Demat 2.0: From Electronic Ownership Records To Programmable Securities Infrastructure

The enactment of the Depositories Act, 1996 initiated 'Demat 1.0', establishing an institutional electronic book-entry framework operated by registered depositories, National Securities Depository Limited ('NSDL') and Central Depository Services (India) Limited ('CDSL'). Demat 1.0 substituted physical certificates with fungible electronic records. However, while Demat 1.0 digitised record-keeping, the underlying market infrastructure remained structurally fragmented across distinct, asynchronous silos: the depository ledger, trading exchange matching engines, clearing corporations, commercial settlement banks, registrar and transfer agents ('RTAs'), and debenture trustees ('DTs'). This fragmentation required multi-day settlement cycles (T+1/T+2), complex multi-party reconciliations, trapped liquidity, and persistent pre-settlement counterparty risks.

SEBI's pilot launch of 'Demat 2.0' in coordination with the Reserve Bank of India (RBI) marks the next structural transformation. By integrating permissioned Distributed Ledger Technology ('DLT') with wholesale Central Bank Digital Currency ('CBDC-W') [a specialized digital form of a country's sovereign fiat currency issued directly by RBI], Demat 2.0 shifts market infrastructure from passive, centralised electronic databases to an active, programmable, shared ledger environment capable of executing simultaneous, instantaneous, atomic Delivery-versus-Payment ('DvP') for corporate debt securities.

II. From Dematerialisation to Tokenisation: Conceptual and Jurisprudential Foundations

A rigorous doctrinal distinction must be drawn between dematerialisation under Demat 1.0 and tokenisation under Demat 2.0. Under Section 9 of the Depositories Act, 1996, dematerialisation represents the conversion of a physical security into a fungible, centralised electronic entry. The electronic book entry is purely descriptive; it reflects ownership post facto, while corporate actions (such as coupon computations, record-date determinations, call/put options, and principal redemptions) depend upon extrinsic human workflows and external banking transfers.

Tokenisation, by contrast, embeds the security's legal terms, entitlement parameters, and execution logic directly into a cryptographically secured digital token governed by smart contracts on a distributed network. Under Demat 2.0, the ledger operates simultaneously as the immutable register of title and the deterministic execution engine for the security's lifecycle.

Crucially, Indian regulatory jurisprudence adopts a technology-neutral doctrine. In Internet and Mobile Association of India (IMAI) v. Reserve Bank of India,  the Supreme Court emphasised that regulatory measures addressing digital asset interfaces must be proportionate and calibrated. In alignment with this principle, SEBI has clarified that tokenisation under Demat 2.0 does not create a speculative or unregulated 'crypto-asset'; rather, it constitutes an advanced technological architecture for dematerialised securities under existing statutory regimes Sahara India Real Estate Corporation Ltd. Vs. Securities and Exchange Board of India 2012 LiveLaw (SC) 1. The underlying corporate bond remains a 'debenture' and a 'security' with unimpaired investor rights and statutory protections.

III. The Statutory and Regulatory Framework Governing Demat 2.0

The legal enforceability of Demat 2.0 rests upon the harmonious operation of several core statutes:

1. Depositories Act, 1996: Preservation of the Bifurcated Ownership Model

Sections 10 and 11 of the Depositories Act, 1996 codify the bifurcated ownership structure of Indian capital markets. The depository is entered in the issuer's register as the 'Registered Owner' for the purpose of effecting transfers. At the same time, the investor remains the 'Beneficial Owner' vested with all economic rights, voting entitlements, and enforcement remedies. Demat 2.0 retains this statutory anchor. Unlike permissionless public blockchains, where private key possession equates to absolute bearer title ('the possession model'), Demat 2.0 uses a permissioned DLT architecture in which the registered depository acts as the trusted root authority. This ensures that court orders, statutory transmissions, register rectifications, and pledge attachments remain legally effective.

2. SCRA, 1956 and SEBI Act, 1992: Scope of Securities Jurisdiction

Section 2(h) of the Securities Contracts (Regulation) Act, 1956 ('SCRA') expansively defines 'securities' to encompass bonds, debentures, and other marketable instruments of a body corporate. In Sahara India Real Estate Corporation Ltd. v. SEBI (supra), the Supreme Court established that SEBI exercises comprehensive jurisdiction over all marketable debt and hybrid instruments issued to the public. Section 11 of the SEBI Act, 1992, gives SEBI broad regulatory powers to deploy technological sandboxes and modernise market infrastructure while maintaining market integrity and investor protection.

