DIR-3 KYC in 2026: The Move from Annual to Triennial Filing, and What Directors Must Do Now

DIR-3 KYC in 2026: The Move from Annual to Triennial Filing, and What Directors Must Do Now

Delhi Legal Company · Updated August 2026 · 16 min read

For seven years, every DIN holder in India filed a KYC form each September or lost their DIN. That regime is over. From 31 March 2026, Director KYC moves to a three-year cycle — one of the more meaningful compliance reliefs the MCA has issued. But the transition has been messy, commentary is contradictory on when your first filing under the new cycle actually falls, and one obligation has quietly become more demanding, not less.

The short version

• The Companies (Appointment and Qualification of Directors) Amendment Rules, 2025, notified vide G.S.R. 943(E) dated 31 December 2025, replaced annual Director KYC with a triennial cycle with effect from 31 March 2026.
• Amended Rule 12A: every individual holding a DIN as on 31 March of a financial year must file KYC through Form DIR-3 KYC Web on or before 30 June of the immediately following every third consecutive financial year.
• The two earlier forms — DIR-3 KYC e-form and DIR-3 KYC Web — have been merged into a single unified Form DIR-3 KYC Web.
• The obligation attaches to the DIN, not to a directorship. It applies whether or not the individual currently holds office as a director in any company.
• Under Rule 12A(2), any change in personal mobile number, email address or residential address must be intimated within 30 days of the change — regardless of where you sit in the three-year cycle. This runs on a completely separate track.
• Caution: commentary on the first due date under the transition is genuinely inconsistent. Section 6 sets out the conflict and what to do about it.

1. What DIR-3 KYC is, and why it exists

A Director Identification Number is permanent and personal. It follows the individual, not the company. Once allotted, it stays with you whether you sit on ten boards or none.

The KYC requirement exists because a permanent identifier is only useful if the details behind it are current. Without periodic verification, the MCA database accumulates directors at addresses they left a decade ago, on mobile numbers that were reassigned, with email addresses at companies that no longer exist. That matters for service of notices, for tracing beneficial ownership, and for the integrity of the register generally.

The old design achieved currency at the price of enormous repetition. Every DIN holder filed every financial year, and the annual requirement often led to procedural defaults precisely in cases where no director particulars had changed at all. Thousands of DINs were deactivated each year not because the data was wrong, but because nobody filed a form confirming that the unchanged data was still unchanged.

2. What changed on 31 March 2026

What has not changed. The KYC obligation itself has not been abolished. Only the frequency of routine compliance has changed — DIR-3 KYC remains a statutory requirement. Directors reading headlines that say “no more annual KYC” and concluding that KYC is gone are setting themselves up for DIN deactivation.

3. The two obligations now run on separate tracks

This is the structural point most summaries get wrong, and it is where compliance will fail over the next three years.

Track 1 — the triennial cycle (Rule 12A(1)). A routine confirmation, due once every three financial years by 30 June. The three-year cycle is anchored to the financial year of DIN allotment and is never altered by a change-based filing.

Track 2 — event-based updates (Rule 12A(2)). Any change in personal mobile number, email address or residential address must be intimated within 30 days of the change, using Form DIR-3 KYC Web with the prescribed fee, regardless of where you are in the three-year cycle.

The two do not offset each other. Both obligations run on completely separate tracks — filing a change update in 2027 does not reset or satisfy your triennial filing due in 2028.

Why Track 2 is now the harder one

Under the old regime, a director who moved house in November could simply let it ride until the next September filing, when everything got refreshed anyway. That cushion is gone. With filings now three years apart, a change in address, email or mobile creates a standalone 30-day obligation with nothing else nearby to catch it.

And these event-based filings are the ones that require a digital signature by the director and certification by a practising professional such as a CA, CS or CMA — routine three-year filings do not.

So the practical burden has inverted. The easy filing became rarer. The hard filing became isolated, unbuffered, and easy to forget.

The control that matters. Build a trigger into your HR and secretarial processes: any change to a director’s address, personal email or mobile number automatically opens a 30-day DIR-3 KYC Web task. For foreign-owned subsidiaries where directors relocate between countries, this is not a hypothetical — an expatriate director returning home changes their residential address, and the clock starts that day.

