SEBI PIT Regulations: Structured Digital Database (SDD), UPSI Tracking & Form C/D Disclosures Guide

1. Executive Overview: Regulatory Architecture of Insider Trading in India

In modern capital markets, the preservation of market integrity and the equal dissemination of price-sensitive corporate data represent foundational pillars of investor protection. The Securities and Exchange Board of India (SEBI) fundamentally overhauled the insider trading regulatory regime by promulgating the SEBI (Prohibition of Insider Trading) Regulations, 2015 [SEBI (PIT) Regulations], which repealed the erstwhile 1992 framework. Following the landmark recommendations of the High-Level Committee chaired by Justice N.K. Sodhi and the Committee on Fair Market Conduct chaired by Dr. T.K. Viswanathan, the regulations shifted the enforcement paradigm from retrospective detection to prospective, digital audit trail tracking.

Central to this modern enforcement doctrine is the mandatory implementation of a Structured Digital Database (SDD) under Regulation 3(5) and Regulation 3(6). All listed companies, proposed-to-be-listed companies, and market intermediaries (including statutory auditors, merchant bankers, legal counsels, and credit rating agencies) are legally mandated to maintain an immutable, tamper-proof electronic repository capturing every instance of Unpublished Price Sensitive Information (UPSI) shared, along with timestamps, Permanent Account Numbers (PAN), and legal purposes. Coupled with strict trading window closure mandates under Schedule B and continual reporting in Form C and Form D under Regulation 7, the SEBI PIT compliance framework leaves no margin for administrative negligence. Leveraging governance platforms like assurePractice and automated notice management tools like assureNotice is vital for compliance officers, legal counsels, and corporate directors seeking to avoid punitive monetary fines and market bans under Section 15G of the SEBI Act, 1992.

2. Statutory Architecture: Key Pillars of SEBI (PIT) Regulations, 2015

To navigate the complex mesh of statutory obligations, compliance officers must analyze the six foundational pillars of the SEBI PIT regulatory framework:

Regulatory Pillar	Governing Regulation	Key Statutory Mandate & Scope
Prohibition on Communication of UPSI	Regulation 3(1) & 3(2)	Strictly prohibits insiders from communicating, providing, or allowing access to any UPSI to any person, except in furtherance of "legitimate purposes", performance of duties, or discharge of legal obligations.
Structured Digital Database (SDD)	Regulation 3(5) & 3(6)	Mandates maintaining an internal, non-tamperable digital database containing names, PAN/identification, timestamps, and nature of UPSI with non-editable audit trails, preserved for minimum 8 years.
Prohibition on Insider Trading	Regulation 4(1)	Prohibits any insider from trading in securities listed or proposed to be listed on a stock exchange when in possession of UPSI. Possession creates a legal presumption of motivation under the proviso.
Trading Window & Pre-Clearance	Schedule B (Code of Conduct)	Mandates closure of trading window from the end of every quarter until 48 hours after financial results declaration. Requires pre-clearance for trades exceeding threshold limits.
Contra-Trade Restrictions	Schedule B, Clause 10	Designated persons who buy or sell securities cannot execute a contra-trade (opposite transaction) for a minimum period of six months from the date of the trade.
Continual Disclosures (Form C / D)	Regulation 7(2) & 7(3)	Mandatory disclosure within 2 trading days by promoters, directors, and designated persons if traded value exceeds ₹10 Lakhs over a calendar quarter.

3. Deep-Dive Technical Mechanics & Procedural Stages under SEBI PIT

3.1 Identifying Unpublished Price Sensitive Information (UPSI)

Under Regulation 2(1)(n), UPSI means any information, relating to a company or its securities, directly or indirectly, that is not generally available, which upon becoming generally available, is likely to materially affect the price of the securities. The regulation establishes six deemed categories of UPSI:

1. Financial results (quarterly, half-yearly, and annual);
2. Dividends (both interim and final);
3. Change in capital structure (rights issue, bonus issue, buyback, split, preferential allotment);
4. Mergers, demergers, acquisitions, delistings, disposals and expansion of business, and such other transactions;
5. Changes in Key Managerial Personnel (KMP); and
6. Any other event specified by the Board of Directors or policy of the company.

