By Morara Lewis
"Every day is a bank account, and time is our currency. No one is rich, no one is poor, we've got 24 hours each." ~Christopher Rice
The financial services industry has undergone significant changes with the rise of technological innovations in Fintech. These advancements present both opportunities and risks for consumers, investors, and the overall stability of the financial system. [i]Financial regulation plays a crucial role in managing these risks and ensuring the integrity of the financial sector. Fintech has the potential to drive economic growth, reduce poverty, and promote financial inclusion and efficiency.[ii] Recognising the implications of emerging technologies, financial authorities are adapting their policy frameworks and offering guidance to navigate the evolving landscape of the financial sector.[iii] Traditionally, banks have relied on manual methods to collect and store customer information, maintaining hardcopy records.[iv] However, with the advent of the digital era, banks have undergone a significant transformation, transitioning to virtual data collection and storage practices.[v] In this new landscape, banks have shifted their focus to ensuring the security of digital information, protecting their servers, and safeguarding vast repositories of personal and sensitive data.[vi] This shift reflects the changing dynamics of the banking industry as it adapts to the challenges and opportunities presented by the digital age.[vii]
The concern surrounding data storage has evolved, with a shift towards virtual storage methods.[viii] Enterprises, including banks, now prioritise protecting themselves against large-scale cyber-attacks due to the potentially catastrophic financial consequences.[ix] Furthermore, automation has revolutionised the financial services sector, transforming various aspects of banking. Computerised tellers, digital record keeping, and electronic payment systems have replaced traditional methods, allowing transactions and operations to be completed instantly with a simple click of a button.[x] These advancements have brought convenience and efficiency to the industry, streamlining processes for both banks and customers.
The advent of online banking through the internet has brought about a profound transformation in the banking industry.[xi] Banks are now able to operate on a global scale by leveraging cloud technology, allowing for seamless sharing of information across different locations and with individuals worldwide.[xii] This digitisation has significantly benefited banks, enabling customers to access their accounts from any internet-enabled device. As a result, new financial hubs have emerged, facilitating global business transactions with greater ease of access and connectivity.[xiii] With the rise of new banks and financial institutions, there has been a corresponding expansion in the size of their infrastructures and Information Technology (IT) specialists.[xiv] This growth has also led to a significant increase in the volume of data being shared within the industry. However, along with these developments, there has been a surge in the areas that are vulnerable to potential cyber-attacks.[xv] The expanding digital landscape has brought forth new challenges and risks that need to be addressed in order to safeguard the security and integrity of financial systems.[xvi]
In the past, banks only had to worry about the security of their server rooms, but now security has shifted to become an enterprise-wide concern. A vast amount of the data that financial industries store is highly sensitive and can easily be shared internally and accessed by hackers, so security is absolutely imperative in every aspect of the business. [xvii]
With the recent technological advances, there has been a significant growth in digital lending in Kenya with an annual digital lending market estimated in the range of Kshs 39-195 billion.[xviii] The rapid growth of digital money lending platforms can be attributed to their accessibility, particularly for the unbanked population, and their convenience compared to traditional banks.[xix] This trend has sparked discussions about whether these platforms are gradually assuming the roles traditionally performed by banks and whether regulatory measures should be in place, if they are not already, to govern their operations.[xx] The emergence of these platforms raises important considerations regarding consumer protection, fair lending practices, and the overall stability of the financial system. The Banking sector is regulated by the Central Bank of Kenya.[xxi] However, with internet banking fast taking root, concerns abound as to whether the regulator can match up. This is mostly attributable to the mobile money lending platforms such as Tala and Branch which remained unregulated until the amendment of the Central Bank of Kenya Act.[xxii]
