.underline}](https://www.ey.com/content/dam/ey-unified-site/ey-com/en-in/alerts-hub/2026/01/supreme-court-of-india-rules-on-tax-treaty-eligibility-and-taxation-of-an-indirect-transfer-of-shares.pdf)).
The Mauritius Cabinet approved ratification of the India--Mauritius
Protocol on 17 July 2026 ([[Mauritius
PMO]{.underline}](https://pmo.govmu.org/CabinetDecision/2026/Final_Highlights_of_Cabinet_Meeting_Friday_17.07.2026.pdf);
[[EY
India]{.underline}](https://www.ey.com/en_in/technical/alerts-hub/2026/07/mauritian-cabinet-approves-ratification-of-protocol-to-india-mauritius-dtaa)).
India's gazette notification is imminent and will insert a Principal
Purpose Test into the treaty plus Article 3(2) offshore-probe powers
([[Economic
Times]{.underline}](https://economictimes.indiatimes.com/news/india/mauritius-tax-protocol-to-give-indian-taxman-more-powers-to-probe-offshore-entities/articleshow/132567143.cms)).
CBDT Circular 1/2025 continues to hold PPT prospective from the date
of notification ([[PwC
Mauritius]{.underline}](https://www.pwc.com/mu/en/services/tax/Taxtimes/india-treaty-ppt.html)).
The Hyatt International ruling (24 July 2025) established that
Permanent Establishment turns on premises and disposal power, not
headcount alone ([[SC
judgment]{.underline}](https://api.sci.gov.in/supremecourt/2024/9277/9277_2024_9_1502_62468_Judgement_24-Jul-2025.pdf);
[L&S]{.underline}).
The India--France Protocol signed 23 February 2026 revises the
dividend WHT to 5%/15% and removes the MFN clause, but is not yet in
force pending ratification and gazette notification
([Reuters]{.underline}).
Buyback tax under s.115QA was abolished on 1 October 2024; buybacks
are now taxed as dividend in the shareholder's hands ([[Catalyse
Advisory]{.underline}](https://catalyseadvisory.com/section-115qa-amendments-finance-act-2024/)).
The SEBI SAST amendment (effective 2 January 2026, transition to
2 October 2026) requires open-offer valuations to use Independent
Registered Valuers rather than merchant bankers, and grandfathering
closes on 2 October 2026
([LawSikho]{.underline};
[[Beacon
Filing]{.underline}](https://beaconfiling.com/blog/sebi-takeover-code-open-offer-foreign-buyers)).
SEBI announced a delisting-framework review on 12 June 2026
([Reuters]{.underline}).
Transnational issue estoppel in PE/VC exits was affirmed by the SC in
Nagaraj V. Mylandla (2026 INSC 298) ([[Cyril
Amarchand]{.underline}](https://disputeresolution.cyrilamarchandblogs.com/2026/05/finality-in-pe-vc-exits-across-borders-sc-endorses-transnational-issue-estoppel/)).
Insurance JV restructurings dominate the 2026 M&A tape: Aviva 100% (9
July 2026), Allianz exit €2.3bn (17 March 2025), Prudential/Bharti
AXA, QBE 100%, MetLife pursuing majority ([[ET BFSI
Aviva]{.underline}](https://bfsi.economictimes.indiatimes.com/articles/aviva-seizes-full-control-of-aviva-life-insurance-by-acquiring-remaining-stake-from-dabur/132283512);
[[Reuters
Allianz]{.underline}](https://www.reuters.com/business/finance/allianz-sell-26-stakes-india-joint-ventures-28-billion-2025-03-17/);
[Livemint]{.underline}).
Vodafone Idea is a capital-structure distress case (AGR/spectrum), not
an exit failure --- the Central Government stake rose to 48.99% in
April 2025 via a ~₹36,950 crore equity conversion of statutory dues,
and AGR dues were reassessed to ₹64,046 crore on 30 April 2026; the
actual exit-precedent for foreign shareholders remains Vodafone
International Holdings v Union of India (SC 2012) on indirect
transfer, now overlaid by Tiger Global ([[New Indian
Express]{.underline}](https://www.newindianexpress.com/business/2026/Apr/30/vodafone-ideas-agr-dues-cut-to-rs-64046-crore-after-dot-reassessment)).
IVCA reports 75 disputed exits out of 500 attempted, with a 4.7-year
average.

Dimensions and weights

-------- ----------------------- ------------ ----------------------------------
# DIMENSION WEIGHT WHAT AN OPERATOR IS SCORING

1 Offshore holding 20%** Mauritius, Singapore, Netherlands,
chain / GAAR exposure** UAE holding of Indian securities;
substance thickness; TRC-only
defensibility; post-Tiger Global
exposure to GAAR override of
treaty.

2 India--Mauritius 15%** Whether an in-flight exit relies
Protocol notification on the pre-Protocol treaty
exposure** position. Notification (imminent
Aug--Nov 2026) triggers PPT and
Article 3(2) offshore-probe
powers.

3 Permanent 10%** Hyatt International doctrine ---
Establishment premises + disposal power. Applies
exposure** to any liaison office, branch,
seconded personnel, or service
contract with regular India
presence.

4 Dividend, buyback and 10%** Dividend WHT 20.8--21.84% or
repatriation exposure** treaty; India--France Protocol
5%/15% signed 23 Feb 2026; buyback
tax abolished (now taxed as
dividend); MFN clause exposure per
Nestle.

5 Indirect transfer / 10%** Post-Tiger Global, indirect
s.9 exposure** transfer of Indian assets through
offshore share transfer is
chargeable; withholding obligation
on transferee; substance defence
is now GAAR-testable.

6 SEBI SAST open-offer 10%** Listed-company acquisitions in
/ valuation exposure** flight before 2 Oct 2026
grandfather closure; IRV
requirement repricing valuations;
open-offer trigger thresholds and
timeline.

7 Delisting / exit 15%** SEBI Delisting Regulations 2021
friction exposure** (last amended 3 Sep 2025) reverse
book-building; SEBI
delisting-framework review
announced 12 Jun 2026; PE/VC exit
dispute rate 15%.

8 JV governance and 10%** Indian JV partner; PSU-linked
dispute-resolution partner (only if defence/energy);
exposure** insurance-JV pattern (operational
control drives restructuring);
s.230--232 merger tribunal risk.
-------- ----------------------- ------------ ----------------------------------

How to score it

A private-equity fund holding an Indian portfolio company through a
Mauritius vehicle scores at the top of the scale on dimension 1 by
construction: Tiger Global made the Mauritius shell without substance a
scorable exposure, not a hypothetical one. A strategic operator with a
direct home-country parent holding a WOS scores near zero on dimension 1
but should score dimension 3 (PE) carefully if it has seconded personnel
or a liaison office. A listed-company acquirer with an open offer in
flight scores high on dimension 6 by 2 October 2026 by construction,
because the valuation grandfather closes.

The rule of thumb: dimensions 1--2 measure whether the offshore holding
structure survives the GAAR-plus-Protocol regime. Dimensions 3--5
measure whether the operator can be taxed on activity or a share
transfer at rates other than expected. Dimensions 6--8 measure whether
the operator can complete an exit at the expected price and speed.

8. Choke Point 4 --- Indirect tax, trade and payment rails

The right to know the GST classification of the goods and services being
sold, to complete a customs entry without a certificate-of-origin
dispute, to import without a Quality Control Order lock-out, to bring
OECD Pillar Two into scope without a domestic-minimum-top-up surprise,
and to move funds cross-border without a payment-localisation or
intermediary-services surprise, sits at the intersection of the CGST Act
as reshaped by the 56th GST Council, the Customs Act with CAROTAR 2020,
the BIS QCO regime as reduced in the July 2025--July 2026 window, the
India AS-22 Pillar Two amendment, and RBI cross-border payment
governance under FEMA. India operates no autonomous sanctions regime;
sanctions exposure is transmitted through counterparty banks and FEMA.