3.2 Structured Digital Database (SDD) Mandate: Regulation 3(5) & 3(6)

Regulation 3(5) was enacted to eliminate post-facto rationalizations and backdated record creation. It requires the Board of Directors or head(s) of the organization of every person required to handle UPSI to ensure that a Structured Digital Database is maintained containing the following information:

• Identity of the Provider: Name and PAN (or any other identifier authorized by law where PAN is not available) of the person who shared the information.
• Identity of the Recipient: Name and PAN of the person or entity with whom the information was shared.
• Nature of UPSI: Specific category or subject matter of UPSI (e.g., Q2 FY25 financial results, proposed acquisition of Target Ltd).
• Timestamps: Exact date and time when the information was shared.
• Legitimate Purpose Justification: Concrete documentation of why the UPSI was shared under Regulation 3(2A).
• Non-Tamperable Audit Trail: The software must have internal controls and time-stamped audit logs that prevent any modification, deletion, or backdating. Spreadsheets (e.g., Microsoft Excel or Google Sheets) are strictly impermissible as an SDD because cells and timestamps can be modified.
• Preservation Period: Under Regulation 3(6), the database must be preserved for a minimum period of eight years after completion of the relevant transactions. In the event of an ongoing investigation by SEBI, the records must be preserved indefinitely until completion of the proceedings.
• Quarterly Compliance Certificate: Listed companies must submit a certificate signed by the Compliance Officer to the stock exchanges (BSE/NSE) every quarter confirming that the SDD is operational, compliant, and non-tamperable.

3.3 The "Legitimate Purpose" Doctrine & Regulation 3(2A)

Regulation 3(2A) requires the board of directors of a listed company to formulate a written policy setting forth "Legitimate Purposes" as part of the Codes of Fair Disclosure and Conduct. A legitimate purpose includes sharing UPSI in the ordinary course of business by an insider with:

• Partners, collaborators, lenders, customers, suppliers;
• Merchant bankers, legal advisors, statutory auditors, secretarial auditors, insolvency professionals, or other advisors or consultants;

Provided that such sharing has not been carried out to evade or circumvent the prohibitions of these regulations. Any person in receipt of UPSI pursuant to a "legitimate purpose" is legally considered an "insider" under Regulation 2(1)(g), and due notice must be given to maintain confidentiality.

3.4 Trading Window Closure & Pre-Clearance Framework

Clause 4 of Schedule B mandates that the compliance officer shall close the trading window when designated persons or their immediate relatives can reasonably be expected to have possession of UPSI:

• Mandatory Quarterly Closure: The trading window closure must commence from the end of every quarter (e.g., March 31, June 30, September 30, December 31) and remain closed until 48 hours after the declaration of financial results to the stock exchanges.
• Pre-Clearance of Trades: When the trading window is open, designated persons intending to trade beyond the monetary threshold fixed by the board (typically ₹10 Lakhs in market value or 10,000 shares) must submit an application for pre-clearance to the Compliance Officer.
• Execution & Reporting: Pre-cleared trades must be executed within 7 trading days from approval; if not executed, fresh pre-clearance must be obtained.

3.5 Continual Disclosures: Form C & Form D

Under Regulation 7(2)(a), every promoter, member of the promoter group, designated person, and director of every company shall disclose to the company the number of such securities acquired or disposed of within two trading days of such transaction if the value of the securities traded, whether in one transaction or a series of transactions over any calendar quarter, aggregates to a traded value in excess of ₹10 Lakhs. The disclosure is made in Form C.

Under Regulation 7(2)(b), the company must notify the stock exchanges within two trading days of receipt of Form C or from becoming aware of such information. Disclosures by other connected persons are captured in Form D under Regulation 7(3).

3.6 Penal Consequences under SEBI Act, 1992

Non-compliance with SEBI PIT Regulations triggers severe penal enforcement:

• Section 15G of the SEBI Act, 1992: Imposes a monetary penalty of not less than ₹10 Lakhs, which may extend up to ₹25 Crore or three times the amount of profits made out of insider trading, whichever is higher.
• Section 15HB of the SEBI Act, 1992: General penalty for failure to maintain SDD or comply with procedural code of conduct: penalty up to ₹1 Crore.
• Section 11 & 11B Directions: SEBI may issue directions debarring insiders from accessing securities markets, prohibiting directorships in listed entities, and ordering impounding/disgorgement of wrongful profits along with 12% interest.

