LEARN MORE

South Africa's financial sector is on the cusp of a profound regulatory transformation with the Conduct of Financial Institutions (COFI) Bill, 2026, having been introduced to the National Assembly in April 2026. This landmark legislation, central to the Financial Sector Conduct Authority's (FSCA) 2026-2029 Regulation Plan, aims to consolidate and harmonise market conduct regulation, replacing a fragmented legislative landscape. The COFI Bill introduces a unified, activity-based licensing regime, enhanced governance standards, and strengthened consumer protection, necessitating a comprehensive re-evaluation of compliance frameworks by all financial institutions. Legal professionals must guide their clients through this significant shift, which promises a more coherent and robust regulatory environment.

The South African financial services landscape is bracing for its most significant regulatory overhaul in decades with the impending enactment of the Conduct of Financial Institutions (COFI) Bill, 2026. Introduced to the National Assembly in April 2026, this pivotal piece of legislation is designed to fundamentally reshape how financial institutions conduct business and interact with customers. The COFI Bill is not merely an amendment to existing laws; it represents a strategic shift towards a unified, outcomes-based, and principles-based regulatory framework for market conduct across the entire financial sector.

This legislative development is a cornerstone of the Financial Sector Conduct Authority's (FSCA) 2026-2029 Regulation Plan, underscoring its commitment to fostering a robust, forward-looking, and customer-centric financial environment. For practising attorneys and legal professionals, understanding the nuances and implications of the COFI Bill is paramount. It will necessitate a comprehensive review of existing compliance structures, licensing requirements, and operational procedures for all financial institutions, from large banks and insurers to independent financial services providers (FSPs) and emerging fintech entities. The transition promises to be complex, requiring proactive engagement and strategic adaptation.

The genesis of the COFI Bill lies in the "Twin Peaks" regulatory model, formally established in South Africa by the Financial Sector Regulation Act 9 of 2017 (FSR Act). This model bifurcated financial regulation into prudential supervision, handled by the Prudential Authority (PA) within the South African Reserve Bank, and market conduct regulation, overseen by the FSCA. Prior to this, and still largely the case, market conduct regulation was fragmented across various sector-specific statutes, including the Financial Advisory and Intermediary Services Act 37 of 2002 (FAIS Act), the Long-term Insurance Act, the Short-term Insurance Act, and portions of the Banks Act.

The FAIS Act, for instance, has been a cornerstone of client protection, regulating the provision of financial advice and intermediary services by FSPs through authorisation procedures, fit and proper requirements, and codes of conduct. However, this fragmented approach often led to regulatory arbitrage, inconsistencies in consumer protection, and challenges in supervising increasingly convergent financial services. The FSR Act explicitly contemplated the consolidation of conduct legislation, with Section 290 providing the legal basis for the COFI Bill. The Bill's objective is to streamline and harmonise this legal landscape, providing a single, holistic framework that applies consistently across all financial institutions, thereby enhancing consumer protection and market integrity.

The COFI Bill introduces several transformative elements that will profoundly impact financial institutions. A central feature is the shift from an institution-based to an activity-based licensing model. Under the current regime, institutions are licensed based on their legal form (e.g., bank, insurer, FSP). The COFI Bill, however, will require a single FSCA licence with multiple activity authorisations, reflecting the diverse services many firms offer. This means that "it is not what you are, but what you do that counts," necessitating a mapping of existing activities to prepare for the new licensing framework.

Furthermore, the Bill embeds and strengthens the principles of Treating Customers Fairly (TCF), making customer outcomes a core regulatory expectation. It introduces enhanced governance requirements for governing bodies and sets out clear business conduct principles. Product governance obligations will be significantly expanded, covering the entire lifecycle of financial products from design to distribution, ensuring they meet customer needs and are appropriately marketed. The Bill also addresses the increasing role of technology, introducing principle-based obligations for technology governance and data management, including cyber resilience standards and ensuring AI-assisted advice tools comply with the duty of care.

The re-licensing process will be a major undertaking, affecting thousands of financial institutions. The FSCA has indicated a phased approach to implementation, with ongoing development of themed frameworks under COFI. The Bill also clarifies the regulatory position of outsourced service providers, where some may be required to hold their own licences, while the primary licensed institution remains responsible for outsourced activities. Beyond COFI, the FSCA's broader regulatory strategy for 2026-2029 continues to focus on emerging risks such as crypto assets, sustainable finance, open finance, and artificial intelligence, with ongoing efforts to strengthen enforcement and supervisory processes. For instance, the FSCA commenced licensing Crypto Asset Service Providers (CASPs) under the FAIS Act in June 2023, with 300 licenses approved by December 2025, demonstrating an active regulatory stance on new financial products.

The introduction of the Conduct of Financial Institutions Bill, 2026, marks a watershed moment for South Africa's financial sector. It signals a decisive move towards a more integrated, transparent, and customer-focused regulatory landscape, consolidating disparate conduct laws under a single, coherent framework. For legal professionals, the immediate imperative is to guide financial institution clients through the complexities of this transition, particularly regarding the new activity-based licensing regime, enhanced governance, and product oversight requirements.

Proactive engagement with the evolving regulatory instruments and standards issued by the FSCA, alongside the parliamentary process of the COFI Bill, will be crucial. Firms must begin mapping their current activities, assessing their compliance frameworks against the Bill's principles, and investing in the necessary operational and technological adjustments. While the implementation will undoubtedly present challenges, the COFI Bill ultimately aims to foster a more stable, efficient, and trustworthy financial market, aligning South Africa with international best practices and ultimately benefiting both financial institutions and consumers.