STATE OF PLAY, JULY 2026

The 56th GST Council on 3 September 2025 restructured GST rates to
a 5% / 18% / 40% structure
([PIB]{.underline};
[[TaxTMI
analysis]{.underline}](https://www.taxtmi.com/article/detailed?id=15095)).
The compensation cess expired 31 March 2026. The 57th Council has not
been convened in the 10 months to July 2026 (Article 279A does not
prescribe a cadence, but the Council's own practice has been more
frequent); the Health & Clean Energy Cess replacement is unresolved
([[GST
Registration]{.underline}](https://gstregistration.co/blog/57th-gst-council-meeting-2026)).
GSTAT (Goods and Services Tax Appellate Tribunal) became operational
on 16 February 2026; s.112 CGST appeal-filing deadline was extended to
31 July 2026 --- six days after this brief's as-of date. Missing
that window closes the ordinary filing window; Section 112(6) CGST
permits condonation for up to 3 additional months on sufficient cause
--- the appellate route is not extinguished but ordinary access to it
is ([GSTAT portal]{.underline};
[TaxGuru]{.underline}).
E-invoicing at the ₹5 crore AATO threshold went live on 1 April
2026 ([[Sansa
Legal]{.underline}](https://www.sansalegal.com/post/gst-e-invoicing-april-2026-rs-5-crore-threshold-and-new-compliance-rules)).
Section 13(8)(b) IGST was omitted on 30 March 2026, fixing the
intermediary place-of-supply issue that had generated a ~₹30 billion
dispute pool
([TaxGuru]{.underline};
[[Rödl &
Partner]{.underline}](https://www.roedl.com/en/insights/budget-2026-amendment-intermediary-service-stand-now/)).
India told the WTO on 8 January 2026 that it had withdrawn **49
Quality Control Orders** since July 2025 ([[Livemint
WTO]{.underline}](https://www.livemint.com/news/india/india-quality-control-orders-withdrawn-msme-compliance-boost-industry-11767961105061.html)).
DPIIT notified the Transition Facilitation (Quality Control) Order
2026 on 25 June 2026 for MSME compliance relief, but only Companies
Act entities are eligible
([PIB]{.underline};
[[BusinessWorld
GTRI]{.underline}](https://www.businessworld.in/article/dpiit-s-new-qco-framework-needs-clear-rules-to-avoid-fresh-bottlenecks-gtri-612448)).
Fourteen polymer and textile QCOs were rescinded on 12 November 2025
([Cogoport]{.underline}).
Budget 2026 retained 22 customs exemptions out of the original 102 and
extended the cloud-tax holiday to 2047 ([[Budget tax
booklet]{.underline}](https://www.indiabudget.gov.in/doc/taxreform.pdf);
[[BDO
India]{.underline}](https://www.bdo.in/en-gb/insights/alerts-updates/customs-duty-rate-chart-2026)).
AS-22 was amended in 2026 for Pillar Two disclosure only; an enacted
Indian IIR/UTPR has not been confirmed. Mauritius approved QDMTT 2026
on 17 July 2026 ([[India
Briefing]{.underline}](https://www.india-briefing.com/news/india-as22-amendment-2026-oecd-pillar-two-tax-accounting-43420.html/)).
India operates no autonomous sanctions regime. Sanctions exposure to
Russia/Iran is transmitted through counterparty banks and FEMA. The
EU--India Security and Defence Partnership was signed 27 January 2026
and a 10-year defence framework was signed with the United States in
Kuala Lumpur in October 2025
([PIB]{.underline}).
US--India trade friction is visible in the November 2025
USTR-referenced input-cost/tariff pressure ([[New Indian
Express]{.underline}](https://www.newindianexpress.com/amp/story/business/2025/Nov/20/govt-goes-soft-on-quality-control-measures-as-industry-faces-high-input-cost-us-tariff)).

Dimensions and weights

-------- ----------------------- ------------ ----------------------------------
# DIMENSION WEIGHT WHAT AN OPERATOR IS SCORING

1 GST classification 20%** Product/service sits in an
and rate exposure** anomalous slab after the
5%/18%/40% restructure; inverted
duty structure exposure;
classification disputes with tax
officers pending appeal.

2 GSTAT appellate and 15%** Pre-April 2026 dispute pool; s.112
compliance exposure** CGST appeal-filing readiness by 31
July 2026; e-invoicing compliance
at ₹5 crore threshold from 1 April
2026.

3 CAROTAR / customs 15%** FTA-preference imports; importer
origin exposure** bears origin proof; 5-year
retention; 10-working-day
response; 45-day verification. No
named 2025--26 origin-denial case
fetched but exposure is
procedural.

4 QCO / BIS 15%** Imports subject to remaining QCOs;
import-block exposure** DPIIT Transition Facilitation QCO
2026 eligibility (Companies Act
only); pending 22 exemptions in
customs.

5 OECD Pillar Two / 10%** Global group ≥€750m revenue with
Global Minimum Tax India entity; AS-22 disclosure
exposure** only in India today; Mauritius
QDMTT approved 17 Jul 2026 ---
Mauritius holding structures now
face QDMTT.

6 Payment localisation 10%** RBI 2018 payment-system data
and cross-border storage rule; RBI approvals on
settlement** cross-border payments under FEMA;
ECB streamlining under FEMA
(Borrowing and Lending) 2026
Amendment.

7 Counterparty-bank 15%** Indian bank exposure to sanctioned
sanctions transmission Russian/Iranian counterparties;
exposure** India has no autonomous sanctions
regime but exposure transmits via
counterparty banks; FEMA machinery
captures the pass-through.
-------- ----------------------- ------------ ----------------------------------

How to score it

A manufacturer importing components under an FTA with a Southeast Asian
supplier scores high on dimension 3 (CAROTAR) even absent a named
origin-denial case, because origin-proof burden and verification
timelines are procedural. A pharmaceutical or telecom operator scores
high on dimension 4 (QCO) if the input list still touches a live QCO. A
global group with an Indian subsidiary above €750 million consolidated
revenue scores dimension 5 (Pillar Two) at Elevated by construction
because AS-22 disclosure is now required and QDMTT footprints in
Mauritius have arrived. A treasury operator running RMB or dollar
corridors through Indian correspondent banks scores dimension 7 based on
the specific Indian bank's Russia/Iran counterparty footprint, not on
India's sanctions posture (which does not exist).

The rule of thumb: dimensions 1--2 measure GST
compliance-and-classification exposure --- the largest single-cost line
in most India operations. Dimensions 3--4 measure trade-flow
interruption exposure (customs, QCO). Dimensions 5--7 measure the
specialised tax and cross-border transmission risks --- Pillar Two,
payment localisation, and secondary sanctions.

9. Aggregate: reading the ISRS score

The ISRS is the weighted average of the four choke-point composites
using the 30/25/25/20 weights. It sits on a 0.0--5.0 scale and maps to
one of five bands. A single number is not the point --- the number is a
summary of what an operator has actually scored underneath. But the
number is useful because it forces the operator to reduce a diffuse
"India is complicated" instinct into a defensible position that can be
tracked over time.

What each band means in practice

Low (0.0--0.9): An operator scoring here is either genuinely
low-exposure (small India footprint, sector-agnostic goods, no
offshore holding chain, no expatriate directors, INR-only invoicing)
or scoring optimistically. Rescore annually.
Moderate (1.0--1.9): Named exposures exist and are being managed.
No structural mitigations required beyond routine compliance
monitoring. Track quarterly.
Elevated (2.0--2.9): Structural mitigations required. This is the
band where an operator should stop adding exposure and start building
alternatives --- direct-shareholding restructure, second offshore
chain review, resident-director rotation, ED-defence readiness.
Rescore semi-annually.
High (3.0--3.9): Active de-risking programme mandatory. New
investment decisions on hold pending programme milestones. Board-level
visibility. Rescore quarterly.
Severe (4.0--5.0): Structural containment decision on the table.
The question is no longer how to optimise the India operation but how
to ring-fence exposure --- repatriate dividends before Protocol
notification, unwind the Mauritius chain, replace foreign directors
with resident directors, complete or cancel any in-flight open offer.
Weekly review cadence until the ISRS moves.

The aggregate as a directional signal

An ISRS of 2.4 is Elevated. So is an ISRS of 2.7. The difference between
them matters less than the delta from the previous score. An ISRS moving
from 2.4 to 2.9 in one quarter is more significant than an ISRS holding
steady at 3.2. The number's job is to force conversation about the
trend, not to fetishise the exact decimal.

Tracking cadence: an operator can only see the delta if the prior score
is captured. The scoring worksheet must freeze the perimeter, the 30
dimension scores, the four composites, the ISRS, and any
override-trigger state at each read. The band determines the minimum
cadence (annual at Low; quarterly at High; weekly at Severe), but
tracking cadence should not be looser than quarterly in any band above
Low.

Canonical ISRS vs operator-adjusted ISRS

The canonical ISRS uses the 30/25/25/20 choke-point weights and the
dimension weights published in this brief. Those weights reflect
MAALAT's reading of what has moved most in India over the twelve months
to July 2026 across all foreign B2B operators. Only a score using those
exact weights is the ISRS.

An operator whose sector or profile makes the canonical weights a poor
fit --- a PE fund that should weight CP3 higher, a manufacturing WOS
that should weight CP4 higher, a services firm that should weight CP1
lower --- may run a separate "operator-adjusted ISRS" using different
weights. Both scores can be reported, but the labels must be distinct.
Do not call an adjusted result the ISRS. The whole point of the
canonical score is comparability across operators, sectors, and time;
that comparability is destroyed the moment the weights become bespoke
and unlabelled.

Comparing ISRS to CSRS

An operator with exposure to both India and China should score both an
ISRS and a CSRS (Brief #04). The two scores use the same 0.0--5.0 scale
and the same bands. A CSRS of 3.5 and an ISRS of 2.5 both sit in the
same regime but describe different problems: the China exposure is
structurally in the High band with control-loss and export-control risk
driving; the India exposure is Elevated with tax-characterisation and
personnel-enforcement risk driving. The two are not additive --- an
operator with 40% of revenue in China at CSRS 3.5 and 20% in India at
ISRS 2.5 has a different overall risk profile than one with the reverse
--- but they are comparable in their component drivers.

