SEBI ISIN-Level Buy-Back Freeze Signals Shift to Preventive Market Compliance

Compliance by Design: SEBI’s Turn Towards Preventive Market Architecture

Summary: Article discusses SEBI’s circular dated 21 July 2026, issued following the 1 July 2026 amendment to the SEBI (Buy-back of Securities) Regulations, 2018, which inserted Regulation 24(i)(ea) requiring depositories to freeze promoter and promoter-group holdings at the ISIN level from the date of approval of a buy-back until closure of the offer. The article states that the substantive prohibition on promoter dealings during a buy-back already existed, but the new framework embeds the restriction into market infrastructure by preventing transactions rather than relying on post-event enforcement. It notes limited exceptions for tendering shares in the tender-offer route and invocation or release of pre-existing encumbrances. The article also describes this as part of a broader regulatory pattern, referring to automated trading-window freezes under the SEBI (Prohibition of Insider Trading) Regulations, 2015 and the April 2025 circular extending such freezes to immediate relatives. It outlines potential benefits including prevention of inadvertent breaches and reduced compliance burden, while also discussing concerns relating to precision, dependence on accurate data, grievance redressal, and the distinction between automated permission and regulatory compliance, concluding that effective implementation depends on accurately designed systems.

SEBI’s Shift from Enforcement to Preventive Market Regulation

Indian securities regulation has for most of its history worked in a familiar sequence. A rule prescribes what a market participant may or may not do, the participant is trusted to comply, and if a breach occurs it is discovered and dealt with after the event through investigation, adjudication and penalty. SEBI’s circular dated 21 July 2026, which directs the depositories to put in place the operational framework for freezing promoter and promoter-group holdings at the ISIN level during a buy-back, reflects a quieter but more consequential change in that sequence. The freeze follows SEBI’s notification dated 1 July 2026 amending the SEBI (Buy-back of Securities) Regulations, 2018, which inserted Regulation 24(i)(ea) to provide for such freezing from the date the board of directors or the shareholders approve the buy-back until the offer closes. What deserves attention is not the freeze in itself, but the method it embodies. Rather than relying on a prohibition backed by enforcement after the fact, SEBI is building the restriction into the infrastructure of the market so that the prohibited transaction cannot take place at all.

Buy-Back Restrictions Already Existed—SEBI Has Changed the Enforcement Mechanism

The prohibition that the freeze gives effect to is not a new one. Even before the 2026 amendment, the buy-back framework obliged a company to ensure that its promoters did not deal in its shares, whether on the exchange or off-market, and including transfers among themselves, during the period from the board resolution approving the buy-back until the closure of the offer. The rationale is straightforward. During a buy-back the company is itself a buyer in its own securities, and the promoters sit on the inside of that process with a clear informational and structural advantage. Permitting them to trade in that window invites both the misuse of price-sensitive information and the distortion of the buy-back’s outcome.

The difficulty was always with enforcement. The prohibition operated as a legal command addressed to the company and its promoters, and its breach could only be established after the transaction had already been executed. The Oil India episode, where promoter transfers were found to have occurred during the buy-back window and the matter had to be taken up by SEBI, illustrates the older model at work. The transaction took place, it was detected, and it then became a subject of regulatory action. By that stage the market had already absorbed what the rule was meant to prevent.

How SEBI’s ISIN-Level Freeze on Promoter Shares Works

The ISIN-level freeze changes the point at which the regulation bites. From the date the buy-back is approved until the offer closes, the promoter and promoter-group demat holdings are frozen at the level of the ISIN, and the depositories are to operationalise that freeze on the basis of instructions issued by the listed company in a prescribed format. Two carve-outs are provided. Promoters may tender their shares in a buy-back conducted through the tender-offer route, and encumbrances created before the buy-back period may be invoked or released, with the freeze continuing to apply to the affected securities. Outside these situations the depository simply does not permit the promoter’s shares to move. The rule is no longer only a norm to be obeyed. It has become a condition of the system through which every transaction must pass.

It is worth being exact about what has changed and what has not. The substantive standard is the same as before. The promoter was never permitted to deal during the buy-back window. What is new is that the prohibition has been shifted from the domain of conduct, where compliance depends on the actor’s awareness and willingness, into the domain of architecture, where compliance is produced by the system irrespective of the actor’s intention.

SEBI’s Growing Use of Automated Compliance Systems

This is not an isolated step. The automated closure of the trading window under the SEBI (Prohibition of Insider Trading) Regulations, 2015 follows the same design. Since 2020, the PANs of designated persons have been frozen at the depository level during the trading-window closure that surrounds the declaration of results, so that a designated person cannot trade even if he wishes to. By the circular of April 2025, SEBI extended that automated freeze to the immediate relatives of designated persons, rolling it out in phases from July and October 2025. Here too the prohibition itself is old, contained in the code of conduct read with the Regulations. What was added was a mechanism that enforces it without depending on the honesty or the memory of the person restrained.