3. Companies Act, 2013 and SEBI NCS Regulations, 2021

Section 71 of the Companies Act, 2013, read with the Companies (Share Capital and Debentures) Rules, 2014 and the SEBI (Issue and Listing of Non-Convertible Securities) Regulations, 2021 ('NCS Regulations'), governs the issuance of corporate debt securities. All statutory safeguards, including execution of a Debenture Trust Deed ('DTD'), appointment of an independent Debenture Trustee, asset cover maintenance, and charge registration with the Registrar of Companies ('RoC'), apply with full force to tokenised issuances. Demat 2.0 builds upon SEBI's earlier deployment of DLT for 'Security and Covenant Monitoring' by Debenture Trustees, extending DLT from passive covenant tracking to real-time transactional issuance and settlement.

4. Information Technology Act, 2000 and Evidentiary Enforceability

Sections 4 and 10A of the Information Technology Act, 2000 grant legal validity to electronic records and electronic contract execution. Smart-contract executions representing automated agreements between issuers, depositories, and investors are legally enforceable contracts under the Indian Contract Act, 1872. Transaction records stored on the permissioned DLT ledger are admissible in judicial proceedings under Section 63 of the Bharatiya Sakshya Adhiniyam, 2023 (replacing Section 65B of the repealed Indian Evidence Act, 1872), supported by cryptographically verified audit trails.

Structural Innovations and Market Benefits: 

The transition from Demat 1.0 to Demat 2.0 delivers four transformative structural efficiencies:

IV. Unresolved Regulatory Hurdles and Doctrinal Gaps

Notwithstanding its structural advantages, Demat 2.0 exposes critical doctrinal gaps that require rigorous legislative and regulatory resolution:

1. Statutory Settlement Finality and Insolvency Conflict

Section 23 of the Payment and Settlement Systems Act, 2007 ('PSS Act') accords statutory finality and irrevocability to netting procedures and settlement determinations approved by the RBI. Under Section 23(5), settlement determinations remain final notwithstanding the Insolvency and Bankruptcy Code, 2016 ('IBC') or the Companies Act, 2013. In Innoventive Industries Ltd. v. ICICI Bank 2017 INSC 837, the Supreme Court affirmed the primacy of statutory timelines under the IBC. In a distributed ledger environment characterized by probabilistic consensus or protocol reorganizations, an atomic settlement executed concurrently with the imposition of a moratorium under Section 14 of the IBC could trigger avoidance actions under Sections 43 (preferential transactions) and 45 (undervalued transactions) of the IBC. Demat 2.0 platforms must be formally recognised under Section 23 of the PSS Act to ensure unassailable settlement finality.

2.Jurisprudential Hierarchy: Smart Contracts vs. Transaction Documents

A critical doctrinal issue is the legal primacy between encoded smart contract logic and formally executed transaction documents (such as the Debenture Trust Deed and Information Memorandum). Where coding anomalies cause erroneous coupon disbursements or premature covenant default triggers, Indian jurisprudence firmly rejects the doctrine of 'code is law'. The established rule of construction prioritises statutory enactments, followed by executed transaction instruments, with smart contract code acting strictly as an execution mechanism.

3. Intermediary Insolvency and Key Custody Bankruptcy-Remoteness

In a tokenised architecture, cryptographic private keys govern asset control. In Swiss Ribbons Pvt. Ltd. v. Union of India and Embassy Property Developments Pvt. Ltd. v. State of Karnataka, the Supreme Court established that assets held by a corporate debtor in trust or as a bailee/custodian are excluded from the insolvency resolution estate under Section 36(4)(a) of the IBC. Demat 2.0 regulations must explicitly mandate that cryptographic keys and wallet addresses held by custodians, depositories, or node operators constitute statutory trust property, preventing attachment by Resolution Professionals or creditors.

V. Technological Vulnerabilities and Systemic Risks

The operational integrity of Demat 2.0 faces three key technical vulnerabilities:

1. Oracle Dependencies: Smart contracts cannot independently verify off-chain real-world events. Corporate bond lifecycle triggers, such as floating benchmark rate resets (MIBOR/Treasury), rating downgrade covenants, and valuation updates, rely on external oracle feeds. Corrupted or manipulated oracle data feeds could trigger catastrophic, automated covenant cross-defaults.