10. Override triggers

Four named event families floor the ISRS regardless of the weighted
composite. Two floor at 4.5 (prohibition-tier). Two floor at 3.5
(licence-tier). The distinction matters because not every enforcement
event carries the same legal consequence: an OFAC SDN reaching an Indian
counterparty is a prohibition for US persons and a live
counterparty-bank derisking risk, while an ED summons is a licence-tier
event with civil rather than criminal weight (though it triggers
passport, travel, and Directorship consequences). Conflating them
overstates the score in one direction and understates it in the other.

Trigger A1 --- Prohibition-tier listing exposure (floor 4.5)

Any counterparty of the operator, within the scoring perimeter defined
in Section 3, appears on: OFAC SDN or any OFAC list carrying a full
transaction prohibition for US persons; an EU asset-freeze designation
carrying a full prohibition under the relevant regulation; or any
equivalent third-country full-prohibition list (UK OFSI, Japan
METI-designated, Canada SEMA) where the operator has jurisdictional
nexus. Composite floor 4.5.

Rationale: a full-prohibition designation converts a compliance question
into a strict legal bar. India's absence of an autonomous sanctions
regime does not diminish this trigger --- Indian banks derisk to protect
USD/EUR correspondent relationships regardless of Indian domestic law,
so the operational impact is transmitted through counterparty behaviour
even if not through Indian regulation.

Operational cadence when triggered: legal review within 5 business days;
correspondent-bank confirmation of counterparty derisking status within
10 business days; ring-fencing or unwind decision within 30 days; if the
unwind route is not viable, escalation to board within 60 days.

Trigger A2 --- India licence-tier enforcement exposure (floor 3.5)

Any of the following India-specific events touches a person within the
scoring perimeter in the last 12 months: (i) an active Look-Out Circular
against any current or former director, KMP, or promoter, whether stayed
or under challenge; (ii) an ED summons under FEMA or PMLA against the
operator, a subsidiary, or a current or former director, KMP, or officer
in personal capacity; (iii) a CBI or SFIO investigation reference
against the operator or an entity in the chain; (iv) a PN2 (2026)
refusal or unresolved query pending beyond 90 days for a
currently-material transaction; or (v) a PLI eligibility rejection or
clawback initiation. Composite floor 3.5.

Rationale: India licence-tier enforcement events are not automatic bars
but they materially raise the cost, timeline, and denial probability of
continuing operations. Scoring them as prohibition (4.5) overstates the
exposure; scoring them as zero understates it. The 3.5 floor captures
the operational reality: the operator is workable only through enhanced
controls that may or may not clear, and the personnel-under-duress and
control-loss risks compound if the event escalates.

Operational cadence when triggered: retained India counsel confirms
exposure characterisation within 5 business days; response strategy
within 30 days (writ petition to quash LOC if applicable;
pre-deposit-and-appeal if FEMA order; representation if PN2 delay); if
the event is not neutralised within 90 days, re-evaluate against Trigger
C (personnel duress) and Trigger B (control loss).

Trigger B --- Live control-loss (floor 4.5)

The operator's Indian subsidiary or JV has demonstrably taken
unilateral action on chops, common seal, board resolutions, bank
signatories, or payroll in the last 90 days without HQ authorisation; or
an Indian JV partner has refused to sign off on statutory filings,
dividend declarations, or exit-clause invocations. Composite floor 4.5.

Rationale: once operational control is contested at the Indian entity
level, every other structural safeguard weakens. Access to underlying
data becomes a fight. Cash movements slow or stop. MCA filings can be
updated without HQ knowledge. Under s.230--232 Companies Act,
tribunal-supervised restructuring becomes a JV partner's available
lever. This trigger is designed to catch the moment before a formal
shareholder-dispute filing, not after.

Operational cadence when triggered: retained Indian counsel and
independent auditor engaged within 5 business days; MCA-registered
signatory verification, bank signatory audit, and s.149(3)
resident-director-integrity check within 30 days; if control cannot be
re-established within 90 days, initiate SIAC or LCIA arbitration under
the JV agreement (or Indian company-law tribunal proceedings if
arbitration clause absent).

Trigger C --- Personnel-in-country under duress (floor 4.5)

Any current executive of the operator has: (i) a Look-Out Circular filed
against them at any airport, whether stayed or under challenge; (ii)
received an ED summons under FEMA/PMLA and been asked to appear in
person; (iii) had their passport impounded, whether by ED, IT, customs,
or magistrate; or (iv) had an FIR filed against them by any Indian party
in relation to the operator's Indian business. Composite floor 4.5.

Rationale: personnel risk in India is not a probability --- once an LOC
or ED summons materialises, it dominates every other consideration. The
PPK Newsclick pattern (₹184 crore FEMA penalty with named director
liability) and Chowgule Steamships (director summons June 2026) show
that the enforcement architecture is designed to put executives in
personal exposure. The Bombay and Delhi High Court quashings (Parabolic,
IFFCO, USHERA, Kaka Overseas) show relief is available but slow --- 4--8
years average. The correct posture once this trigger fires is to freeze
non-essential travel of any executive who has any exposure profile, not
just the affected individual.

Operational cadence when triggered: immediate travel-hold on all India
exposure for the affected executive and any co-signatory; retained
Indian criminal counsel and D&O policy activation within 24 hours;
embassy notification through the operator's home-country embassy in New
Delhi; writ petition to quash LOC filed within 30 days if not already
under challenge; parallel diplomatic track through home-country foreign
ministry commercial section.

11. Worked example --- NipKor Manufacturing KK (illustrative)

This worked example is a composite operator, not a real company. It
exists only to demonstrate the rubric end-to-end. The name, numbers, and
counterparty details are illustrative. The profile is a composite
Japanese-headquartered tier-1 industrial-equipment manufacturer with a
real market footprint (Chennai WOS plus Pune JV plus South India
distribution) --- the shape of the exposure map is representative of the
actual foreign B2B operator population in the current India market.

Operator profile

NipKor Manufacturing KK, headquartered in Yokohama, Japan. Publicly
listed on Tokyo Stock Exchange (Prime segment). JPY 320bn revenue
2025, JPY 62bn from India.
India footprint: one wholly owned subsidiary (WOS) in Chennai
producing industrial pumps and drives; one 51% joint venture in Pune
with an Indian promoter for heavy machinery assembly; distribution
network of six independent South India distributors covering
Karnataka, Tamil Nadu, Andhra Pradesh, Telangana, Kerala.
PLI status: participant in the Auto and Auto Component PLI scheme via
the Pune JV; approved for ₹450 crore over 5 years; ₹95 crore disbursed
to date.
Data profile: telemetry from installed base flows to Japan cloud
(Tokyo); no consumer PI; some "sensitive personal data" implications
from HR data of Indian employees flowing to the Japan HRIS.
Personnel: 480 employees in India, including one Japanese Managing
Director (Chennai) and one Japanese Head of Operations (Pune JV). The
Chennai WOS has one Indian resident director (former Tata group senior
manager). The Pune JV board has three seats to NipKor, three to the
Indian promoter.
Corporate chain: Yokohama parent → Netherlands holding (established
2017, holds Indian securities under India--Netherlands DTAA) → Chennai
WOS + Pune JV.
Payments: JPY invoicing for parent-related flows through MUFG Tokyo →
HDFC Bank Mumbai; USD invoicing for third-country customer flows
through Standard Chartered.
Enforcement history: one ED summons issued 5 June 2026 to the Chennai
WOS's former CFO regarding a 2023 ECB conversion under FEMA scrutiny;
matter unresolved as of 25 July 2026.
Scoring perimeter (documented): Yokohama parent + Netherlands
holding + Chennai WOS (100%) + Pune JV (51%) + six named distributors
(each >10% of respective product-line India revenue). Tier-two
suppliers excluded except two single-source vendors.

CP1 --- Capital entry and ownership control (composite target)

-------- --------------------------- ------------ ----------- ------------------------ -----------
# DIMENSION WEIGHT SCORE ANCHOR EVIDENCE CONF.

1 PN2 / land-border-country 15%** 1.0 Beneficial-ownership High
exposure** chain traces to Japan
only; no China,
Bangladesh, Nepal,
Bhutan, Myanmar,
Pakistan, Afghanistan
nexus at ≥10%. Clean.

2 Sectoral cap and 15%** 1.5 Manufacturing sector at High
approval-route exposure** 100% automatic route; no
restricted subcategory.
Not 0 because
auto-component sector
has PLI conditionalities
that touch de facto
approval discretion.

3 Ownership control vs de 15%** 3.0 Pune JV: NipKor holds Medium
facto control gap** 51% but 3-3 board with
politically-connected
Indian promoter. Two
documented disagreements
on capex allocation Q1
2026. Chennai WOS clean.

4 PLI eligibility, 15%** 3.0 Auto PLI approved ₹450 High
disbursement and clawback** cr; ₹95 cr disbursed;
21% disbursement rate
against approved outlay.
Above Solar (0%) but
below the ₹35,354 cr
aggregate disbursement
rate. Post-commissioning
eligibility unresolved
for Year 3 phase.

5 CCI combination-review 10%** 1.5 No pending combination High
exposure** filings. Any future
acquisition >₹2,000 cr
deal value would trigger
10 Sep 2024 threshold.
Amazon/Grasim reversal
pattern gives
directional comfort on
penalty appealability.

