RBI's draft data governance norms and DPDP rules are pushing banks and NBFCs to reassess fintech partnerships, contracts and third-party data risks