4. Who has to file

Every individual holding an approved DIN as on 31 March of the relevant financial year. This includes directors of private limited companies, public companies, one person companies, Section 8 companies, designated partners in LLPs, and directors in foreign companies with Indian operations.

Two categories catch people out:

Directors who have resigned from every board. The compliance obligation is tied to the DIN itself, irrespective of whether the individual is currently appointed as a director in any company. If you hold a DIN and have not surrendered it, you file. Resignation from a company does not end the obligation — surrender of the DIN does.

Directors of dormant or struck-off companies. The company’s status is irrelevant. Your DIN is yours.

5. Consequences of not filing

The enforcement mechanism is unchanged in substance: the DIN is deactivated.

The ₹5,000 is the smallest part of the cost. The real damage is the cascade: a deactivated DIN in September stops the annual return filed in November, which triggers per-day additional fees on the company, which lands on directors who did nothing wrong.

6. When is your first filing due? Read this carefully.

Here is where we depart from most articles on this topic, which state a single confident date.

The rule itself is clear. Every individual holding a DIN as on 31 March of a financial year must file through Form DIR-3 KYC Web on or before 30 June of the immediately following every third consecutive financial year.

The transition is not. Published commentary from professional firms diverges materially:

• One widely cited position: directors who have already completed KYC up to FY 2025-26 are automatically covered under the new rules, with their next KYC due by 30 June 2028. The same reading appears elsewhere: if you filed KYC for FY 2025-26, your next filing is due only by June 2028.
• A different position circulated in early 2026 fixed a specific interim date: DIR-3 KYC Web to be filed on or before 9 September 2026, irrespective of the triennial KYC due date.
• A third reads the first cycle as landing in 2026: due date 30 September 2026 for all DIN holders with an active DIN as on 31 March 2026.
• And a fourth ties the cycle to allotment: the three-year cycle under Rule 12A(1) is anchored to the financial year of DIN allotment, and MCA has issued illustrations to clarify which due year applies to whom.

Why the divergence exists. As at the time the amendment took effect, no separate MCA circular or revised FAQ had been issued explaining the operational aspects of the triennial framework, and in the absence of specific clarification the plain reading of amended Rule 12A was to prevail. Professionals were advised to monitor MCA updates closely, particularly on DIN deactivation and late fees under the revised regime.

What to do about it

Do not resolve this from an article — including this one. Do this instead:

01. Log in to the MCA portal and check your DIN status directly. The portal is the only authoritative record of whether your DIN is active and what has been filed against it.

02. Identify your DIN allotment financial year and your last KYC filing year. Both drive the cycle under any reading.

03. If any interim 2026 date is potentially applicable to you, file. A filing you did not strictly need costs you an hour. A missed filing costs ₹5,000, a deactivated DIN, and a cascade of company-level defaults. The asymmetry is not close.

04. Confirm your specific due year with your Company Secretary against current MCA guidance, not against commentary published before the MCA issued operational clarifications.

A note on stale content. All pending DIR-3 KYC Web or DIR-3 KYC e-forms sitting in Draft, Pending, or Pending-for-DSC-Upload-and-Payment status were marked as Cancelled from 31 March 2026, requiring a fresh filing. If you have a half-completed filing from before that date, it no longer exists. Start again.

7. How to file DIR-3 KYC Web

01. Log in to the MCA V3 portal using your registered credentials. The DIN holder’s own login is used, not the company’s.

02. Navigate to the DIR-3 KYC Web service. Both earlier forms have been merged into the single unified Form DIR-3 KYC Web.

03. Verify the pre-filled details. Most information is pulled from existing MCA records, reducing manual entry. Check name, father’s name, date of birth, nationality, PAN, permanent and present address, mobile and email.

04. Complete OTP verification. OTPs are sent separately to the registered mobile number and email address. Both must be live and accessible to you. This is the failure point for directors who registered a work email at a former employer.

05. Submit. For a routine cycle filing, no CA/CS/CMA certification is required.

06. Save the SRN and acknowledgement. File it with the company’s statutory records, not only on the individual’s laptop.

If details have changed

Event-based filings for changes in contact details or address require digital signature verification by the director and certification by a practising professional (such as a CA, CS or CMA). Budget for professional fees and DSC validity — and check the DSC has not expired before you start, which is the single most common cause of a filing stalling on the last screen.