6 MCA/RoC compliance and 10%** 2.0 Chennai WOS and Pune JV High
strike-off exposure** filings current. One
dormant marketing
subsidiary (registered
2019, no operations) at
strike-off risk if 2027
return missed.
Resident-director in
place for both live
entities.

7 ECB and cross-border 10%** 3.5 ED summons of 5 Jun 2026 High
borrowing exposure** relates precisely to a
2023 ECB conversion.
FEMA (Borrowing and
Lending) 2026 amendment
aids future borrowings;
historic exposure not
covered. Active
enforcement vector.

8 Insurance/BFSI-specific 10%** N/A NipKor is not a BFSI High
structural exposure** operator; dimension
excluded per Appendix
N/A rule; remaining
weights renormalised.
-------- --------------------------- ------------ ----------- ------------------------ -----------

CP1 composite: dimension 8 is N/A; remaining weights renormalised from
90% base to 100% (each multiplied by 100/90 = 1.111). Weighted average =
(0.1667×1.0 + 0.1667×1.5 + 0.1667×3.0 + 0.1667×3.0 + 0.1111×1.5 +
0.1111×2.0 + 0.1111×3.5) = 2.194. Half-up rounded to 2.2. Band:
Elevated. The 3.5 on dimension 7 (ECB/FEMA enforcement) is the swing
driver.

CP2 --- Data, digital and personnel (composite target)

-------- ----------------------- ------------ ----------- -------------------------- -----------
# DIMENSION WEIGHT SCORE ANCHOR EVIDENCE CONF.

1 DPDP Act readiness 15%** 2.0 Data Fiduciary by High
and SDF exposure** construction (processes
employee PI). SDF
designation possible if
MeitY thresholds capture;
consent-manager onboarding
13 Nov 2026; substantive
obligations 13 May 2027.
Time to build; not yet
biting.

2 Cross-border 15%** 2.5 HR data flows to Tokyo Medium
data-transfer route HRIS; telemetry flows to
dependency** Tokyo cloud. Enforceable
layer today is RBI 2018
(does not apply --- no
payment-system data). DPDP
§16 not yet operational.
Interim exposure moderate.

3 IT Rules 2026 10%** 1.0 Not a platform, High
takedown-window intermediary, or
exposure** publisher; 3-hour takedown
windows do not apply to
industrial-manufacturing
operations.

4 FEMA/ED enforcement 15%** 4.0 Active ED summons (5 Jun High
exposure** 2026) on 2023 ECB matter.
Under PPK Newsclick
precedent, FEMA penalty
exposure at up to 3x the
alleged contravention
amount is possible, with
personal director
liability; the specific
NipKor underlying is
illustrative and not
scored to a monetary
quantum in this worked
example. Live enforcement,
not theoretical.

5 Look-Out Circular 15%** 3.0 Two Japanese executives Medium
exposure on foreign (Chennai MD, Pune HoO) are
directors** potential LOC vectors
given the active ED
matter. No LOC filed to
date; the ED matter has
not yet reached the
summons-non-appearance
threshold at which LOCs
are typically requested.

6 Resident-director / 10%** 1.5 s.149(3) resident director High
KMP compliance** in place at Chennai WOS
(Indian, ex-Tata). Pune JV
has Indian promoter
directors on board ---
resident-director
compliance clean. Dormant
marketing subsidiary is
the exposure.

7 Employment-visa and 10%** 2.0 Both Japanese executives High
FRRO exposure** on employment visa at
US$85,000 (well above
US$25,000 floor); FRRO
current. Renewal at Year 5
for MD due Q4 2026 ---
reset requires
re-application, not
extension.

8 Personnel with dual 10%** 1.0 No OCI-holder in KMP role. High
nationality / OCI Indian resident director
status** is native Indian; Japanese
executives are Japanese
nationals only. Clean.
-------- ----------------------- ------------ ----------- -------------------------- -----------

CP2 composite = 0.15×2.0 + 0.15×2.5 + 0.10×1.0 + 0.15×4.0 + 0.15×3.0 +
0.10×1.5 + 0.10×2.0 + 0.10×1.0 = 2.275. Half-up rounded to 2.3. Band:
Elevated. The 4.0 on dimension 4 (FEMA/ED) is the swing driver --- under
the ED-active state, the composite would drop to 1.8 (Moderate) if the
summons were withdrawn or the matter settled.

CP3 --- Structure, tax and exit (composite target)

-------- ----------------------- ------------ ----------- ------------------------ -----------
# DIMENSION WEIGHT SCORE ANCHOR EVIDENCE CONF.

1 Offshore holding 20%** 2.5 Netherlands holding Medium
chain / GAAR exposure** (2017) has one full-time
director + office in
Amsterdam; some
substance. Not Mauritius
shell (would be 4.5).
Not Tokyo-direct (would
be 1.0).
India--Netherlands DTAA
still favourable but
under GAAR post-Tiger
Global.

2 India--Mauritius 15%** 1.0 No Mauritius entity in High
Protocol notification chain. Netherlands
exposure** Protocol is separate and
long-standing (2013
amendment). Not exposed
to the imminent
India--Mauritius
Protocol notification.

3 Permanent 10%** 2.0 Chennai WOS is a full Medium
Establishment India entity, not a PE
exposure** vector for parent. Two
Japanese seconded
personnel in Pune JV
could constitute PE for
Yokohama parent under
Hyatt
premises-and-disposal
test if reviewed.
Secondment structure
documented, but not
tested.

4 Dividend, buyback and 10%** 2.0 India--Netherlands DTAA High
repatriation exposure** dividend WHT 10%; no MFN
clause dispute. Chennai
WOS declared no dividend
in 2024; Pune JV
declared ₹40 cr (₹20.4
cr to NipKor via
Netherlands).
Repatriated in 6 months
(moderate).

5 Indirect transfer / 10%** 3.0 Any future sale of Medium
s.9 exposure** NipKor Netherlands
shares would trigger s.9
indirect transfer
analysis. Tiger Global
raised the bar.
Netherlands substance is
thin relative to
Explanation 5 threshold;
would need reinforcement
before any transaction.

6 SEBI SAST open-offer 10%** 1.0 No listed-company High
/ valuation exposure** acquisitions in flight.
No SAST trigger applies.
Clean.

7 Delisting / exit 15%** 2.5 Chennai WOS exit follows Medium
friction exposure** the standard FEMA/RBI +
income-tax + MCA path
(wholly foreign-owned
--- direct
offshore-to-offshore
share transfer is
possible but chargeable
to Indian tax under s.9
post-Tiger Global). Pune
JV exit is contractually
tied to Indian promoter
consent and tag-along
under the SHA.

8 JV governance and 10%** 3.5 Pune JV: 3-3 board, Medium
dispute-resolution deadlock clause invokes
exposure** SIAC arbitration. Two
disagreements Q1 2026 on
capex. Indian promoter
is politically-connected
in Maharashtra. Deadlock
possible; escalation
vector real.
-------- ----------------------- ------------ ----------- ------------------------ -----------

CP3 composite = 0.20×2.5 + 0.15×1.0 + 0.10×2.0 + 0.10×2.0 + 0.10×3.0 +
0.10×1.0 + 0.15×2.5 + 0.10×3.5 = 2.175. Half-up rounded to 2.2. Band:
Elevated. The 3.5 on JV governance (dimension 8) reflects live deadlock
risk with the politically-connected promoter; the 3.0 on indirect
transfer reflects post-Tiger Global exposure that a hypothetical exit
would need to plan against.

CP4 --- Indirect tax, trade and payment rails (composite target)

-------- ----------------------- ------------ ----------- ------------------------ -----------
# DIMENSION WEIGHT SCORE ANCHOR EVIDENCE CONF.

1 GST classification 20%** 2.5 Industrial pumps and High
and rate exposure** drives classified at 18%
under revised structure;
one product-line
classification dispute
(pump-motor combination)
pending appeal at
Chennai GSTAT. ₹18 cr in
dispute.

2 GSTAT appellate and 15%** 3.0 Three pre-April 2026 High
compliance exposure** disputes to be filed at
GSTAT by 31 July 2026
(₹34 cr aggregate).
E-invoicing at ₹5 cr
threshold already
implemented Q2 2026;
compliance clean.

3 CAROTAR / customs 15%** 2.0 Japan is major supplier High
origin exposure** under India--Japan CEPA;
origin proof managed by
parent. No pending
origin-denial cases.
Verification response
window compliance sound.

4 QCO / BIS 15%** 2.0 Industrial motors and High
import-block exposure** drives touch two live
QCOs. DPIIT Transition
Facilitation QCO 2026
eligibility confirmed
(both entities are
Companies Act). Managed.

5 OECD Pillar Two / GMT 10%** 2.5 NipKor group at JPY Medium
exposure** 320bn (~€2bn) --- above
€750m threshold. AS-22
disclosure implemented
Q1 2026. Mauritius QDMTT
does not apply (no
Mauritius entity). Japan
CFC and India IIR
(unenacted) are
watchpoints.

6 Payment localisation 10%** 1.5 Cross-border settlements High
and cross-border clean via MUFG--HDFC and
settlement** Standard Chartered. No
payment-system data
touching Japan. ECB
streamlining under 2026
amendment aids future
capital-raises.

