DIR-3 KYC for Directors

Every individual who has been allotted a Director Identification Number (DIN) — whether or not they are a director in a company at the time of filing — must complete the annual KYC process as mandated under Rule 12A of the Companies (Appointment and Qualification of Directors) Rules 2014 read with the MCA notification dated July 5, 2018. For DIN holders who have filed DIR-3 KYC at least once using the full web form, the annual KYC can be completed via the DIR-3 KYC-Web form (a simplified web-based confirmation) on the MCA21 portal instead of re-filing the full XML form. The due date is September 30 each year, covering individuals who were allotted DIN as of March 31 of that financial year. MCA deactivates DINs not subjected to KYC, and any filing made by a director with a deactivated DIN is invalid, creating a compliance risk for the company.

If DIR-3 KYC or DIR-3 KYC-Web is not filed by the due date of September 30, the DIN is marked as 'Deactivated due to non-filing of DIR-3 KYC' by the MCA system, and the DIN holder cannot make any company filing until the KYC is completed. To reactivate a deactivated DIN, the individual must file the DIR-3 KYC form after the due date and pay a penalty fee of ₹5,000 per DIN as prescribed under Rule 12A of the Companies (Appointment and Qualification of Directors) Rules 2014. There is no provision for waiver of this late fee. A director who files board resolutions, annual returns, or financial statements using a deactivated DIN risks those filings being treated as defective, exposing the company to penalties under the Companies Act 2013.

For first-time DIR-3 KYC filing, the director must provide their DIN, PAN, Aadhaar number (verified through the OTP-based Aadhaar authentication on the MCA21 portal), personal mobile number, and personal email address as required under Rule 12A of the Companies (Appointment and Qualification of Directors) Rules 2014. The mobile number and email address provided must be unique to the individual and must be verified by OTP during the filing process — these details are linked to the DIN permanently and used for all future MCA communications. The form must be digitally signed by the DIN holder and certified by a practising Chartered Accountant, Company Secretary, or Cost Accountant, who verifies the particulars including the Aadhaar-PAN linkage. Mismatches between PAN and Aadhaar data will cause the form to be rejected, so the director must ensure PAN-Aadhaar linkage is complete (due date for PAN-Aadhaar linking was June 30, 2023 under CBDT Circular No. 6/2023).

Yes, foreign nationals holding a DIN must also comply with annual DIR-3 KYC under Rule 12A of the Companies (Appointment and Qualification of Directors) Rules 2014. However, foreign nationals are not required to provide Aadhaar since Aadhaar is issued only to Indian residents; instead, they must provide a certified copy of their passport as the primary identity document. The mobile number and email address provided must be active personal contacts of the director, and OTP verification is conducted on those. The DIR-3 KYC form for a foreign director must be certified by a practising professional (CA/CS/CMA) and must be accompanied by a self-attested copy of the passport and a notarised and apostilled address proof document from the foreign director's country of residence if the address proof is in a foreign language or jurisdiction. Foreign directors should initiate the KYC process well before September 30 to allow time for document apostilling and courier.

Deactivation of a DIN does not itself vacate the director's office or invalidate their existing appointment; the director remains in the company's register of directors. However, while the DIN is deactivated, the director cannot sign or be party to any e-filing on the MCA21 portal under the Companies Act 2013, meaning the company cannot file Form MGT-7 (Annual Return), AOC-4 (Financial Statements), or any other form that requires the director's DIN. This effectively blocks the company's entire regulatory filing workflow until the deactivated DIN is reactivated by filing DIR-3 KYC with the ₹5,000 penalty. The company may also become liable for penalties under Section 403 (additional filing fee for late filing) for all filings that were delayed because of the director's deactivated DIN. To maintain business continuity, companies should proactively track KYC due dates for all their directors and send reminders before September 30 each year.