8. Specific issues for foreign directors and foreign-owned subsidiaries

Every Indian company must have at least one director who is resident in India. Most foreign-owned subsidiaries therefore run a board mixing overseas nationals with an Indian resident director. Five recurring problems:

Foreign mobile numbers and OTP. The MCA portal sends OTPs to the registered mobile. Where a director’s registered number is an overseas number, delivery is often unreliable. Verify OTP receipt well before the deadline, not on the last day.

Registered email at a group domain. When a director moves roles within the group, or the group migrates its email domain, the registered address can silently stop working. The OTP goes nowhere and the filing cannot complete. Audit this annually even though the filing is triennial.

Address changes on relocation. An expatriate director returning to their home country changes their residential address. That triggers the 30-day intimation obligation under Rule 12A(2) — a filing requiring a DSC and professional certification, during exactly the period when the individual is moving countries and least available.

DSC expiry for non-resident directors. Procuring or renewing a Class III DSC for a foreign national involves identity verification that takes longer than for a resident. Track expiry dates centrally.

Nobody owns the task. The DIN belongs to the individual, but the consequences of deactivation fall on the Indian company. In practice, the company secretary should maintain a DIN register for all directors — DIN number, allotment year, last KYC filed, next due, DSC expiry, and current registered email and mobile — and drive the filings. Leaving it to individual directors distributed across three time zones does not work.

9. Director KYC register — what to maintain

Review this register annually, in April, alongside the company’s other financial-year-start compliances. The triennial filing may not be due, but the data that would trigger a 30-day filing changes constantly.

10. Checklist

☐ DIN status verified as “Approved/Active” on the MCA portal for every director
☐ DIN allotment financial year recorded for each director
☐ Last KYC filing year and SRN recorded for each director
☐ Next triennial due date confirmed with the Company Secretary against current MCA guidance
☐ Registered mobile number tested — OTP actually received
☐ Registered email address tested — OTP actually received, and mailbox is not tied to a departed employee
☐ Any change in address, email or mobile in the last 30 days identified and filed
☐ DSC validity checked for every director likely to need an event-based filing
☐ Pending or draft KYC forms from before 31 March 2026 treated as cancelled; fresh filing made if needed
☐ HR/secretarial process updated so that a director’s change of address, email or mobile automatically opens a 30-day filing task
☐ DIN register created and owned by a named person, with a backup

---

Managing a board across multiple jurisdictions? Delhi Legal Company maintains DIN registers, tracks triennial and event-based KYC obligations, and handles DSC procurement and renewal for foreign directors of Indian subsidiaries — so that a change of address in one country does not deactivate a DIN in another.

---

11. Frequently Asked Questions

Q1. Is DIR-3 KYC still required every year?

Short answer: No — it is now once every three financial years.

With effect from 31 March 2026, DIR-3 KYC is required once in every three consecutive financial years instead of every year. MCA has described this as replacing the annual KYC requirement with a triennial abridged KYC, to reduce repetitive compliance while maintaining updated director data. The form has not been abolished — only the frequency of routine compliance has changed.

Q2. Which notification made this change, and when did it take effect?

Short answer: G.S.R. 943(E) dated 31 December 2025, effective 31 March 2026.

The Companies (Appointment and Qualification of Directors) Amendment Rules, 2025 were notified vide G.S.R. 943(E) dated 31 December 2025, amending Rule 12A of the Companies (Appointment and Qualification of Directors) Rules, 2014. The rules came into force on 31 March 2026.

Q3. What exactly does the amended Rule 12A say?

Short answer: File by 30 June following every third consecutive financial year.

Every individual who holds a DIN as on 31 March of a financial year must file KYC details through Form DIR-3 KYC Web on or before 30 June of the immediately following every third consecutive financial year.

Q4. Which form do I use now?

Short answer: Only Form DIR-3 KYC Web. The two old forms were merged.

Both the earlier DIR-3 KYC e-form and DIR-3 KYC Web have been merged into a single unified Form DIR-3 KYC Web. Most information is pre-filled from MCA records, reducing manual entry.

Q5. When is my next filing actually due?

Short answer: Verify it — commentary on the transition is genuinely inconsistent.