7 Counterparty-bank 15%** 1.5 HDFC and Standard High
sanctions transmission Chartered counterparty
exposure** relationships clean. No
Russia or Iran-adjacent
bank exposure. Japanese
parent has no
Russia/Iran counterparty
exposure at group level.
-------- ----------------------- ------------ ----------- ------------------------ -----------

CP4 composite = 0.20×2.5 + 0.15×3.0 + 0.15×2.0 + 0.15×2.0 + 0.10×2.5 +
0.10×1.5 + 0.15×1.5 = 2.175. Half-up rounded to 2.2. Band: Elevated. The
3.0 on GSTAT appellate readiness (dimension 2) is time-boxed: it drops
sharply once the 31 July 2026 filing deadline is met.

ISRS aggregate

------------------------- --------------- ------------ -----------------------
CHOKE POINT COMPOSITE WEIGHT CONTRIBUTION

CP1 Capital entry and 2.2 30%** 0.658
ownership**

CP2 Data, digital and 2.3 25%** 0.569
personnel**

CP3 Structure, tax and 2.2 25%** 0.544
exit**

CP4 Indirect tax, trade 2.2 20%** 0.435
and payment rails**

ISRS (canonical) 2.2 100% Elevated band
------------------------- --------------- ------------ -----------------------

Override triggers

Trigger A1 (prohibition-tier): Not fired. No SDN, EU asset-freeze, or
full-prohibition designation among current counterparties.
Trigger A2 (India licence-tier): Fired. Active ED summons (5
June 2026) to former CFO of Chennai WOS under FEMA scrutiny of a 2023
ECB conversion. Composite floor 3.5. Because the canonical ISRS of 2.2
is below the floor, the operative ISRS becomes 3.5.
Trigger B (control-loss): Not fired. Two Q1 2026 disagreements on
capex at Pune JV are captured in CP3 dimension 8 (governance) and CP1
dimension 3 (control gap), not at trigger level. Not yet
Nexperia-level unilateral action.
Trigger C (personnel-under-duress): Not fired. No LOC filed against
either Japanese executive; the ED summons is against the former CFO
(Indian national, no travel restriction). If the current MD or Head of
Operations receives an ED summons, Trigger C would fire and operative
ISRS would rise to 4.5.

Operative ISRS and what this means

NipKor's canonical ISRS is 2.2 (Elevated). The Trigger A2 licence-tier
floor lifts the operative ISRS to 3.5 (High). The operator's task is
not to argue the floor away but to work the underlying licence-tier
exposure: engage retained India counsel, prepare a documented
FEMA-response strategy under the 3x-penalty scenario, monitor whether
the ED summons escalates to further named respondents (the two Japanese
executives), and refresh JV governance dispute-resolution planning at
Pune. The Trigger C fallback watch is the single most important
operational discipline over the next 60 days: if either Japanese
executive receives an ED summons, the score moves from High to Severe
and the containment posture changes.

An operator-adjusted ISRS could weight CP3 higher (Netherlands holding
structure and Pune JV governance dominate NipKor's medium-term
exposure) and CP4 lower. That is a legitimate internal management view.
It is not the ISRS. Both should be reported side by side to preserve
comparability.

12. Operator playbook

An operator with an ISRS between Elevated and Severe (2.0--5.0) needs to
know which structures generally operate cleanly under current India
conditions, which have no commercially credible completion path, and
which are workable only conditionally. These are directional categories,
not blanket judgments --- each depends on the operator's sector,
counterparties, and perimeter.

Structures that generally operate cleanly

**Wholly owned subsidiary (WOS) in a non-restricted manufacturing or
services sector, incorporated post-2020 with clean
beneficial-ownership chain, resident director in place, filings
current.** Manufacturing at 100% automatic route, professional
services outside restricted sub-sectors, and non-consumer B2B services
generally operate cleanly subject to CP2 conditions on FEMA/ED
enforcement and CP3 conditions on tax and treaty substance.
**Direct home-country parent → Indian WOS, with no offshore
intermediate holding.** Removes GAAR-plus-Protocol exposure at CP3
dimension 1. Loses treaty-shopping benefits but gains defensibility.
Increasingly the strategic-operator preference post-Tiger Global.
**JV with a well-selected Indian promoter in insurance, healthcare,
defence, or automotive where operational control has been documented
into the shareholders' agreement at the level of chops, common seal,
and bank signatories.** The insurance-sector 2025--26 restructuring
wave shows that operational control (not the FDI cap) is the binding
constraint; write the SHA accordingly.
**FTZ-based or SEZ-based operations for export-oriented
manufacturing.** Cloud-tax holiday extension to 2047 (Budget 2026)
supports SaaS and digital services routed through SEZ; export
incentive stack remains intact.

**Structures with no commercially credible completion path in current
conditions**

**New Mauritius holding structures for Indian investments claiming
Article 13(4) capital gains exemption.** Tiger Global closed this
route via GAAR override. Post-Protocol notification (imminent Aug--Nov
2026), the treaty itself will insert PPT. Any new Mauritius vehicle
for India assets should assume the treaty rate does not apply.
**Merchant-banker-valued open offers or delistings under SEBI SAST
closing after 2 October 2026.** IRV requirement kicks in;
grandfathering ends. Complete before 2 October 2026 or replan
valuation architecture.
**PLI participation without confirmed post-commissioning
eligibility.** Solar PV precedent (₹24,000 crore at zero disbursement)
shows the risk of stranded eligibility. Confirm eligibility mechanics
before capex commitment, not after.
**Dormant Indian subsidiary held for optionality with unmet MCA
filings.** Strike-off risk plus MCA-to-ED/IT/GST information-sharing
pathway creates asymmetric exposure. Either activate or close via
C-PACE.

Structures that are workable only conditionally

Netherlands or Singapore holding of Indian securities. Treaty
rates remain but substance requirements have thickened post-Tiger
Global. Document the substance: full-time employees, board meetings
held in the holding jurisdiction, decisions made and minuted locally,
not merely rubber-stamped. Thin substance is now a scored risk (CP3
dimension 1), not a hypothetical one.
**ECB-funded Indian entities pre-FEMA (Borrowing and Lending) 2026
Amendment.** Historic ECB conversions are the current ED enforcement
priority (PPK Newsclick precedent, plus NipKor-illustrative
scenarios). Document the audit trail for every pre-2026 ECB; assume ED
review possible at any point.
**Foreign directors on Indian boards without D&O and Indian
criminal-counsel retainer.** LOC exposure is a live tool in commercial
disputes; the four High Court quashings show relief is available but
slow (4--8 years). Retain counsel now, not after the LOC lands.
Cross-border transfer of Indian personal data pre-DPBI seating.
DPDP §16 already permits transfer to any jurisdiction except those the
Central Government prohibits by notification, and no country has been
prohibited to date. This is temporary architecture: once the DPBI is
seated and Phase III bites in May 2027, a case-by-case restriction
posture becomes materially more plausible. Build the data-localisation
optionality now --- mirrored EU-standard controls plus a documented
Indian-copy path --- rather than after a notification lands.

An operator that runs the rubric and finds itself in category two on
more than one dimension should be planning to exit or restructure that
dimension, not merely to monitor it. Category three is where most
India-committed operators actually sit --- it is workable, but only with
the specific mitigations named.

13. The next 90 days

Eight dated events between August and November 2026, plus two undated
watchpoints, will move the ISRS for every operator with India exposure.
Naming them here is a checklist, not a prediction.

