Kenya Banking Law Reforms 2026, What Banks and Corporate Borrowers Must Do About Lending, Security and Perfection

The Kenya banking law reforms 2026 security landscape has shifted dramatically, driven by a wave of Central Bank of Kenya (CBK) circulars, the Business Registration Service (BRS) Draft Secured Transactions Policy, the National Treasury’s VASP Regulatory Impact Statement, and strengthened Kenya Deposit Insurance Corporation (KDIC) deposit-protection guidelines. Together, these instruments compel every licensed bank, microfinance institution, corporate borrower and their legal advisers to revisit lending policies, security documentation and perfection procedures before mid-year deadlines bite. The scale of change is broad, from affordability-testing obligations in the CBK Consumer Protection Framework to collateral-registry modernisation signalled by the BRS, and the compliance window is narrow.

This guide translates each regulatory development into practical, step-by-step actions that compliance officers, credit teams and in-house counsel can implement immediately.

Five things to do now:

1. Audit all standard-form loan and facility agreements against the CBK Consumer Protection Framework affordability and redress requirements.
2. Map every category of security your institution holds and confirm perfection status under current and proposed BRS rules.
3. Update KYC/AML procedures and contractual representations ahead of the June 2026 compliance milestone.
4. Review every bank–fintech or VASP-related agreement for custody, segregation and regulatory-change clauses in light of the National Treasury VASP Regulatory Impact Statement.
5. Brief the board credit committee on capital-requirement and licensing-moratorium developments and their effect on growth strategy.

Regulatory Snapshot, What Changed in Kenya Banking Law Reforms 2026

Understanding the full sweep of the 2026 changes requires looking at several regulatory instruments that arrived in rapid succession during the first quarter. Banks that treat these as isolated updates risk piecemeal compliance; the instruments interact and, taken together, redefine how lending, security creation and borrower protection operate in Kenya.

CBK Circulars and Consumer Protection Framework

The CBK published the Consumer Protection Framework in March 2026, with guidance disseminated via an April 2026 circular. The Framework introduces mandatory affordability and means-testing checks before any credit facility is approved. Lenders must now document income-and-expense analysis, retain credit-decision records for a prescribed period, and establish internal redress mechanisms for consumer complaints. Pricing transparency obligations require that all fees, charges and interest-rate calculation methodologies are disclosed in plain language before a borrower signs. The Framework also mandates periodic review of existing portfolios to ensure that legacy facilities remain compliant with the new consumer-protection standards. Non-compliance exposes institutions to supervisory sanctions, including direction to cease specific lending activities.

National Treasury and VASP Regulations

The National Treasury’s Regulatory Impact Statement on VASP Regulations 2026 sets out the policy rationale and proposed supervisory architecture for virtual-asset service providers operating in or through Kenya. As summarised by the Retirement Benefits Authority, the framework contemplates licensing, capital adequacy, custody and segregation obligations, and AML/CFT reporting for VASPs. For banks, the implications are direct: any institution that partners with, funds or custodies assets on behalf of a VASP must satisfy itself that the VASP holds or is applying for the requisite licence.

BRS Draft Secured Transactions Policy and Collateral Registry Signals

The Draft Secured Transactions Policy published by the Business Registration Service (BRS) in March 2026 is perhaps the most consequential long-term change for perfection of securities Kenya practitioners must navigate. It signals the establishment of a unified, notice-based collateral registry covering movable assets, receivables and intangibles. While the policy remains at the consultation stage, the direction is clear: Kenya is moving toward a modern secured-transactions regime modelled on international best practice. Lenders should begin mapping collateral portfolios and preparing internal processes for electronic registry filings.

Compliance Decision, Who Must Change Policies and by When

Not every institution faces the same urgency. The table below provides a decision framework that bank compliance teams, corporate borrowers and their counsel can use to triage the required actions.

For institutions that have not yet begun gap analyses, industry observers expect supervisory scrutiny to intensify sharply in the second half of 2026. The likely practical effect of delayed action will be regulatory findings, remediation orders and, in serious cases, restrictions on new lending. Corporate borrowers whose facilities are due for renewal should expect lenders to impose updated covenants and representations reflecting the new requirements. Proactive engagement with these changes, rather than waiting for lender-driven demands, puts borrowers in a stronger negotiating position.