4. Practical Examples, Case Studies & Numerical Illustrations

The following seven detailed case studies examine real-world compliance failures, regulatory enforcement actions, and defensible compliance strategies under SEBI PIT Regulations.

Case Study 1: Non-Maintenance of SDD / Excel-Based Database Penalized by SEBI

Context & Facts: During a thematic inspection of M/s Vertex Infotech Ltd, SEBI called for the Structured Digital Database for FY 2022-23 to investigate suspected insider trading prior to a major bonus issue announcement. The company produced an Excel spreadsheet containing names of directors, discussion dates, and subject lines. The file properties revealed multiple edits and changes made subsequent to the SEBI query letter.

Regulatory Adjudication & Penalty:

1. Violation of Regulation 3(5): SEBI held that maintaining records in Microsoft Excel or Google Sheets does not satisfy Regulation 3(5). The regulation strictly mandates a software database with an internal, non-tamperable audit trail that logs exact creation timestamps, user credentials, and prevents overwriting.
2. False Quarterly Certificate: The Compliance Officer had submitted quarterly compliance certificates to BSE and NSE certifying full compliance with SDD requirements. SEBI treated this as a false regulatory declaration.
3. Penalty Imposed under Section 15HB: The SEBI Adjudicating Officer imposed a penalty of ₹15,00,000 on the company and a personal penalty of ₹5,00,000 on the Compliance Officer. Implementing an enterprise-grade SDD workflow through assurePractice guarantees automated, cryptographic audit trails meeting SEBI's strict standards.

Case Study 2: Determination of UPSI Leakage During M&A Due Diligence

Context & Facts: M/s Stellar Pharma Ltd initiated confidential negotiations on August 10, 2024, to acquire a 65% controlling stake in an unlisted biotechnology firm for ₹450 Crore. The deal was shared with the legal counsel, statutory auditors, and investment bankers. An employee of the investment banking firm leaked the proposed valuation on WhatsApp on September 1, causing the target's listed peer group and Stellar's stock to surge by 14%.

Enforcement Analysis & Evidentiary Trail:

• SEBI tracked abnormal trading volumes and examined Stellar's SDD entries.
• Stellar had executed Non-Disclosure Agreements (NDAs) and recorded the exact timestamps, PANs, and legitimate purpose justifications for the investment bank's deal team on August 10 in its SDD.
• Because Stellar's internal records were immutable, SEBI exonerated the listed company and focused its enforcement action under Section 15G directly on the rogue employee of the intermediary. Managing notice inquiries with assureNotice allows listed companies to produce instantaneous audit logs during preliminary SEBI summons.

Case Study 3: Immediate Relative Trading During Blackout Window

Context & Facts: The financial results of M/s Apex Steel Ltd for the quarter ended September 30, 2024, were approved by the Board on October 25, 2024. The trading window was closed from October 1 to October 27 (48 hours after board meeting). On October 12, the spouse of the Chief Financial Officer (CFO) sold 5,000 equity shares of Apex Steel Ltd valued at ₹32,50,000 through her personal demat account to fund a residential property booking advance.

Statutory Presumption & Code of Conduct Penalties:

• Under Regulation 2(1)(f) and Schedule B, "Designated Persons" includes the immediate relatives of such designated persons (spouse, children, financially dependent parents/siblings).
• The spouse traded during a strictly closed trading window. Under Regulation 4(1), an insider who trades while in possession of UPSI is presumed to have been motivated by UPSI. Personal liquidity needs or property booking advances are not valid legal defenses.
• Company Internal Code of Conduct Action: The Audit Committee directed the CFO to:
  1. Deposit the entire sale proceeds / profit of ₹4,80,000 into SEBI's Investor Protection and Education Fund (IPEF);
  2. Imposed a monetary penalty of ₹2,00,000 on the CFO; and
  3. Issued a formal reprimand warning letter. The company promptly reported the violation to the stock exchanges in the standardized format prescribed by SEBI.