31 July 2026 --- GSTAT section 112 appeal deadline. The ordinary
filing window for pre-GSTAT-operational CGST appeals closes. Section
112(6) CGST condonation is available for up to 3 additional months on
sufficient cause; miss both windows and the appellate route through
GSTAT is foreclosed ([[GSTAT
portal]{.underline}](https://www.gstat.gov.in/); [[TaxGuru GSTAT
guide]{.underline}](https://taxguru.in/goods-and-service-tax/gstat-operational-complete-guide-gst-appellate-tribunal-appeals.html)).
**3 August 2026 --- Supreme Court DPDP constitutional-challenge next
hearing.** Five petitions consolidated challenging DPDP Act §17(2)(a)
exemptions and §44(3) RTI carve-outs. Outcome shapes whether the
enforcement architecture the DPBI is being built to operate stands as
drafted or is remitted to Parliament ([[DPO Club
tracker]{.underline}](https://dpo-club.org/constitutionality-of-the-digital-personal-data-protection-act-2023);
[[Supreme Court
Observer]{.underline}](https://www.scobserver.in/cases/constitutionality-of-the-digital-personal-data-protection-act-2023/)).
**August--November 2026 --- DPBI chairperson and four members
appointments.** MeitY invited applications by 6 May 2026. The Data
Protection Board is the enforcement authority for DPDP; until it seats
members, the statutory penalty engine is unavailable and enforcement
is de facto suspended. Seating flips the enforcement clock on ([[MeitY
circular
06.05.2026]{.underline}](https://www.meity.gov.in/static/uploads/2026/05/cd481c027470b420b4cb85fb40a91c53.pdf);
[[Judicio
tracker]{.underline}](https://judicio.ai/blogs/india-dpdp-act-enforcement-tracker)).
August--November 2026 --- 57th GST Council meeting (overdue). The
56th Council met 3 September 2025 and delivered the two-slab
restructuring effective 22 September 2025. A 57th meeting is now
overdue by more than nine months. Agenda watch: rate reversion
mechanics, intermediary place-of-supply consolidation, GSTAT
operationalisation timeline ([[GST
Registration]{.underline}](https://gstregistration.co/blog/57th-gst-council-meeting-2026);
[[PIB 56th
Council]{.underline}](https://static.pib.gov.in/WriteReadData/specificdocs/documents/2025/sep/doc202594628401.pdf)).
**August--November 2026 --- India's gazette notification of the
India--Mauritius Protocol.** Mauritius Cabinet approved ratification
on 17 July 2026. Once India gazettes the Protocol, Article 27A
(Principal Purpose Test) becomes operational. Combined with the Tiger
Global judgment already in effect, the Mauritius holding structure for
Indian investments becomes a defendability question at both the
domestic (GAAR) and treaty (PPT) levels ([[Mauritius PMO
17.07.2026]{.underline}](https://pmo.govmu.org/CabinetDecision/2026/Final_Highlights_of_Cabinet_Meeting_Friday_17.07.2026.pdf);
[[EY India
alert]{.underline}](https://www.ey.com/en_in/technical/alerts-hub/2026/07/mauritian-cabinet-approves-ratification-of-protocol-to-india-mauritius-dtaa)).
2 October 2026 --- SEBI SAST valuation transition close.
Independent Registered Valuers (IRV) become mandatory for open offers,
delistings, and takeover valuations under SEBI SAST 2025 Amendment.
Grandfathering ends. Any transaction structured on merchant-banker
valuation after this date is exposed to a valuation-challenge risk
([[LawSikho SAST
2025]{.underline}](https://lawsikho.com/blog/sebi-takeover-code-2025-amendment-2/)).
13 and 14 November 2026 --- DPDP Rules Phase II. Consent-manager
registration opens; ₹2 crore net worth requirement and seven-year
record-keeping obligations begin. First live compliance obligations
under DPDP for the consent-management ecosystem. First applications
will define the effective bar for the wider Significant Data Fiduciary
regime ([[DPDP Rules
notification]{.underline}](https://static.pib.gov.in/WriteReadData/specificdocs/documents/2025/nov/doc20251117695301.pdf);
[[CADP
tracker]{.underline}](https://cadp.in/resources/guides/dpdp-implementation-tracker/)).
Rolling 60-day PN2 SOP versus observed 6--9 month reality. The May
2026 SOP promises a 60-day expedited window for Press Note 2 approvals
from land-bordering countries. White & Case observed practice is 6--9
months. Every LBC application filed after 22 May 2026 is a fresh
datapoint on whether the SOP tightens or the gap widens ([[Luthra SOP
22.05.2026]{.underline}](https://luthra.com/wp-content/uploads/2026/06/Update-SOP-2026-PN2-22.05.2026.pdf);
[[White & Case FDI
2026]{.underline}](https://www.whitecase.com/insight-our-thinking/foreign-direct-investment-reviews-2026-india)).

Two further items sit outside the 90-day window but should already be on
the calendar: the 31 December 2026 RBI NBFC deregistration deadline via
the PRAVAAH portal, and 13 May 2027 when all substantive DPDP
obligations become enforceable. Rescoring any ISRS composite in December
2026 without accounting for what happens across the ten items above
produces a stale score.

14. What this brief is not

This brief is a rubric for scoring foreign B2B operator exposure to
India's current structural risk profile as of July 25, 2026. It is
deliberately not several other things it could be confused with.

It is not a political forecast. MAALAT does not predict Indian
election outcomes, US--India trade posture, or geopolitical events.
The rubric measures exposure to current conditions, not conditional
futures.
It is not a sector-specific playbook. It is sector-agnostic by
design. Sector nuance goes into how an operator weights the dimensions
within a choke point, not into the rubric itself. Insurance, defence,
e-commerce, and payments each carry their own layered regimes that sit
on top of the four choke points, not inside them.
It is not a legal opinion. Every operator running this rubric
should have Indian counsel confirm the specific applicability of the
cited regulations, judgments, and enforcement precedents to their
situation. This brief cites; it does not interpret for a specific
matter.
It is not an India-exit thesis. The rubric can produce a Low
score. A well-structured, well-monitored India operation in a
permitted sector, with defensible substance and current filings, still
works in 2026 --- and the aggregate FDI story (US$58.85 billion
FY2025--26 inflows) confirms that. The rubric's job is to force
honesty about which category the operator is actually in.
It is not a substitute for a paid MAALAT engagement. An operator
using this brief as a self-assessment tool will produce a reasonable
first-cut ISRS. A paid MAALAT India Structural Risk Review adds
primary-source verification of every dimension, sector-specific weight
calibration, and a defended composite the operator can bring to a
board.

15. Sources

Every quantitative claim and named case in this brief is drawn from the
following sources, all publicly available as of July 25, 2026. Sources
are grouped by choke point. The full source universe (over 300 URLs
across primary and secondary tiers) is retained in the underlying MAALAT
research notebook; the selection below is the working citation set.

Choke Point 1 --- Capital entry and ownership control

[[DPIIT Press Note
2/2026]{.underline}](https://www.dpiit.gov.in/static/uploads/2026/03/b9da5830b052c2f2d788593e97d07c63.pdf)
· [[PIB LBC FDI Cabinet
decision]{.underline}](https://www.pib.gov.in/PressReleasePage.aspx?PRID=2237806)
· [[DPIIT sectoral automatic-route
table]{.underline}](https://www.dpiit.gov.in/static/uploads/2025/07/1b12c69de7c2e698a7b68f7b8fcf4fe3.pdf)
· [[DPIIT FDI factsheet Apr--Dec
2025]{.underline}](https://www.dpiit.gov.in/static/uploads/2026/04/964449b16fca5b00383bfb5152e9d729.pdf)
· [[PIB PLI
status]{.underline}](https://www.pib.gov.in/PressReleasePage.aspx?PRID=2230621&reg=1&lang=1)
· [[Lok Sabha USQ 601
PLI]{.underline}](https://sansad.in/getFile/loksabhaquestions/annex/187/AU601_tMrlXC.pdf)
· [[Lok Sabha AU282
strike-off]{.underline}](https://sansad.in/getFile/loksabhaquestions/annex/187/AU282_PwsKXn.pdf)
· [[Luthra SOP 2026 for
PN2]{.underline}](https://luthra.com/wp-content/uploads/2026/06/Update-SOP-2026-PN2-22.05.2026.pdf)
· [[White & Case FDI reviews 2026
India]{.underline}](https://www.whitecase.com/insight-our-thinking/foreign-direct-investment-reviews-2026-india)
· [[Legal 500 PN2 2026
guide]{.underline}](https://www.legal500.com/developments/thought-leadership/india-opens-the-door-to-chinese-investment-a-complete-guide-to-press-note-2-2026-and-the-fema-ndi-amendments/)
· [[Trilegal LBC easing
update]{.underline}](https://trilegal.com/knowledge_repository/trilegal-update-easing-of-fdi-restrictions-on-investments-from-land-border-sharing-countries/)
· [[Chambers Merger Control 2026
India]{.underline}](https://practiceguides.chambers.com/practice-guides/merger-control-2026/india/trends-and-developments/O26210)
· [[Carnegie PN3
gamble]{.underline}](https://carnegieendowment.org/research/2026/04/indias-press-note-3-gamble-opening-the-fdi-door-to-china)
· [[Khaitan RBI NBFC Amendment
2026]{.underline}](https://www.khaitanco.com/sites/default/files/2026-05/ERGO_NBFC%20Amendment%20Directions_5%20May%202026.pdf)
· [[PwC FEMA Borrowing & Lending
2026]{.underline}](https://www.pwc.in/research-insights/news_alert/regulatory-insights/rbi-notifies-foreign-exchange-management-borrowing-and-lending-first-amendment-regulations-2026-to-streamline-ecb-framework-and-enhanced-ease-of-funding.html)
· [[ET Manufacturing PLI
31.03.2026]{.underline}](https://manufacturing.economictimes.indiatimes.com/amp/news/industry/indias-pli-schemes-drive-35354-crore-in-disbursements-and-240-lakh-crore-investments/132604380)
· [[Energetica India solar PLI
zero]{.underline}](https://www.energetica-india.net/news/-inr-24000-cr-solar-pli-scheme-sees-zero-disbursal-as-projects-await-post-commissioning-eligibility)
· [[SAG Infotech Indo-MIM
penalty]{.underline}](https://blog.saginfotech.com/roc-penalises-indo-mim-limited-companies-act-resident-director)
· [[Business Standard C-PACE
exits]{.underline}](https://www.business-standard.com/india-news/corporate-exits-now-happening-in-70-90-days-under-c-pace-says-govt-in-ls-124112700791_1.html)
· [[India Briefing FY2025-26
FDI]{.underline}](https://www.india-briefing.com/news/india-fdi-inflows-fy-2025-26-top-countries-sectors-states-45422.html/)