In the new law, the monetary authority i.e., the Central Bank of Kenya (CBK) has the power to regulate the industry and take action on those that violate consumer privacy.[xxiii] Some of the salient features of the amended Act include the registration of digital credit providers. To facilitate the transition to the regulatory ambit, CBK requested all existing digital credit providers to submit their business details by January 21, 2022 (now past).[xxiv] The expansion of the digital credit industry brought about public concerns regarding the costs, misuse of personal information, and unethical debt collection methods employed by unregulated digital credit providers. In response to these concerns, the Data Protection Act was enacted. The primary purpose of this Act is to regulate the processing of personal data, safeguard the rights of data subjects, and define the responsibilities of data controllers and processors. Its implementation aims to address these issues and establish a framework for the proper handling and protection of personal data in the digital credit sector.[xxv]
Despite previous unsuccessful attempts to regulate digital lending and address consumer risks, the implementation of the Amendment Act represents a positive and welcomed step forward.[xxvi] The inclusion of licensing requirements and compliance with the Data Protection Act will foster accountability among digital credit providers. However, the emergence of Fintech developments presents challenges that extend beyond the conventional purview of financial authorities, and the rapid pace of innovation poses difficulties for regulators to respond promptly. Furthermore, there may be trade-offs between different policy objectives that need careful consideration in this evolving landscape.[xxvii]
More needs to be done by key players in the financial sector to redefine the sector. For starters, embracing technological integration where banks should prioritise the integration of Artificial Intelligence (AI) and Fintech solutions into their existing systems.[xxviii] This includes adopting advanced analytics, machine learning algorithms, and robotic process automation to enhance operational efficiency, customer experience, and risk management.[xxix] Besides, collaboration should be fostered between banks, Fintech startups and technology companies to leverage their expertise and innovative solutions. This can be done through partnerships, joint ventures, or investment in Fintech firms. Collaboration enables banks to access cutting-edge technologies and expand their service offerings.[xxx]
Much more can be done about the regulatory framework as well. The regulatory framework should be updated to accommodate the evolving landscape of AI and Fintech in the banking industry. Regulators should strike a balance between fostering innovation and ensuring consumer protection, data privacy, and cybersecurity.[xxxi] Clear guidelines and regulations can provide a favourable environment for the responsible and ethical use of AI and Fintech.[xxxii] At the heart of this should be continuous learning and adaptation as banks should foster a culture of continuous learning and adaptation to stay abreast of emerging technologies and industry trends. This can be achieved through training programs, knowledge sharing platforms, and collaboration with academia and research institutions.[xxxiii]
[i] Financial Stability Institute, 'Policy responses to Fintech a cross-country overview' January 2020<https://www.bis.org/fsi/publ/insights23.pdf> on 8 June 2023.
[ii] Financial Stability Institute, Policy responses to Fintech: a cross-country overview January 2020<https://www.bis.org/fsi/publ/insights23.pdf> on 8 June 2023.
[iii] Ellinger P.E., Lomnicka Z. Eva, and Hooley Richard, Ellinger's Modern Banking Law, 4th Edition, Oxford University Press.
[iv] Ellinger, Lomnicka, and Richard, Ellinger's Modern Banking Law.
[v] Financial Stability Institute, Policy responses to Fintech: a cross-country overview January 2020<https://www.bis.org/fsi/publ/insights23.pdf> on 8 June 2023.
[vi] Williams Mark,'Uncontrolled Risk: Lessons of Lehman Brothers and How Systemic Risk Can Still Bring Down the World
Financial System', McGraw Hill Professional, 2010.
[vii] Ellinger, Lomnicka, and Richard, Ellinger's Modern Banking Law.
[viii] Bank Info Security, 'The 5 Essentials of Banking Security in Tough Times', <https://www.bankinfosecurity.com/5-essentials-banking-security-in-tough-times-a-1074> on 8 June 2023.
[ix] Bank Info Security, 'The 5 Essentials of Banking Security in Tough Times', <https://www.bankinfosecurity.com/5-essentials-banking-security-in-tough-times-a-1074> on 8 June 2023.
[x] Security Today, 'Banking Security', <https://securitytoday.com/articles/list/banking-security.aspx> on 8 June 2023.
[xi] Financial Stability Institute, 'Policy responses to Fintech: a cross-country overview' January 2020 -<https://www.bis.org/fsi/publ/insights23.pdf> on 8 June 2023.
[xii] Financial Stability Institute, 'Policy responses to Fintech: a cross-country overview' January 2020 <https://www.bis.org/fsi/publ/insights23.pdf>on 8 June 2023.
[xiii] Financial Stability Institute, Policy responses to Fintech: a cross-country overview' January 2020 <https://www.bis.org/fsi/publ/insights23.pdf> on8 June 2023.