Case Study 4: Breach of ₹10 Lakhs Continual Disclosure Threshold (Form C)

Context & Facts: A Designated Person (Vice President - Operations) of M/s Horizon Energy Ltd executed three open-market purchases of the company's shares in Q2 FY 2024-25:

Transaction Date	Transaction Type	Quantity	Trade Value	Cumulative Traded Value in Quarter
July 14, 2024	Market Buy	1,000 shares @ ₹420	₹4,20,000	₹4,20,000 (Below threshold)
August 05, 2024	Market Buy	1,000 shares @ ₹440	₹4,40,000	₹8,60,000 (Below threshold)
August 22, 2024	Market Buy	500 shares @ ₹460	₹2,30,000	₹10,90,000 (Breaches ₹10 Lakhs threshold)

Reporting Obligations:

• On August 22, 2024, the cumulative traded value in the calendar quarter crossed ₹10,00,000.
• The Designated Person was legally required to file Form C with the company within two trading days (i.e., on or before August 26, 2024).
• The company, in turn, was required to intimate BSE and NSE within two trading days of receipt of Form C.
• The employee failed to submit Form C until October 15. The stock exchange issued an automated non-compliance alert. The company penalized the employee ₹50,000 under its internal code of conduct and reported the delayed disclosure to SEBI.

Case Study 5: Pre-Clearance & The 6-Month Contra-Trade Restriction

Context & Facts: On May 10, 2024, an Executive Director of M/s Zenith Consumer Ltd obtained pre-clearance from the Compliance Officer to purchase 10,000 shares @ ₹250 (Total: ₹25,00,000). The trade was duly executed on May 12. On September 20, 2024 (4 months and 8 days later), the stock price surged to ₹410. The Director sold 10,000 shares, generating a profit of ₹16,00,000.

Violation of Contra-Trade Prohibition:

• Under Clause 10 of Schedule B, designated persons who buy or sell securities shall not enter into an opposite transaction (contra-trade) during the next six months following the prior transaction.
• The sale on September 20 occurred within the 6-month cooling period, constituting an illegal contra-trade under SEBI PIT Regulations. The fact that the Compliance Officer inadvertently granted pre-clearance does not legalize the trade.
• Disgorgement: Under Schedule B, the entire gain of ₹16,00,000 was surrendered by the Director and remitted directly to SEBI's Investor Protection and Education Fund (IPEF).

Case Study 6: Intermediary & Fiduciary SDD Obligations under Regulation 9A

Context & Facts: M/s Alpha Legal Partners, a law firm advising a listed infrastructure developer on a restructuring scheme, failed to maintain an independent Structured Digital Database, believing that only listed companies are covered by Regulation 3(5).

Statutory Analysis of Regulation 9A:

• Regulation 9A(1) read with Regulation 3(5) explicitly extends the SDD mandate to fiduciaries and intermediaries—including law firms, auditing firms, merchant bankers, and consultants who handle UPSI in the course of business.
• The law firm was required to maintain an SDD logging every client matter involving UPSI and every partner/associate who had access to the data.
• SEBI issued an administrative warning to the law firm, directing it to install compliant SDD software within 30 days. Fiduciaries utilizing assurePractice can easily segment client databases and establish automated Chinese walls.

Case Study 7: Trading Plan Defense under Regulation 5

Context & Facts: A non-executive director who regularly possesses UPSI regarding clinical trials formulated a pre-determined Trading Plan under Regulation 5 on January 15, 2024, to sell 20,000 shares over a 12-month period.

Statutory Conditions for Valid Trading Plan:

1. The plan cannot commence trading earlier than six months from public disclosure of the plan (i.e., no trades before July 15, 2024).
2. The plan cannot entail trading between the 20th trading day prior to the last day of any financial period and the 2nd trading day after disclosure of results.
3. The plan must be irrevocable and mandatorily executed without any deviation.
4. Outcome: When the director sold shares on August 10 during an unannounced drug patent approval, SEBI verified that the trade was executed strictly pursuant to the pre-approved Trading Plan published on stock exchanges. The director was fully protected under Regulation 5(1).