Capital requirements Kenya 2026 developments, together with discussions around lifting the moratorium on licensing new banks, add a further layer of strategic planning. Institutions exploring expansion or new-licence applications must ensure that capital plans account for the higher buffers that early indications suggest the CBK will formalise.

Lending Underwriting and Documentation, Required Changes

The CBK Consumer Protection Framework does not merely add disclosure obligations; it fundamentally restructures the underwriting process. Below are the specific documentation changes every lender must implement.

Affordability and Means Testing

Lenders must now conduct and document a formal affordability assessment before approving any credit facility. The practical checklist includes:

• Income verification. Obtain and retain payslips, audited accounts or tax returns (as applicable) for each borrower.
• Expense mapping. Record the borrower’s existing debt-service obligations, essential living costs and any contingent liabilities.
• Debt-service ratio. Calculate and document the ratio; retain the calculation in the credit file.
• Decision record. The credit officer must sign off on the affordability finding, and the record must be available for CBK inspection.

Pricing and Interest Considerations

Pricing clauses in standard-form facility agreements need revision. The Consumer Protection Framework requires that interest-rate methodologies, fee structures and penalty charges be disclosed in clear, non-technical language. Redress provisions must be included so that borrowers can challenge billing errors or excessive charges through an internal complaints mechanism before escalating to the CBK. Institutions should also monitor Finance Bill discussions that may affect interest-rate benchmarks and tax treatment of lending income, adjusting pricing models accordingly. Awareness of Kenya residential rental and tax rules 2026 is also relevant where property-backed lending intersects with evolving fiscal obligations.

Sample Loan Clause Checklist

The following sample clauses illustrate the type of provisions lenders should embed in updated facility agreements. These are illustrative; each must be adapted to the institution’s standard documentation suite.

• Continuing-security clause. “The security constituted by this Agreement shall be a continuing security for all present and future obligations of the Borrower to the Lender, notwithstanding any intermediate payment or settlement of account.” The Supreme Court of Kenya’s affirmation of the continuing-security concept as standard banking practice reinforces the enforceability of this language.
• KYC/AML representation. “The Borrower represents and warrants that all information provided for KYC and AML purposes is true, complete and not misleading, and undertakes to notify the Lender promptly of any material change.”
• Covenant to register security. “The Borrower shall, at its own cost, take all steps necessary to ensure that any charge or encumbrance created pursuant to this Agreement is duly registered at the relevant registry within the time prescribed by law.”
• Regulatory-change clause. “If any change in applicable law, regulation or CBK directive increases the Lender’s cost of making or maintaining the Facility, the Borrower shall compensate the Lender for such increased cost upon demand, supported by reasonable evidence.”
• Affordability-confirmation clause. “The Borrower confirms that the Lender has conducted an affordability assessment and that the Borrower has been given adequate opportunity to review and question the assessment before execution of this Agreement.”

Perfection of Securities in Kenya, Step-by-Step Guide

Perfection of securities Kenya practitioners undertake remains one of the most procedurally complex areas of banking practice. The 2026 changes add a new dimension with the BRS collateral-registry proposals, but the existing perfection requirements for land, charges and movables continue to apply in parallel.

Land and Leasehold Security

Creating a legal mortgage or charge over land in Kenya requires a defined sequence of steps:

1. Obtain a board resolution (for corporate borrowers) authorising the creation of the charge and execution of security documents.
2. Conduct an official search at the relevant Land Registry to confirm the borrower’s title and identify any prior encumbrances.
3. Execute the charge instrument in the prescribed form under the Land Registration Act or the Land Act (as applicable).
4. Pay stamp duty on the charge instrument at the prevailing rate.
5. Present the stamped instrument for registration at the Land Registry. Registration must be completed promptly; an unregistered charge may be void against subsequent purchasers or chargees.
6. Obtain and retain the registered charge certificate as evidence of perfection.

Charges (Fixed and Floating) and Company Charges

Under the Companies Act, 2015, a charge created by a company must be delivered to the Registrar of Companies for registration within the prescribed filing window. Failure to register renders the charge void against a liquidator and creditors of the company, although the underlying debt remains enforceable. Practitioners should note:

• Fixed charges attach to identified assets (plant, equipment, specific receivables) and require precise description in the charge instrument.
• Floating charges cover a class of assets that changes in the ordinary course of business and crystallise upon a trigger event (e.g., default, appointment of a receiver). The charge instrument must define crystallisation events clearly.
• Filing timeline. Deliver the prescribed particulars and the instrument (or a certified copy) to the Registrar within the statutory period. Late filing requires a court order to extend time.