[xiv] FSD Kenya, 'Report on Digital Credit in Kenya 2019'-<https://fsdkenya.org/wp-content/uploads/2020/07/Focus-Note-Digital-Credit-in-Kenya_Updated.pdf > on 8 June 2023.
[xv] Business and Human Rights Resource Center, Kenya 'Rise in digital economy contributing to job losses especially in banking sector'-< https://www.business-humanrights.org/en/latest-news/kenya-rise-in-digital-economy-contributing-to-job-losses-especially-in-banking-sector/ >on 8 June 2023.
[xvi] Business and Human Rights Resource Center, Kenya: Rise in digital economy contributing to job losses especially in banking sector, < https://www.business-humanrights.org/en/latest-news/kenya-rise-in-digital-economy-contributing-to-job-losses-especially-in-banking-sector/ > on 8 June 2023.
[xvii] 'Banking industry sees 1318% increase in ransomware attacks in 2021' Security Magazine.
[xviii] FSD Kenya, 'Report on Digital Credit in Kenya'2019-<https://fsdkenya.org/wp-content/uploads/2020/07/Focus-Note-Digital-Credit-in-Kenya_Updated.pdf > on 8 June 2023.
[xix] Central Bank of Kenya, 'Monetary Policy Committee Market Perceptions Survey Report' July 2021-<https://www.centralbank.go.ke/uploads/market_perception_surveys/712089520_MPC%20Market%20Perceptions%20Survey,%20July%202021.pdf> > on 8 June 2023.
[xx] Central Bank of Kenya, 'Monetary Policy Committee Market Perceptions Survey Report' July 2021 - <https://www.centralbank.go.ke/uploads/market_perception_surveys/712089520_MPC%20Market%20Perceptions%20Survey,%20July%202021.pdf> > on 8 June 2023.
[xxi] Central Bank of Kenya Act No (15 of 2021), Section 4A.
[xxii] Central Bank of Kenya Act No (15 of 2021).
[xxiii] Central Bank of Kenya Act No (15 of 2021).
[xxiv] KN Law LLP, 'The Central Bank of Kenya (Amendment) Act, 2021' -<https://kn.co.ke/the-central-bank-of-kenya-amendment-act-2021/> on 8 June 2023.
[xxv] Data Protection Act (No 24 of 2019).
[xxvi] Central Bank of Kenya, 'Digital Credit Providers Regulations' - <https://www.centralbank.go.ke/2021/12/23/enactment-of-the-law-to-regulate-digital-lenders-and-issuance-of-the-corresponding-draft-regulations-for-public-comment/> on 8 June 2023.
[xxvii] Ellinger, Lomnicka, and Hooley Richard, Ellinger's Modern Banking Law.
[xxviii] Mario Bellia, Sara Maccaferriand; Sebastian Schich, 'Limiting too-big-to-fail: market reactions to policy
announcements and actions' - < https://link.springer.com/article/10.1057/s41261-021-00176-y >on
8 June 2023.
[xxix] FSD Kenya, 'Report on Digital Credit in Kenya 2019 - <https://fsdkenya.org/wp-content/uploads/2020/07/Focus-Note-Digital-Credit-in-Kenya_Updated.pdf > on 8 June 2023.
[xxx] José Carlos Laguna de Paz, 'Some implications of the new global digital economy for financial
regulation and supervision'-< https://link.springer.com/article/10.1057/s41261-022-00189-1 > on 8 June 2023.
[xxxi] Chryssa Papathanassiou, 'Fundamental rights and banking supervision' -
< https://link.springer.com/article/10.1057/s41261-022-00204-5 > on 8 June 2023.
[xxxii] David T. Llewellyn and; Tim Congdon, 'Bank regulation: Has the regulation pendulum swung too
far?' - < https://link.springer.com/article/10.1057/s41261-022-00191-7 > on 8 June 2023.
[xxxiii] Central Bank of Kenya, 'Digital Credit Providers Regulations' -<https://www.centralbank.go.ke/2021/12/23/enactment-of-the-law-to-regulate-digital-lenders-and-issuance-of-the-corresponding-draft-regulations-for-public-comment/>on 8 June 2023.