5. 10-Step Practitioner Audit Verification Program for SEBI PIT Compliance

Compliance officers, company secretaries, and audit committees should execute this 10-step audit protocol every quarter:

Step #	Audit Verification Domain	Key Verification Actions & Evidentiary Records	Regulatory Reference
Step 1	SDD Software Audit & Integrity Check	Verify that SDD software maintains non-tamperable audit trails, prevents entry edits/backdating, and logs database administrator (DBA) access.	Regulation 3(5) & 3(6)
Step 2	UPSI Logging Completeness	Cross-reference all Board Meeting and Audit Committee agenda items with SDD entries to confirm that all price-sensitive matters were logged.	Regulation 2(1)(n) & 3(5)
Step 3	Recipient PAN & Identification Validation	Verify that every entry in the SDD contains the verified PAN or government ID of the insider and the recipient entity.	Regulation 3(5)
Step 4	Legitimate Purpose Documentation	Review written confidentiality agreements, NDAs, and formal notice of confidentiality served to third-party consultants and advisors.	Regulation 3(2A)
Step 5	Trading Window Closure Intimations	Verify timely stock exchange intimation and internal email notifications for trading window closures prior to quarter-ends.	Schedule B, Clause 4
Step 6	Designated Persons List Maintenance	Audit the roster of Designated Persons, ensuring it covers promoters, directors, KMPs, executive assistants, and senior finance/legal personnel.	Regulation 9(4)
Step 7	Pre-Clearance Process Verification	Verify that all trades exceeding internal thresholds received prior written pre-clearance and were executed within 7 trading days.	Schedule B, Clause 6
Step 8	Contra-Trade Surveillance	Analyze depository Benpos movements against pre-clearance records to verify that no designated person executed an opposite trade within 6 months.	Schedule B, Clause 10
Step 9	Continual Disclosure (Form C) Reconciliation	Match traded values exceeding ₹10 Lakhs with Form C filings received and confirm onward reporting to stock exchanges within 2 trading days.	Regulation 7(2)
Step 10	Quarterly Secretarial Compliance Certification	Present SDD compliance report and audit trail certificates to the Audit Committee and file quarterly compliance certificate with BSE/NSE.	Regulation 3(5) & Circulars

6. Elevating Capital Market Compliance with the AssureOffice Suite

Modern securities law compliance demands automated workflows that seamlessly bridge corporate secretarial governance and digital audit trails:

• assurePractice: Empowers listed companies, corporate secretarial teams, and intermediaries to manage Designated Person databases, log UPSI entries with automated cryptographic timestamps, generate Form C and Form D filings, and issue pre-clearance approvals with automated contra-trade validation.
• assureNotice: The premier enterprise solution for managing regulatory inquiries, show-cause notices from SEBI and stock exchanges, and tracking adjudication hearings under Section 15G and Section 15HB.
• assureFinancials: Provides automated financial reporting schedules, ensuring that preliminary financial result figures are securely locked with restricted user permissions prior to board approvals.
• assureTax: Streamlines corporate tax calculations, advance tax planning, and capital gains computations on executive ESOP allotments and share disposals.

7. Comprehensive Practitioner FAQs on SEBI PIT & SDD Compliance

Q1: Can a company maintain its Structured Digital Database (SDD) on an encrypted Microsoft Excel sheet?

No. SEBI has explicitly clarified through FAQs and adjudication orders that spreadsheets (Excel, Google Sheets, etc.) do not qualify as a Structured Digital Database under Regulation 3(5), regardless of password protection or encryption. The software must possess an automated, internal, non-tamperable audit trail that logs creation dates, modifications, and user identities without administrative overwrite capabilities.

Q2: Can the SDD software be hosted on a cloud server maintained by an external third-party vendor?

Yes, provided that the cloud infrastructure ensures absolute data privacy, strict access controls, and non-tamperable audit trails. However, the legal responsibility for the security, integrity, and confidentiality of the database remains strictly with the Board of Directors and Compliance Officer of the listed entity.

Q3: Does the SDD requirement apply to private unlisted companies?

No, not generally. However, if an unlisted company has listed debt securities (e.g., non-convertible debentures), or is a "proposed to be listed" entity that has filed draft offer documents with SEBI, the SDD requirements apply in full force under Regulation 3(5).

Q4: Are statutory auditors, merchant bankers, and legal counsels required to maintain their own separate SDD?