Choke Point 2 --- Data, digital and personnel

[[PIB DPDP Rules 2025
notification]{.underline}](https://static.pib.gov.in/WriteReadData/specificdocs/documents/2025/nov/doc20251117695301.pdf)
· [[MeitY DPBI applications circular
06.05.2026]{.underline}](https://www.meity.gov.in/static/uploads/2026/05/cd481c027470b420b4cb85fb40a91c53.pdf)
· [[MeitY IT Rules consolidated (G.S.R.
120(E))]{.underline}](https://www.meity.gov.in/static/uploads/2026/02/550681ab908f8afb135b0ad42816a1c9.pdf)
· [[DPDP Act §16
text]{.underline}](https://www.dpdpa.com/dpdpa2023/chapter-4/section16.html)
· [[DPDP Act penalties
schedule]{.underline}](https://www.dpdpa.com/theschedule.html) · [[DSCI
DPBI
FAQ]{.underline}](https://www.dsci.in/files/content/documents/2026/faq-on-data-protection-board.pdf)
· [[Delhi HC Vineet & Pranav Gupta
10.02.2026]{.underline}](https://delhihighcourt.nic.in/app/showFileJudgment/59610022026CW78502025_105401.pdf)
· [[Delhi HC Prannoy Roy
20.03.2026]{.underline}](https://delhihighcourt.nic.in/app/showFileJudgment/58720032026CW53162021_180844.pdf)
· [[Maria Ramesh v. UOI
27.01.2026]{.underline}](https://indiankanoon.org/doc/126251031/) · [[ED
PPK Newsclick press release
16.02.2026]{.underline}](https://www.enforcementdirectorate.gov.in/media/press-release-documents/016264fc-afc6-43b9-ae9d-cb42ace42317_Press%20Release%20PPK%20Newsclick-1622026%201.pdf)
· [[Judicio DPDP enforcement
tracker]{.underline}](https://judicio.ai/blogs/india-dpdp-act-enforcement-tracker)
· [[DPO Club constitutional-challenge
tracker]{.underline}](https://dpo-club.org/constitutionality-of-the-digital-personal-data-protection-act-2023)
· [[CADP DPDP implementation
tracker]{.underline}](https://cadp.in/resources/guides/dpdp-implementation-tracker/)
· [[Shardul Amarchand DPDP
enforcement]{.underline}](https://www.amsshardul.com/insight/enforcement-of-the-dpdp-act-and-notification-of-the-dpdp-rules/)
· [[King Stubb SDF compliance
guide]{.underline}](https://ksandk.com/data-protection-and-data-privacy/significant-data-fiduciaries-dpdp-act-compliance-guide/)
· [[Khaitan IT Amendment Rules
2026]{.underline}](https://www.khaitanco.com/thought-leadership/MeitY-notifies-the-IT-Amendment-Rules-2026)
· [[Lakshmikumaran FEMA investigation
guide]{.underline}](https://www.lkslaw.com/insights/articles/guide-to-investigation-adjudication-and-appeal-under-indian-foreign-exchange-law-1)
· [[Lawyer eNews Delhi HC LOC quash
13.01.2026]{.underline}](https://lawyerenews.com/legal_detail/mere-pendency-of-investigation-cannot-justify-a-look-out-circular-delhi-high-court-quashes-locs)
· [[India Today Bombay HC LOC
quash]{.underline}](https://www.indiatoday.in/india/story/bombay-high-court-quashes-unlawful-loc-kaka-overseas-directors-customs-evasion-2837958-2025-12-18)
· [[EveryCity India employment visa
2026]{.underline}](https://everycity.guide/journal/india-employment-visa-2026)

Choke Point 3 --- Structure, tax and exit

[[SC Tiger Global judgment
15.01.2026]{.underline}](https://api.sci.gov.in/supremecourt/2025/1251/1251_2025_7_1501_67552_Judgement_15-Jan-2026.pdf)
· [[SC Hyatt International
24.07.2025]{.underline}](https://api.sci.gov.in/supremecourt/2024/9277/9277_2024_9_1502_62468_Judgement_24-Jul-2025.pdf)
· [[Income Tax Notification
88/2026]{.underline}](https://www.incometaxindia.gov.in/documents/d/guest/notification-88-2026-pdf)
· [[Mauritius PMO Cabinet
17.07.2026]{.underline}](https://pmo.govmu.org/CabinetDecision/2026/Final_Highlights_of_Cabinet_Meeting_Friday_17.07.2026.pdf)
· [[Companies Act 2013
§58]{.underline}](https://www.indiacode.nic.in/show-data?actid=AC_CEN_22_29_00008_201318_1517807327856&sectionId=1248&sectionno=58&orderno=60)
· [[SEBI Delisting Regulations 2021 (amended
03.09.2025)]{.underline}](https://www.sebi.gov.in/legal/regulations/sep-2025/securities-and-exchange-board-of-india-delisting-of-equity-shares-regulations-2021-last-amended-on-september-3-2025-_96548.html)
· [[KPMG GAAR overrides
Mauritius]{.underline}](https://kpmg.com/us/en/taxnewsflash/news/2026/01/tnf-india-gaar-applied-to-deny-capital-gains-exemption-for-indirect-share-transfer-under-mauritius-treaty-supreme-court-decision.html)
· [[Deloitte Tax@Hand GAAR
override]{.underline}](https://www.taxathand.com/article/40825/India/2026/Supreme-Court-rules-GAAR-overrides-capital-gains-exemption-under-Mauritius-treaty)
· [[EY India Tiger Global
alert]{.underline}](https://www.ey.com/content/dam/ey-unified-site/ey-com/en-in/alerts-hub/2026/01/supreme-court-of-india-rules-on-tax-treaty-eligibility-and-taxation-of-an-indirect-transfer-of-shares.pdf)
· [[PwC Mauritius Circular
1/2025]{.underline}](https://www.pwc.com/mu/en/services/tax/Taxtimes/india-treaty-ppt.html)
· [[EY India Mauritian Cabinet
Protocol]{.underline}](https://www.ey.com/en_in/technical/alerts-hub/2026/07/mauritian-cabinet-approves-ratification-of-protocol-to-india-mauritius-dtaa)
· [[Reuters India--France Protocol
23.02.2026]{.underline}](https://www.reuters.com/world/india/india-amends-tax-treaty-with-france-revises-dividend-tax-structure-2026-02-23/)
· [[AZB Nestle
MFN]{.underline}](https://www.azbpartners.com/bank/sc-decision-in-nestle-most-favored-nation-clause-under-tax-treaties-rendered-redundant/)
· [[Catalyse §115QA
amendments]{.underline}](https://catalyseadvisory.com/section-115qa-amendments-finance-act-2024/)
· [[LawSikho SEBI SAST
2025]{.underline}](https://lawsikho.com/blog/sebi-takeover-code-2025-amendment-2/)
· [[Reuters SEBI delisting framework
review]{.underline}](https://www.reuters.com/legal/government/india-markets-regulator-review-delisting-framework-ease-exits-2026-06-12/)
· [[Livemint operational-control insurance
M&A]{.underline}](https://www.livemint.com/industry/banking/operational-control-driving-insurance-m-as-rather-than-fdi-limit-hike-11779880692883.html)
· [[Cyril Amarchand transnational
estoppel]{.underline}](https://disputeresolution.cyrilamarchandblogs.com/2026/05/finality-in-pe-vc-exits-across-borders-sc-endorses-transnational-issue-estoppel/)
· [[Vodafone Idea AGR ₹64,046
cr]{.underline}](https://www.newindianexpress.com/business/2026/Apr/30/vodafone-ideas-agr-dues-cut-to-rs-64046-crore-after-dot-reassessment)
· [[India Briefing AS-22 amendment
2026]{.underline}](https://www.india-briefing.com/news/india-as22-amendment-2026-oecd-pillar-two-tax-accounting-43420.html/)