Movables and Collateral Registry Developments

For security over movable assets, vehicles, machinery, inventory, receivables, Kenya’s existing regime relies on a combination of possessory security (pledges), chattel mortgages and assignment of receivables. The BRS Draft Secured Transactions Policy signals a shift toward a unified, notice-filing collateral registry that would allow non-possessory security interests in movables to be perfected by registration rather than physical possession. While the policy remains in consultation, lenders should:

• Catalogue all movable-asset security currently held and confirm the perfection method in use (possession, assignment, chattel mortgage).
• Prepare internal workflows for electronic filing once the collateral registry is established.
• Review charge wording to ensure it is compatible with both the current possessory/registration framework and the anticipated notice-filing system.

Perfection Checklist by Asset Type

Regulatory Instruments at a Glance

AML, KYC and De-Listing Risk, The June 2026 Milestone

AML compliance June 2026 represents a critical inflection point. Kenya’s ongoing efforts to strengthen its anti-money-laundering and counter-terrorism-financing framework mean that banks face heightened supervisory expectations. Non-compliant institutions risk enforcement action, correspondent-banking restrictions and, in extreme scenarios, de-listing from international clearing and settlement networks.

Due Diligence Update Checklist

Lenders should verify that the following elements are in place before the June 2026 deadline:

• Enhanced Customer Due Diligence (ECDD). Apply ECDD to all high-risk customers, politically exposed persons (PEPs) and complex ownership structures.
• Beneficial-ownership verification. Obtain and retain documentary evidence of the ultimate beneficial owners of every corporate borrower, going beyond nominal shareholding to identify natural persons with control.
• Ongoing monitoring. Implement transaction-monitoring systems that flag unusual patterns and generate alerts for the MLRO.
• Suspicious Activity Reports (SARs). Ensure that the reporting channel to the Financial Reporting Centre (FRC) is tested, documented and that staff are trained on filing obligations.
• Record retention. Retain all CDD records for the minimum prescribed period and ensure they are retrievable for supervisory inspection.

Contractual AML Protections

Security and facility documentation should include robust AML representations and covenants. Sample provisions include:

• AML representation. “The Borrower represents that it has implemented and maintains AML/CFT policies and procedures that comply with the Proceeds of Crime and Anti-Money Laundering Act and all regulations and guidelines issued thereunder.”
• Compliance covenant. “The Borrower shall promptly notify the Lender of any investigation, inquiry or enforcement action by any governmental authority relating to AML/CFT matters.”
• Termination trigger. “It shall be an Event of Default if the Borrower is placed on any sanctions list or if any governmental authority determines that the Borrower has materially breached any applicable AML/CFT law.”

Fintech and VASP Implications for Bank–Fintech Agreements

Fintech regulation Kenya 2026 is no longer a niche concern. As the National Treasury’s VASP Regulatory Impact Statement makes clear, virtual-asset service providers will be subject to licensing, capital and custody obligations. Banks that maintain correspondent relationships, provide settlement services or co-develop products with fintechs must revisit their contractual frameworks. Key issues include custody of digital assets, segregation of client funds, subcontracting restrictions and regulatory-change risk allocation. Institutions offering VASP licensing or related services to clients should familiarise themselves with the broader global landscape as well.

Draft Clause Examples for Bank–Fintech Agreements

• Custody and segregation. “The VASP shall hold all client virtual assets in segregated wallets, separate from its own assets, and shall provide the Bank with monthly reconciliation reports.”
• Licensing warranty. “The VASP warrants that it holds, or has submitted a bona fide application for, all licences required under the VASP Regulations 2026 and shall notify the Bank immediately if any licence is revoked, suspended or made subject to conditions.”
• Audit and inspection. “The Bank shall have the right, upon reasonable notice, to inspect the VASP’s records, systems and custody arrangements to verify compliance with this Agreement and applicable law.”
• Regulatory-change mechanism. “If any change in applicable law materially affects the rights or obligations of either party under this Agreement, the parties shall negotiate in good faith to amend the Agreement within 30 days of written notice.”

