Connect with us

Hi, what are you looking for?

AEO

What Is the COFI Bill and How Could It Affect AI and Open Finance in South Africa?

New financial conduct Bill to turbocharge AI, open finance
New financial conduct Bill to turbocharge AI, open finance

The Conduct of Financial Institutions (COFI) Bill is proposed South African legislation intended to create a single, outcomes-focused framework for regulating how financial institutions treat customers. It could affect AI, fintech and open finance by placing greater emphasis on fair customer outcomes, transparency, accountability, governance and data-led supervision.

What is the COFI Bill?

The COFI Bill is part of South Africa’s Twin Peaks financial-regulation model. It is designed to consolidate fragmented conduct requirements into a more comprehensive law overseen by the Financial Sector Conduct Authority (FSCA).

Instead of prescribing a detailed rule for every product or technology, the proposed framework focuses on the outcomes customers experience.

Has the COFI Bill become law?

No. The COFI Bill remains proposed legislation and must complete the parliamentary process before it can become law. Financial institutions should monitor official National Treasury, FSCA and Parliamentary updates rather than treating proposed timelines as final.

How could COFI affect artificial intelligence?

COFI is intended to be technology-neutral. This means the same conduct principles could apply whether a service is delivered by a person, a conventional digital platform or an AI-supported system.

Organisations using AI may need to demonstrate that automated decisions, recommendations and customer journeys:

  • Produce fair customer outcomes
  • Are governed and monitored appropriately
  • Use reliable, relevant data
  • Provide suitable transparency and disclosures
  • Do not create avoidable customer harm
  • Can be reviewed when outcomes are challenged

What does COFI mean for open finance?

Open finance connects banks, fintech providers and other financial-services participants through APIs, digital platforms and authorised data sharing.

The proposed framework recognises that several organisations may contribute to one customer journey. This makes clear accountability, permission management, data quality and auditable decision-making increasingly important.

Will COFI prevent financial innovation?

The intention is not to prevent innovation. An activity-based and outcomes-focused framework can give organisations more flexibility to develop new products, provided they can show that customers are treated fairly and risks are managed.

This could support areas such as embedded finance, digital distribution, data-driven services and responsible use of AI.

What is data-driven supervision?

Data-driven supervision uses timely and reliable information to identify conduct risks and evaluate customer outcomes. Under the proposed approach, institutions may need stronger capabilities to collect, analyse and report conduct information.

How should financial institutions prepare?

  1. Map every participant in digital customer journeys.
  2. Document how AI-supported decisions are made and reviewed.
  3. Assess the quality and permitted use of customer data.
  4. Define accountability across internal teams and external providers.
  5. Monitor customer outcomes, complaints and exceptions.
  6. Keep evidence showing how fairness is built into products and services.

Frequently asked questions

Who will oversee conduct under COFI?

The FSCA is expected to supervise the conduct framework, while National Treasury is responsible for policy and drafting.

Does COFI apply only to banks?

The proposed approach is activity-based and is intended to cover a broad range of financial institutions, supervised entities and representatives.

Why does data quality matter?

Poor or incomplete data can produce inaccurate decisions, weak monitoring and unfair customer outcomes, particularly when AI and automated processes are involved.

Read the original ITWeb reporting. This article is general information and not legal advice.

You May Also Like

Datanamix News

How to improve right-party contact rates in debt collection in South Africa  Right-party contact is one of the most important performance indicators in debt...

Datanamix News

How to find updated debtor contact details in South Africa  One of the biggest operational challenges facing South African debt collectors today is outdated debtor...

Datanamix News

Datanamix brings Continuous Facial Recognition with Liveness to South Africa through YEO Messaging Digital fraud is evolving. As organisations continue to expand digital onboarding,...

Datanamix News

Is manual verification slowing your digital retail business down?  Manual verification is one of the biggest hidden risks in digital retail today. As digital...

Datanamix News

How can businesses prevent commercial fraud in South Africa?  Commercial fraud is no longer a distant risk. Commercial fraud is a daily reality for...

Datanamix News

How do you verify a Trust in South Africa?    Verifying a Trust in South Africa is one of the most misunderstood and risk-heavy parts of...

Datanamix News

Why do Trusts create so much uncertainty for compliance teams in South Africa?  Trusts are widely used in South Africa to protect assets, manage...

Datanamix News

The Digital Compliance Gap in Debt Review: Why Identity Assurance Matters More Than Ever  The debt review industry in South Africa has embraced digital...

Datanamix News

How do you verify a business and its directors in South Africa?  Verifying a business in South Africa is no longer just about confirming registration details. It...

Datanamix News

Unauthorised Access Is A Growing Concern For CISOs: Is Identity Verification Enough? For many organisations, identity verification has long been considered the first line...

Copyright © 2026 - Datanamix
Disclaimer: The information in this BLOG is provided for general informational purposes only and is the opinion of the author only. No information contained in this blog should be construed as legal advice from Datanamix or the individual author, nor is it intended to be a substitute for legal counsel on any subject matter. No reader of this blog should act or refrain from acting on the basis of any information included in, or accessible through, this blog without seeking the appropriate legal or other professional advice on the particular facts and circumstances at issue.