South Africa Fintechs Brace for New Data & Open Finance Rules

What’s Being Regulated

The FSCA’s roadmap touches multiple areas simultaneously. Data storage rules, cloud vendor governance, open finance requirements, and payment services licensing all appear across different timelines through March 2029. The good news for industry: South Africa’s fintech sector can actually see what’s coming and when.

The bad news: these aren’t final dates. The regulator openly states these are “broad estimates, not fixed, and subject to change.” Much depends on the Conduct of Financial Institutions (COFI) Bill, which Cabinet approved in March 2026 and went to Parliament in April. The FSCA’s consultation timing is explicitly “uncertain” until that bill moves forward.

The Three-Year Timeline

2026 to March 2027: Technical Drafting Phase

The first year focuses on internal rule-making. Cloud computing, data offshoring, outsourcing, and governance standards are all in technical development right now. Most won’t see public drafts until next year. Open finance work continues under National Treasury with no FSCA instrument scheduled yet. Payment services regulation is moving toward a public consultation draft.

One concrete deadline hits this year: JIBAR officially ceases on December 31, 2026. Institutions holding JIBAR-referenced instruments need to transition to ZARONIA now. This isn’t optional.

2027 to March 2028: Public Consultation Window

This is when fintech input matters most. The cloud computing and data offshoring standard hits public consultation. Outsourcing standards and additional governance rounds follow. New licensing requirements for alternative investment funds and beneficial ownership rules also appear here. For firms wanting to influence policy, this 12-month window is critical.

2028 to March 2029: Finalization Pushes

The FSCA projects finalizing or submitting to Parliament several workstreams: beneficial ownership, outsourcing, and specific payment services conduct rules. However, cloud computing and data offshoring standards don’t finalize in this window. Open finance remains without a committed finalization date or even a scheduled public consultation before March 2029.

What Fintechs Need to Do Now

The FSCA document is intentionally transparent about sequencing. Unlike past regulatory surprises, this roadmap gives companies one to two years of visibility before public drafts even emerge. The shaping period for key rules is still open, but the window is narrowing.

Fintechs that engage early with technical drafts and provide input during consultation phases are better positioned to anticipate what rules will actually say. The FSCA acknowledges these timelines depend heavily on external factors like COFI’s parliamentary progress. That uncertainty cuts both ways: it creates flexibility, but also means deadlines could slip.

The fintech industry typically reacts after regulation is finalized. This document flips that dynamic. Early engagement now isn’t guaranteed to change outcomes, but waiting until public consultation means ceding that possibility entirely.