2. Cross-Ledger Interoperability Latency: Atomic DvP requires seamless cross-chain communication between the permissioned securities ledger (managed by depositories) and the wholesale CBDC ledger (operated under RBI oversight). Latency or bridge protocol failures could break transaction atomicity, resulting in locked collateral or uncredited funds.

3. Cybersecurity and Liability Allocation: While permissioned DLT structures mitigate public attack vectors, vulnerabilities in smart contract code or node host environments create systemic liability issues. Clear statutory rules must govern whether depository participants, software developers, or infrastructure operators bear strict liability for technological failure.

VI. Comparative Jurisprudential Paradigms and International Standards

International regulatory developments offer valuable benchmarks for India's Demat 2.0 roadmap:

1. CPMI-IOSCO, Principles for Financial Market Infrastructures (PFMI) Standards: The Bank for International Settlements (BIS) and the Financial Stability Board (FSB), headquartered in Basel, Switzerland, mandate that tokenised market infrastructures must strictly adhere to the Principles/ Standards for Financial Market Infrastructures (PFMI), particularly regarding legal certainty, governance, and settlement finality.

2. Switzerland (Federal DLT Act, 2021): Introduced the statutory category of 'ledger-based securities' (Registerwertrechte), granting entries on a distributed ledger full negotiable instrument status under Swiss civil law.

3. The United Kingdom Law Commission Digital Assets : Final Report, Law Com No.412 (2023),  formally recognized digital assets as a distinct 'third category' of personal property, ensuring strong common law protections while preserving the supremacy of contract law over code execution.

4. Monetary Authority of Singapore (MAS) Project Guardian: Established institutional pilot networks for tokenised fixed-income instruments and asset-backed debt within regulated, institutional trust anchors.

VII. Actionable Policy Recommendations for Stakeholders

1. For Regulators (SEBI & RBI): (a) Formally amend the Depositories Act, 1996 to recognise distributed ledger entries maintained by registered depositories as conclusive proof of title; (b) Issue a joint notification under Section 23 of the PSS Act, 2007 granting atomic DLT DvP transactions statutory settlement finality; (c) Establish a mandatory SEBI accreditation regime for independent smart-contract auditors before mainnet deployment (fully operational blockchain network where real transactions and value exchange happen); (d) Codify administrative reversal rules and circuit breakers for automated errors.

2. For Issuers and Debenture Trustees: (a) Incorporate unambiguous 'Contractual Supremacy' clauses in all Debenture Trust Deeds declaring that executed legal text unconditionally overrides smart contract code; (b) Integrate tokenised issuance infrastructure directly with SEBI's DLT Security and Covenant Monitoring platform (a blockchain-based platform developed by depositories under the guidance of the SEBI, that tracks non-convertible securities (NCS) like corporate bonds throughout their lifecycle) to ensure real-time asset cover compliance.

3. For Depositories and Technology Architects: (a) Deploy Multi-Party Computation (MPC) and Hardware Security Modules (HSM) for institutional key custody; (b) Implement decentralised, multi-sourced oracle feeds with outlier trimming; (c) Standardise cross-ledger interoperability protocols aligned with ISO 20022 messaging standards.

4. For Institutional and Retail Investors: (a) Review detailed risk disclosures covering both credit fundamentals and smart-contract operational parameters; (b) Utilise designated digital asset dispute resolution mechanisms within SEBI's SCORES 2.0 (an upgraded version of the SEBI Complaint Redress System, an online platform launched by the Securities and Exchange Board of India, to help investors lodge and track grievances in the securities market) and ODR (Online Dispute Resolution) framework.

Demat 2.0, thus represents a watershed moment in the evolution of India's securities market. By transitioning corporate debt infrastructure from passive electronic databases to programmable, cryptographically verified shared ledgers, Demat 2.0 eliminates counterparty settlement risk, compresses transaction costs, and deepens secondary liquidity.

However, the lasting success of this transition requires institutional anchoring, technological efficiency must be matched with rigorous jurisprudential certainty. By anchoring ownership in statutory depositories, securing statutory settlement finality against insolvency challenges, affirming the primacy of legal instruments over code, and enforcing robust technical safeguards, India can establish a globally benchmarked, resilient framework for programmable securities.

Author is a Senior Advocate practicing at Supreme Court of India. Views are personal.