Choke Point 4 --- Indirect tax, trade and payment rails

[[PIB 56th GST Council
03.09.2025]{.underline}](https://static.pib.gov.in/WriteReadData/specificdocs/documents/2025/sep/doc202594628401.pdf)
· [[CBIC §17(5) CGST blocked
credits]{.underline}](https://taxinformation.cbic.gov.in/content/html/tax_repository/gst/acts/2017_CGST_act/active/chapter5/section17_v1.00.html)
· [GSTAT official portal]{.underline} ·
[[Budget 2026-27 customs
annexe]{.underline}](https://www.indiabudget.gov.in/doc/cen/dojstru1.pdf)
· [[Budget 2026-27 tax reforms
booklet]{.underline}](https://www.indiabudget.gov.in/doc/taxreform.pdf)
· [[Budget 2026-27
speech]{.underline}](https://www.indiabudget.gov.in/doc/budget_speech.pdf)
· [[PIB Budget 2026-27 customs
proposals]{.underline}](https://www.pib.gov.in/PressReleasePage.aspx?PRID=2221446)
· [[PIB Transition Facilitation QCO Order
2026]{.underline}](https://www.pib.gov.in/PressReleasePage.aspx?PRID=2278019&reg=48&lang=1)
· [[Ministry of Steel QCO
orders]{.underline}](https://steel.gov.in/quality-control-orders) ·
[[Khaitan 56th GST Council
note]{.underline}](https://www.khaitanco.com/sites/default/files/2025-09/Ergo%20-%2056th%20GST%20Council%20Meeting%20-%2004Sept2025.pdf)
· [[TaxGuru GSTAT operational
guide]{.underline}](https://taxguru.in/goods-and-service-tax/gstat-operational-complete-guide-gst-appellate-tribunal-appeals.html)
· [[GST Registration 57th Council
status]{.underline}](https://gstregistration.co/blog/57th-gst-council-meeting-2026)
· [[Sansa Legal e-invoicing
01.04.2026]{.underline}](https://www.sansalegal.com/post/gst-e-invoicing-april-2026-rs-5-crore-threshold-and-new-compliance-rules)
· [[TaxGuru intermediary POS
30.03.2026]{.underline}](https://taxguru.in/goods-and-service-tax/gst-place-supply-change-intermediary-services-30-march-2026.html)
· [[Rödl Budget 2026 intermediary
amendment]{.underline}](https://www.roedl.com/en/insights/budget-2026-amendment-intermediary-service-stand-now/)
· [[BDO customs duty rate chart
2026]{.underline}](https://www.bdo.in/en-gb/insights/alerts-updates/customs-duty-rate-chart-2026)
· [[Cogoport 14 QCOs rescinded
12.11.2025]{.underline}](https://www.cogoport.com/en-IN/blogs/India-Abolishes-BIS-QCOs-on-14-Polymers-Textiles-Why-an-Import-Surge-from-Asia-Is-Here)
· [[Livemint 49 QCOs
withdrawn]{.underline}](https://www.livemint.com/news/india/india-quality-control-orders-withdrawn-msme-compliance-boost-industry-11767961105061.html)
· [[CSEP Decoding
QCOs]{.underline}](https://csep.org/wp-content/uploads/2025/09/Decoding-Indias-Quality-Control-Orders.pdf)
· [[BusinessWorld GTRI on QCO
framework]{.underline}](https://www.businessworld.in/article/dpiit-s-new-qco-framework-needs-clear-rules-to-avoid-fresh-bottlenecks-gtri-612448)

Appendix --- Dimension anchor scales

The following anchor scales tell an operator how to convert observed
evidence into a 0.0--5.0 score for each of the 31 dimensions across the
four choke points. Any dimension that structurally does not apply to the
operator (for example, CP1 dimension 8 on insurance/BFSI structural
exposure for a non-BFSI operator) is scored N/A and renormalised out;
see the N/A treatment note below. The scale is designed so that a 0 is
defensibly benign, a 2.5 is the point at which a rational operator
starts building mitigations, and a 5 is on its own disqualifying.

----------- ----------------------- ---------------------------------------
SCORE MEANING EXAMPLE PROFILE

0.0 -- Negligible exposure** The dimension does not apply to this
0.9** operator, or all indicators cleanly
test benign.

1.0 -- Named but managed** Exposure exists, is documented, and is
1.9** fully mitigated by an active control.
Rescore annually.

2.0 -- Material --- build Exposure is real and could plausibly
2.9** mitigations** bite. Current controls are partial.
Building alternatives is now the right
posture.

3.0 -- Live risk** The exposure has bitten similar
3.9** operators or would bite this one under
a plausible near-term scenario.
Programme-level response required.

4.0 -- Disqualifying on its The exposure, unmitigated, is enough to
5.0** own** close the engagement or produce a
regulator action. Exit or ring-fence.
----------- ----------------------- ---------------------------------------

The same 0.0--5.0 scale applies to every dimension in every choke point.
This intentional constraint keeps the rubric operator-usable rather than
academic. A dimension that cannot be scored on this scale is either
poorly defined or does not belong in the rubric.

Confidence tagging

Every dimension score should carry a confidence tag: High (multiple
named primary or authoritative-secondary sources), Moderate (one named
source), Indicative (reasoned estimate consistent with cited evidence),
or N/A (dimension structurally does not apply and is renormalised out of
the composite). A composite with more than three Indicative dimensions
in the same choke point is not defendable and must be reworked before it
enters the ISRS calculation.

N/A treatment and renormalisation

A dimension is N/A only when it structurally cannot apply to the
operator --- for example, CP1 dimension 8 (insurance / BFSI structural
exposure) is N/A by construction for a non-BFSI operator, and CP4
dimension 5 (OECD Pillar Two) is N/A for a group below the €750m
consolidated-revenue threshold. India's absence of an autonomous
sanctions regime is not an N/A: sanctions exposure is captured in CP4
dimension 7 as counterparty-bank sanctions transmission, which every
foreign B2B operator must actively score. "Zero exposure" is not N/A;
it is a 0. When a dimension is marked N/A, its weight is removed and the
remaining dimension weights within the same choke point are multiplied
by 100 / (100 minus the removed weight) so they resum to 100%. Example:
CP1 with dimension 8 (10% weight) removed --- the remaining seven
dimensions have their weights multiplied by 100/90 = 1.111. Document any
N/A calls in the scoring worksheet with the structural reason.

End of Brief #05.

Frequently asked questions

Q1 · How should operators price India structural risk when the country's macro narrative is favorable?

The brief scores India B2B as Commission Conditionally — structural risk has been mispriced downward because the macro narrative has been favorable for a decade. The five-dimension framework identifies which structural risks the macro narrative masks: dispute resolution has grown slower and more expensive not faster, capital flow rules have modernized but still carry sector-specific friction, and regulatory posture toward foreign operators varies materially by state rather than by federal-level signal. Operators pricing India off headline growth data are typically under-pricing the friction cost of actually operating there. The brief specifies where friction cost is worth accepting and where it is disqualifying.

Q2 · Where does India carry structural risk that is not obvious from the country's growth story?

Three areas: state-level regulatory divergence (federal-level rules can be favorable while state-level implementation is hostile), dispute resolution timelines (commercial cases still average 3-5 years even in the fastest jurisdictions), and sector-specific licensing that changes without warning. The brief scores each of these three risks against the same five-dimension framework used for other country briefs, so operators can compare structural risk cleanly. It also names five sectors where the risk-adjusted return has moved unfavorably despite the macro story being favorable. The framework works the same way it does for China — structural signal separated from cyclical noise.

Q3 · How does the Country Structural Risk framework apply to India specifically?

Same five dimensions apply — capital flow, regulatory posture, IP protection, dispute resolution, political overlay — with country-specific criteria at each score level. For India, the dispute resolution dimension carries additional weight because timelines are structural, not cyclical. The political overlay dimension carries less weight than in some other emerging markets because India's political system has produced predictable outcomes across the last two election cycles. The framework rewards operators who read the country by its structural dimensions rather than by its political headlines. Every dimension is scored with named criteria so operators can audit the score against their own experience.

Q4 · What are the framework's named criteria for scoring India's dispute resolution dimension?

Named criteria at each level: Level 1 (best) — under 12-month average commercial case resolution with predictable enforcement; Level 2 — 12-24 months with predictable enforcement; Level 3 — 24-36 months with predictable enforcement; Level 4 — over 36 months with variable enforcement; Level 5 (worst) — over 60 months with unpredictable enforcement. India is scored at Level 3-4 depending on jurisdiction, meaning any commercial contract worth pursuing legally must be worth the 2-3 year timeline. Operators structure around this by insisting on arbitration clauses seated outside India for material contracts and by limiting exposure that would require litigation.

Q5 · When should I commission an India Structural Risk brief before entering the market?

Commission a brief before signing any commitment worth over $200K, before establishing a wholly-owned subsidiary, before signing an exclusive distribution agreement of any size, or before committing capital to tooling or plant investment. Do not commission a brief for exploratory market sizing or for opportunistic small orders that carry no downside if they fail. The brief is designed to be applied to a specific decision, not a general market view. Commission it when the wrong decision has a P&L impact large enough that a $999 brief looks cheap in retrospect.

Q6 · How much does an India Structural Risk brief cost and how long does it take?

An India Structural Risk brief is priced at $999 (Level 3) for standard scope. Turnaround is 5-7 business days from intake. Bespoke scopes covering multiple states, sector overlays, or specific counterparty applications are priced separately. Every brief includes the framework, the scored assessment, named triggers to monitor, and a stated verdict with protective conditions if the verdict is Commission Conditionally. Source URLs on every material fact. See the Turkish Textile SME sample and the China brief before commissioning to see the format applied. Request an India brief →

Commission a similar brief for your decision

Level 1 · Counterparty Decision · $199
Level 2 · Distributor / Distress / Banking · $499
Level 3 · Situation / Structural / Sourcing · $999

Request a Brief

Discuss a bespoke scope

Related briefs

U.S. Steel, Nippon and Golden Share brief cover

How to Structure a Sourcing Decision Under State-Backed Ownership

Brief #08

HSBC Türkiye and Emirates NBD brief cover

How Mid-Market Turkish Operators Should Decide on a Banking Migration

Brief #07

How to Read a Distributor Bankruptcy When Your Product Is on Their Shelf

Brief #06

How to Assess Structural Risk Before Committing a Distribution Line to India

How to Assess Structural Risk Before Committing a Distribution Line to India

Frequently asked questions

Commission a similar brief for your decision

Related briefs

Frameworks used in this brief