INTRODUCTION
nKenya’s financial sector has, over the last decade, undergone a profound digital transformation. From mobile lending and digital banking to algorithm-driven financial products, innovation has significantly expanded financial inclusion and positioned Kenya as a continental leader in fintech development. However, this rapid growth has also exposed consumers to new and increasingly complex risks, including predatory lending, opaque pricing structures, digital fraud, misuse of personal data, and aggressive debt collection practices.nnIt is against this backdrop that the Joint Financial Sector Regulators have published the Draft Financial Consumer Protection Framework, 2026 (the “Framework”). The Framework marks Kenya’s most ambitious attempt yet to harmonise consumer protection standards across the financial services ecosystem by introducing unified market conduct rules applicable to banks, SACCOs, insurers, capital market players, fintechs, and other licensed financial service providers (“FSPs”).n
ANALYSIS OF THE KEY PROVISIONS OF THE FRAMEWORK
n
Redefining the consumer in the Financial Age
nA fundamental and significant distinction of the proposed FCP framework is its targeted definition of the “Consumer”. Unlike the broad definition under the Consumer Protection Act, which applies generally across all sectors, the FCP Framework narrows the definition to zero in on the financial ecosystem. It defines a consumer as a person who is contemplating obtaining, obtains, uses or has used a financial product or service or provides security for such services. The Framework introduces two crucial sub-categories;n
- n
- Retail consumer: a natural person. The framework recognises that individuals are in a “weaker bargaining position” hence at a higher risk of financial detriment compared to corporate entities.
- Vulnerable consumer: Defined as a person, susceptible to harm due to personal circumstances such as health, life events or a lack of knowledge and skills.
n
n
n
A Shift Toward Outcome-Based Regulation
nThe framework imposes an outcome-focused standard of conduct on FSPs requiring them to move beyond mere compliance to ensure that consumer welfare is a core focus of their business strategy and culture.nnThe Framework establishes six overarching Financial Consumer Protection (“FCP”) Principles requiring FSPs to ensure:n
- n
- Fair and equitable treatment of consumers;
- Transparent disclosure practices;
- Suitability of financial products;
- Protection of consumer assets;
- Effective complaint resolution; and
- Protection of personal data.
n
n
n
n
n
n
nIn effect, compliance will no longer be measured solely by whether disclosures were technically issued or forms properly executed, but also by whether consumers genuinely understood the product, were treated fairly, and suffered avoidable harm.n
Digital Finance and Algorithmic Accountability
nThe Framework is particularly responsive to Kenya’s rapidly expanding digital finance ecosystem. Recognising the growing use of automated systems and artificial intelligence in financial services, it introduces detailed obligations for FSPs operating digital platforms or deploying algorithmic decision-making tools.nnFor FSPs using algorithms and artificial intelligence (AI) for decision making, they must:n
- n
- Assess potential risks of consumer harm prior to implementation;
- Ensure outcomes are objective and consistent; and
- Properly document and test these programs.
n
n
n
nImportantly, the Framework prohibits the use of pre-selected digital options that falsely indicate a consumer has read or understood contractual information. This directly targets the increasingly common practice of obtaining passive or uninformed consent through digital interfaces, thereby ensuring marketing that is based on genuine consumer consent.nnWhile the Consumer Protection Act generally prohibits false, misleading or deceptive representations, the FCP framework prohibits FCPs from sending offers to consumers without “Informed consent.” Additionally, FSPs must provide a simple means for consumers to opt out of communications.n
Product suitability and lending
nThe Framework also introduces a strong suitability regime designed to address concerns surrounding over-indebtedness and irresponsible digital lending practices. Before offering a financial product, FSPs must assess whether the product is reasonably suitable for the consumer’s financial objectives, needs, and financial capability.nnMore significantly, the Framework proscribes reckless lending, thus FSPs have to verify consumers’ ability to repay credit without financial hardship before granting or increasing the loan limit.nnThis marks a significant departure from the historical “borrower beware” approach that has often characterised digital lending markets. The burden is now shifting toward lenders to demonstrate responsible conduct and affordability assessments.n
Transparency as a Consumer Protection Tool
nThe Framework is heavily premised on the principle that transparency leads to consumer empowerment. To that effect, it introduces several mechanisms aimed at correcting the informational imbalance between FSPs and retail consumers.nnThese include provision of Key Facts Statements, which refers to a standardized, concise, comparable and up-to-date summary of a product's costs, risks and obligations. Hence, consumers are able to easily make comparisons of products across different institutions. nnThe Framework also provides for cooling-off and reflection periods to allow consumers adequate time to consider a contractual proposal before entering into it and/or terminate a contract without penalty, provided no benefit has been received.nnThis reflects a broader recognition that many consumers, particularly within digital finance environments, make financial decisions under pressure or without fully appreciating long-term consequences.n
Asset protection and mistaken transactions
nThe Framework also introduces enhanced obligations aimed at mitigating fraud, scams, phishing attacks, and mistaken transactions. FSPs will be required to implement systems to mitigate digital fraud and phishing attacks. Particularly, the Framework mandates FSPs to proactively assist in reversing mistaken transactions, placing the burden of proving that a transaction was correctly made on the FSP.n
Ethical Debt Collection and Consumer Dignity
nAnother particularly progressive feature of the Framework is its attempt to regulate debt collection conduct. The Framework expressly prohibits debt collection practices involving coercion, harassment, public shaming, threats, misuse of personal contacts; or unauthorised access to consumer devices or social media contacts.nnThese provisions appear to be a direct response to growing public concern regarding abusive debt recovery tactics by some digital lenders.nnImportantly, the Framework elevates debt collection from a purely contractual issue into a matter implicating constitutional rights to dignity, privacy, and fair administrative action.nn n
CONCLUSION
nThe draft Financial Consumer Protection Framework, 2026 marks a significant shift in Kenya’s financial regulatory landscape by placing consumer welfare, transparency, and responsible conduct at the centre of financial services regulation. Beyond strengthening protections against emerging digital risks, the Framework signals a move toward proactive and outcome-based supervision. If effectively implemented, it is likely to reshape compliance expectations for financial institutions while enhancing consumer trust and confidence in Kenya’s evolving financial ecosystem.nnThis article is provided free of charge for information purposes only; it does not constitute legal advice and should be relied on as such. No responsibility for the accuracy and/or correctness of the information and commentary as set in the article should be held without seeking specific legal advice on the subject matter. If you have any query regarding the same, please do not hesitate to contact our Banking & Finance, Commercial & Corporate Department vide WACommercial@wamaeallen.com
