Consider the following statements: The Reserve Bank of India's recent directives relating to 'Storage of Payment System Data', popularly known as data diktat, command the payment system providers that 1. they shall ensure that entire data relating to payment systems operated by them are stored in a system only in India 2. they shall ensure that the systems are owned and operated by public sector enterprises 3. they shall submit the consolidated system audit report to the Comptroller and Auditor General of India by the end of the calendar year Which of the statements given above is/are correct?

1. Statement 1 is correct. The Reserve Bank of India's directive dated April 6, 2018, mandated that all Payment System Providers must ensure that the entire data (full end-to-end transaction details) relating to payment systems operated by them are stored in a system only in India. 2. Statement 2 is incorrect. The RBI directive did not specify that the systems must be owned and operated by public sector enterprises. The directive applied to all authorized payment system providers, regardless of ownership. 3. Statement 3 is incorrect. The directive required the submission of system audit reports to the RBI to demonstrate compliance, not to the Comptroller and Auditor General of India (CAG). 4. Therefore, only statement 1 is correct.