Bank–fintech commercial agreements and custody arrangements are explored in greater depth in a forthcoming companion article.

Enforcement, Remedies and Practical Enforcement Checklist

When a borrower defaults, the speed and effectiveness of enforcement depend on the quality of perfection and the remedies specified in the security documents. Kenya law reform in 2026 has not eliminated existing enforcement routes but has added considerations that lenders must factor into their playbook. Key enforcement avenues include:

• Statutory power of sale. Available where the charge instrument confers the power and conditions precedent (e.g., notice period) have been satisfied.
• Appointment of a receiver or receiver-manager. The charge instrument should expressly authorise appointment; the receiver acts as agent of the chargor.
• Court-supervised enforcement. Where out-of-court remedies are contested, lenders apply to the Environment and Land Court (for land security) or the High Court (for other assets).
• KDIC interaction. Where a defaulting institution is itself a bank, KDIC deposit-protection reforms may affect the recovery waterfall and the priority of competing claims.

Early indications suggest that the continuing-security jurisprudence strengthened by the Supreme Court decision will make enforcement of all-monies charges more predictable, provided the documentation is properly drafted.

Practical To-Do Checklist for Banks and Corporate Borrowers

1. Conduct a gap analysis of all standard-form lending and security documents against the CBK Consumer Protection Framework.
2. Update affordability-testing procedures and create template credit-decision records.
3. Review and, where necessary, re-perfect all existing security interests, confirm registration status at the Land Registry, Companies Registry and NTSA.
4. Prepare internal workflows for the anticipated BRS collateral registry, including data-cleansing of movable-asset security records.
5. Revise AML/KYC policies, enhance beneficial-ownership verification procedures, and test SAR-reporting channels ahead of June 2026.
6. Audit all bank–fintech and VASP-related agreements for custody, segregation and regulatory-change provisions.
7. Brief the board and credit committee on capital requirements Kenya 2026 discussions and the status of the licensing moratorium.
8. Train front-line credit officers and relationship managers on new affordability, disclosure and redress requirements.
9. Engage external counsel to review sample clauses and prepare an institution-specific loan security checklist Kenya teams can deploy immediately.
10. Monitor parliamentary activity for delegated legislation and Finance Bill developments that may alter banking obligations mid-year.

Next Steps and Risk Matrix

The recommended approach is to address high-risk items first, AML compliance and security perfection, then work through documentation updates and fintech-agreement revisions in parallel. Institutions that adopt a wait-and-see posture risk compounding compliance gaps when the BRS policy is finalised and the CBK begins formal supervisory reviews. Understanding the broader Kenyan regulatory environment, including developments such as the draft local content bill, helps lenders and borrowers contextualise the banking-specific reforms within Kenya’s wider policy direction.

Conclusion

The Kenya banking law reforms 2026 security requirements represent the most significant overhaul of lending, documentation and perfection practice in recent memory. From the CBK Consumer Protection Framework’s affordability mandates to the BRS collateral-registry proposals and the National Treasury’s VASP regulations, every link in the chain, lender, borrower and adviser, must act before mid-year deadlines arrive. Institutions that move quickly to update policies, re-perfect security interests, strengthen AML procedures and revise fintech agreements will be well positioned to meet supervisory expectations and protect their portfolios. Those that delay face compounding compliance risk. The checklists, sample clauses and step-by-step perfection guidance provided in this article offer a practical starting point; bespoke legal review remains essential for every institution’s specific circumstances.

Sources

1. Central Bank of Kenya, Consumer Protection Framework (March 2026)
2. Business Registration Service, Draft Secured Transactions Policy (March 2026)
3. The National Treasury, Regulatory Impact Statement on VASP Regulations 2026
4. RBA, Kenya Moves to Regulate Crypto: National Treasury Unveils Draft VASP Regulations 2026
5. Parliament of Kenya, Order Paper, 9 April 2026
6. EY Tax News, Kenya Supreme Court Affirms Concept of Continuing Security as Standard Banking Practice
7. CMS Expert Guide, Taking Security in Kenya
8. TradingRoom, KDIC Unveils Reforms to Secure Deposit Protection