Read together, these measures reveal a consistent regulatory preference. Where the harm is serious, the class of persons restrained is capable of being identified, and the prohibited conduct can be described with reasonable precision, SEBI is choosing to prevent rather than to police. The freeze imposed at the level of the depository or the exchange, on data supplied by the listed company, is becoming the regulator’s instrument of first resort.

Benefits of SEBI’s Preventive Compliance Framework

There is a real gain in this approach. The extension of the trading-window freeze to immediate relatives was expressly aimed at curbing inadvertent breaches, and a prohibition that cannot be breached protects the market more reliably than one that can be breached and then punished. It does so without the delay, cost and uncertainty of enforcement proceedings, and without leaving behind a completed transaction that no penalty can fully undo. For the honest participant who might otherwise err through oversight, the system removes the risk of an unintended violation. For the compliance officer, it removes a substantial part of the manual burden of tracking and warning. In each of these respects the design serves both the market and the persons it restrains.

Challenges and Risks of Automated Compliance Enforcement

The strength of a hard technological restraint is also its weakness. A legal prohibition is applied by a decision-maker who can weigh intention, materiality, hardship and the availability of an exception. A freeze is binary. It permits or it blocks, and it does so without reference to the particular facts. That difference gives rise to several concerns that ought to be stated plainly.

The first is precision. A freeze is only as useful as its ability to recognise the transactions that the law in fact permits. The buy-back freeze itself carries exceptions for tendering shares and for the invocation or release of pre-existing encumbrances, and the operational framework must be capable of giving effect to each of them. Where the exceptions are not accurately built into the system, it will block transactions that the Regulations allow. The older model met such situations through applications and exemptions, as the insider-trading framework still does when it permits trading during a closed window on a genuine hardship. A freeze leaves far less room for that kind of case-by-case accommodation, and the room it does leave has to be designed in advance rather than found in the facts.

The second is the dependence on data. The freeze operates on legal categories such as promoter, promoter group, associates and immediate relatives, all of which must be translated into PANs and demat accounts by the listed company. The accuracy of the restraint therefore rests entirely on the accuracy of that mapping. An error in classification will either freeze a person who is free to trade or leave free a person who ought to be frozen, and it is not obvious on whom the responsibility for such an error should fall.

The third concerns adjudication and grievance. When a rule is enforced by a system rather than by an order, the ordinary features of the enforcement process, such as notice, a hearing, reasons and appeal, do not attach at the point at which the restraint operates. A person whose holding is wrongly frozen has no order to challenge. He has a system to correct. The circulars sensibly place the resolution of discrepancies with the depositories in coordination with the exchanges and the company, but that locates an important decision about a person’s ability to deal with his own property in an administrative process rather than a reasoned adjudicatory one.

The fourth is the risk of false comfort. If the system permits a transaction, a participant may be tempted to read that as a certificate of legality. It is nothing of the kind. The freeze enforces one specific prohibition. It does not validate the transaction against every other obligation that may apply to it. Treating architectural permission as regulatory clearance would be a serious mistake.

SEBI’s Risk-Based Regulatory Approach Across Market Segments

It would be wrong to read these developments as SEBI simply tightening its grip across the board. In other areas the regulator is moving in the opposite direction. In the treatment of alternative investment fund launches, for example, SEBI has been dismantling its pre-launch review and moving towards a regime in which a scheme launches on filing and is supervised, if at all, only afterwards. There the movement is from control before the event to supervision after it. In buy-backs and insider trading the movement is the reverse, from enforcement after the event to prevention before it. The two are not in conflict once the organising idea is seen. SEBI appears to be relaxing prior control where the participants are sophisticated and the risk falls largely on themselves, and hardening it where the conduct threatens the wider market or minority shareholders and can be prevented cleanly. Regulation is being matched to the nature of the harm and the sophistication of the actor, rather than pushed uniformly in a single direction.

The underlying observation, that SEBI is increasingly writing its rules into the working parts of the market rather than leaving them to be obeyed and then enforced, is sound. The approach is likely to make compliance more effective and to reduce both careless and deliberate breaches. But a preventive architecture carries a responsibility that a bare prohibition does not. A rule enforced only after the fact at least leaves room for judgment before the penalty falls. A rule built into the system acts first and explains later, if it explains at all. The task for the regulator, as this method expands, is to ensure that the systems are precise enough to recognise legitimate transactions and lawful exceptions, and that a person caught wrongly by an automated restraint has a quick and reasoned way out. The quality of securities regulation will then turn not only on how well the rules are drafted, but on how carefully the systems that enforce them are built.

******

The article has been co-authored by Garima Rajnish (Year III) and Arnav Roy (Year V), students at NLU Delhi.