Kenyan Regulatory Architecture and Supervisory Authorities
Kenya regulates financial services through a sectoral model rather than a single unified authority. The exam tests whether you can map an activity to the correct statute and supervisor, and whether you understand where mandates overlap.
Statutory anchors
- CBK: Banking Act (Cap 488), CBK Act (Cap 491), National Payment System Act 2011, Microfinance Act 2006, Digital Credit Providers Regulations 2022.
- CMA: Capital Markets Act (Cap 485A), public offers, listing, intermediaries, CIS, REITs, derivatives and takeovers.
- IRA (Insurance Act Cap 487), RBA (Retirement Benefits Act 1997), SASRA (Sacco Societies Act 2008 for deposit-taking SACCOs).
- FRC (POCAMLA 2009) is the financial intelligence unit; ODPC (Data Protection Act 2019); CAK (Competition Act 2010); the National Treasury sets policy.
Boundaries
There is no passporting: a bank licence does not authorise securities business. CBK has financial-stability and payments oversight; CMA is both securities regulator and market-development body, with appeals to the Capital Markets Tribunal. FRC receives AML reports but does not license banks. SASRA does not regulate non-deposit-taking SACCOs; those fall under the Commissioner for Co-operative Development.
Worked example
A fintech proposes a mobile wallet that also pools customer funds into a money-market fund. CBK licensing is needed for the payment service under the NPS Act; CMA licensing is needed for the fund manager/CIS and any investment advice; ODPC registration is needed for personal data; FRC registration applies if it becomes a reporting institution; CAK review may apply for competition and consumer terms. The reasoning is activity-based: each regulated activity triggers its own gateway.
Traps
Assuming one group licence covers all subsidiaries; treating FRC as a prudential supervisor; sending a prospectus to CBK; assuming CMA regulates bank deposits; forgetting SASRA's deposit-taking limitation.