Yes. Under Regulation 9A read with Regulation 3(5), every intermediary and fiduciary (including accounting firms, legal advisors, credit rating agencies, and investment bankers) that handles UPSI in the course of business must maintain an independent SDD.

Q5: What is the monetary threshold for reporting continual disclosures under Form C?

Under Regulation 7(2)(a), disclosure in Form C is triggered when the value of securities traded, whether in one transaction or a series of transactions over any calendar quarter, aggregates to a traded value in excess of ₹10,00,000 (Rupees Ten Lakhs).

Q6: Does the ₹10 Lakhs threshold apply on a gross basis or net basis?

The threshold applies on a gross traded value basis. For example, if a designated person buys shares worth ₹6 Lakhs and sells shares worth ₹5 Lakhs in the same calendar quarter, the aggregate traded value is ₹11 Lakhs, triggering mandatory Form C reporting.

Q7: Can a Designated Person trade in shares during the trading window closure if they do not possess any UPSI?

No. The closure of the trading window is an absolute statutory prohibition. During the blackout period, designated persons and their immediate relatives cannot trade in securities of the company, regardless of whether they actually possess UPSI or not.

Q8: Are gifts, off-market transfers, and pledge of shares covered under "trading"?

Yes. Under Regulation 2(1)(l), "trading" means and includes subscribing, redeeming, buying, selling, dealing, or agreeing to subscribe, redeem, buy, sell, or deal in any securities. Therefore, gifts of shares, off-market transfers, and invocation of pledges constitute trading under SEBI PIT Regulations.

Q9: How long must entries in the Structured Digital Database be preserved?

Under Regulation 3(6), the database must be preserved for a minimum period of eight years after completion of the relevant transactions. In the event of an ongoing investigation or enforcement proceeding by SEBI, the records must be retained indefinitely until completion of the proceedings.

Q10: What is the statutory time limit for the company to intimate stock exchanges after receiving Form C?

Under Regulation 7(2)(b), the company must intimate the stock exchanges on which the securities are listed within two trading days of receipt of Form C or from becoming aware of such transaction.

Q11: Can the Compliance Officer grant a relaxation or waiver from the 6-month contra-trade restriction?

Under Schedule B, Clause 10, the Compliance Officer may grant relaxation from the contra-trade restriction for reasons to be recorded in writing, provided that such relaxation does not violate these regulations (e.g., in cases of extreme personal financial emergencies). However, no relaxation can be granted if the trade was executed when the trading window was closed or while in possession of UPSI.

Q12: Does exercising Employee Stock Options (ESOPs) attract the contra-trade restriction?

No. SEBI has clarified that the exercise of ESOPs (converting options into shares) is not considered a purchase for the purpose of contra-trade restrictions. However, the subsequent sale of shares acquired through ESOPs is considered a sale and cannot be followed by an open-market purchase within six months.

Q13: Who is responsible for maintaining the SDD if the company has not appointed a whole-time Company Secretary?

The Board of Directors is legally responsible under Regulation 3(5). The Board may specifically delegate the operational maintenance to an officer designated as the Compliance Officer, but the ultimate fiduciary responsibility rests with the Board of Directors.

Q14: Are buyback offers, rights issues, and open offers exempt from the trading window closure?

Yes. Transactions undertaken pursuant to tender offers (such as participating in a share buyback, open offer under SEBI SAST Regulations, or subscribing to rights issues) are generally exempt from trading window restrictions because they are offered to all shareholders on a non-discriminatory basis.

Q15: What penalties can SEBI impose on an individual for communicating UPSI without legitimate purpose?

Under Section 15G of the SEBI Act, 1992, communicating UPSI attracts a penalty of not less than ₹10 Lakhs, extending up to ₹25 Crore or three times the amount of profits made, whichever is higher, along with potential criminal prosecution under Section 24.

Q16: How does assurePractice assist listed companies in maintaining SEBI PIT compliance?

assurePractice provides an automated, immutable Structured Digital Database with tamper-proof audit trails, automated pre-clearance workflows, contra-trade alerts, instant Form C/D generation, and quarterly compliance certification dashboards designed specifically for corporate secretarial and compliance teams.