One widely stated position is that directors who completed KYC up to FY 2025-26 are automatically covered, with their next KYC due by 30 June 2028. Other commentary has treated 2026 as a filing year for all DIN holders active as on 31 March 2026. The divergence arises because no separate MCA circular or revised FAQ had been issued on the operational aspects when the amendment took effect, so the plain reading of Rule 12A was to prevail. Check your DIN status directly on the MCA portal and confirm your due year with your Company Secretary. If there is doubt about a 2026 date applying to you, file — the cost of an unnecessary filing is an hour; the cost of a missed one is ₹5,000 plus a cascade of blocked company filings.

Q6. I resigned from all my directorships. Do I still have to file?

Short answer: Yes, as long as you hold a DIN.

The obligation applies to every individual holding a DIN as on 31 March of a financial year, irrespective of whether that individual is currently appointed as a director in any company. The compliance obligation is tied to the DIN itself. If you genuinely have no further use for the DIN, the route is surrender — not silence.

Q7. My address changed. Can I wait until my next three-year filing?

Short answer: No. You have 30 days.

Under Rule 12A(2), any change in personal mobile number, email address or residential address must be intimated within 30 days of the change via Form DIR-3 KYC Web with the prescribed fee — regardless of where you are in the three-year compliance cycle. The two obligations run on completely separate tracks, and a change-based filing never alters the triennial cycle.

Q8. Do I need a CA or CS to certify the filing?

Short answer: Not for the routine three-year filing. Yes for change-based filings.

Routine three-year KYC filings do not require digital signatures or professional certification. Event-based filings for changes in contact details or address do require digital signature verification by the director and certification by a practising professional such as a CA, CS or CMA.

Q9. What happens if I miss the deadline?

Short answer: Your DIN is deactivated, and it costs ₹5,000 to revive.

Under the earlier regime, failure to file resulted in DIN deactivation, and that enforcement mechanism continues. Inactive DINs require a KYC-Web filing together with a reactivation fee of ₹5,000. The larger cost is indirect: a deactivated DIN blocks every MCA form requiring that director’s signature, which in turn generates separate late-filing penalties at company level.

Q10. I had a half-completed KYC form pending from before March 2026. Is it still valid?

Short answer: No. It was cancelled.

All pending DIR-3 KYC Web or DIR-3 KYC e-forms in Draft, Pending, or Pending-for-DSC-Upload-and-Payment status were marked as Cancelled from 31 March 2026, and directors need to file a fresh form.

Q11. Does this apply to LLP designated partners and foreign directors?

Short answer: Yes, to anyone holding a DIN.

All individuals holding an approved DIN as on 31 March must file, including directors of private limited companies, public companies, one person companies, Section 8 companies, LLPs, and foreign companies with Indian operations. Nationality and residence are irrelevant to the obligation — though they materially affect the practical difficulty of OTP delivery and DSC procurement.

Q12. Why did MCA make this change?

Short answer: To stop penalising directors whose details had not changed.

The annual compliance requirement often led to procedural defaults, particularly where no change in director particulars had occurred. The amendment reflects a clear intent to reduce repetitive compliance while retaining regulatory oversight over director identification data — without diluting the requirement of continuous updation of personal details. It aligns with the government’s broader ease-of-doing-business agenda, with the database kept accurate through event-based updates instead.

---

Disclaimer: This article is general information, not legal advice. MCA rules, forms, fees and transitional guidance change, and operational clarifications on the triennial regime may have been issued after August 2026. Verify your DIN status and specific due date on the MCA portal and take advice from your Company Secretary before relying on any date stated here.

---

Do baatein is article ke baare me:

Iska sabse bada differentiator Section 6 hai. Zyada tar ranking pages ek confident date bol dete hain — koi “30 June 2028” kehta hai, koi “30 September 2026”. Ye actually conflicting hai kyunki MCA ne amendment ke saath operational circular jaldi nahi diya tha. Maine conflict ko chhupaya nahi, sabhi positions dikha kar reader ko verify karne ka process diya hai. Google ke helpful-content signals ke liye ye strong hai, aur legally bhi yahi sahi approach hai.

Publish se pehle ek check zaroor karayein: apne CS se puchhiye ki August 2026 tak MCA ne koi FAQ ya circular issue kiya hai ya nahi. Agar haan, to Section 6 ko usse update kar dijiye — tab ye page us topic par sabse accurate resource ban jayega.

Aakhri article — Compliance Calendar TY 2026-27 for foreign-owned Indian companies — banau?