DIR-3 KYC moves to a three-year cycle — what directors should do this year

The Ministry of Corporate Affairs has replaced the annual DIR-3 KYC rhythm with a three-year cycle. By the Companies (Appointment and Qualification of Directors) Amendment Rules, 2025 (notified on 31 December 2025 and effective 31 March 2026), an individual holding a Director Identification Number is required to file the KYC intimation once every third financial year via DIR-3 KYC Web, rather than every 30 September as before. The e-form DIR-3 KYC (as distinct from the Web variant) is still used in the first year of allotment of a DIN and whenever any of the KYC particulars — mobile number, email, address, PAN details — have changed since the last filing.

For most directors of a Private Limited company whose KYC particulars have not changed, this is a genuine simplification. Instead of a yearly calendar entry, the KYC filing now sits in the compliance file as a triennial event. The date the cycle resets from is the last filing the director made — not a common cut-off date shared across the register.

The one thing not to get wrong is the change-of-particulars rule. If any of the KYC data on record has changed — a new address, a new mobile number, a new email — the director must file the full e-form DIR-3 KYC in that financial year, regardless of where they are in the three-year cycle. The amendment rules require this update to be made within 30 days of the change. Missing this puts the DIN at risk of being marked as deactivated, and reactivation carries a fee under the LSF regime.

Two practical consequences follow. First, the internal compliance calendar should now record, for each director, both the last date of KYC filing and the earliest date in the third financial year from that filing. A single field 'KYC due date' on a per-year template is no longer adequate. Second, whenever a director communicates a change of address or contact particulars — for example, at the start of a new financial year or in the run-up to an AGM — the compliance owner should confirm whether the change triggers a fresh DIR-3 KYC filing in that year.

For directors who have been filing DIR-3 KYC Web on autopilot every September, the risk in the first year of the new regime is not that the filing is missed, but that it is filed unnecessarily and the cycle is misread. The rule is not 'file every year unless waived'; it is 'file once every third financial year, and additionally whenever particulars change'.

Directors who hold DINs across multiple companies should note that the KYC obligation attaches to the DIN, not to the company. One filing covers the individual across all directorships. The internal compliance calendar of each company should nonetheless track the director's KYC status, because a deactivated DIN carries downstream consequences — DSC-linked filings that require the director's signature will fail until the DIN is reactivated.

None of this is difficult to operate once the calendar is rebuilt. It is worth doing that rebuild before the first triennial due date arrives, rather than at the deadline.