Central Bank Digital Currency Technical Framework 2026: Payment System Interoperability and Commercial Bank Integration
Financial technology landscape is entering a new phase of regulatory debate as the Central Bank of Kenya (CBK) and the National Treasury pursue reforms aimed at improving payment system interoperability, strengthening cybersecurity and expanding secure digital financial services. The proposed changes could influence how commercial banks, mobile money operators, fintech companies and payment service providers connect their platforms.
The discussion comes as authorities seek to modernise the country’s payments infrastructure through the Draft National Payment System Policy and National Payment System Bill 2026. However, the proposed reforms should not be confused with the launch of a new Central Bank Digital Currency (CBDC). The draft legislation focuses on the broader national payments ecosystem, while the future of a Kenyan CBDC remains a separate policy question.
Read Also: Pharmacy Board Looks to Shape Future of Pharmaceutical Practice
CBK Digital Payment Reforms 2026: What Is Changing?
The National Treasury and CBK published the draft policy and Bill on September 21, 2026, inviting public participation in proposals intended to create a modern, secure, efficient, affordable and inclusive national payment system. The proposed Bill also seeks to replace the existing National Payment System Act, Cap. 491A, subject to the legislative process.
According to the official CBK announcement, the reform agenda includes improved interoperability, consumer protection, data protection, innovation and financial stability.
The public consultation deadline was October 9, 2026. As of October 20, the proposals should still be treated as draft measures unless their subsequent legal status has been formally confirmed. Businesses should therefore distinguish between existing regulatory obligations and provisions proposed in the Bill.
The policy direction is significant for banks and payment providers because customers increasingly expect to transfer money, pay merchants and access financial services without being restricted by the platform or institution they use.
Central Bank Digital Currency Framework: What Does It Mean?
A Central Bank Digital Currency is a digital form of central bank money. Unlike mobile money, which represents electronic value issued within a regulated payment arrangement, a CBDC would constitute a direct digital monetary liability of the central bank, depending on its design.
In February 2022, CBK published a Central Bank Digital Currency discussion paper to examine the potential applicability of a CBDC in Kenya. The paper explored possible use cases and invited public feedback to inform policy decisions.
The subsequent 2023 report on public comments discussed issues including interoperability, privacy, cyber risks, financial inclusion and the possible effects on commercial banks.
These considerations remain relevant to any future CBDC design. A digital currency would need clear rules governing access, transaction processing, customer identification, data protection, fraud prevention and the relationship between central bank money and commercial bank deposits.
Nevertheless, the 2026 draft National Payment System reforms do not, by themselves, confirm a CBDC launch date, establish a final CBDC technical architecture or require commercial banks to integrate a new central-bank digital currency.
Payment System Interoperability and Commercial Bank Integration
Interoperability allows different payment networks and financial institutions to exchange transaction instructions and process payments across their systems. Effective interoperability can reduce friction for customers and merchants while encouraging competition among providers.
Kenya already has experience with cross-network mobile money payments. In April 2022, CBK welcomed the launch of mobile money merchant interoperability involving Safaricom, Airtel Networks Kenya and Telkom Kenya. The initiative built on person-to-person mobile money interoperability introduced in 2018.
The next stage of payments development involves extending seamless connections across a wider range of banks, payment service providers and payment system operators.
The Draft National Payment System Policy 2026 identifies technical and operational interoperability as a policy priority. It discusses legal and regulatory frameworks, technical standards and application programming interfaces (APIs) to support real-time processing across payment platforms.
Read Also: Top Comoros Official Hospitalized in Nairobi Amid Rising Tensions in Moroni
For commercial banks, this direction could require stronger integration between core banking platforms, mobile applications, merchant payment services and external payment networks. The exact technical specifications, implementation schedules and binding obligations will depend on the final regulatory framework and any subsequent CBK directives.
What the Draft National Payment System Bill Proposes
The proposed legislation addresses several areas relevant to the digital financial services industry.
First, it seeks to provide a legal framework that supports interoperability across payment systems. The draft Bill proposes regulatory oversight of interoperability arrangements, including CBK approval and powers relating to arrangements between payment service providers and payment system operators.
Second, the draft policy identifies secure data exchange as a way to improve innovation and competition. Application programming interfaces could allow authorised services to communicate without requiring every provider to build an entirely separate connection for each partner.
Third, consumer protection remains important. Payment services must be designed around clear disclosures, the protection of customer funds, complaint-handling procedures and appropriate safeguards for customer information.
The full draft National Payment System Bill 2026 should be consulted for the exact wording of the proposed provisions. Financial institutions should not interpret draft clauses as final enforceable requirements before the legislative process is completed.
Cybersecurity and Operational Resilience
Greater connectivity can improve payment convenience, but it can also increase exposure to cyberattacks, fraud, service disruptions and third-party technology risks. A weakness in one connected service may affect other participants if appropriate safeguards are absent.
CBK already has a regulatory foundation for managing these threats through its Guideline on Cybersecurity for Payment Service Providers. The guideline covers cybersecurity governance, risk assessment, incident response, cyber resilience, vulnerability assessments, penetration testing, outsourcing and independent assurance.
Banks and payment providers should therefore treat cybersecurity as a continuing operational responsibility rather than a future requirement that begins only after new legislation is enacted.
Practical measures include maintaining tested incident-response plans, monitoring suspicious transactions, reviewing third-party access, protecting sensitive information and testing systems for vulnerabilities. Institutions should also ensure that critical services can recover safely after outages or security incidents.
Where new interoperability arrangements are introduced, organisations will need to assess the security of APIs, authentication procedures, transaction reconciliation and the exchange of customer information.
Technical Modules and Financial Institution Requirements
The table below summarises important technical areas that banks and payment providers should assess as the regulatory framework develops. It is an operational planning guide, not a statement that every listed technical measure has already been prescribed by the 2026 draft Bill.
| System Module | Operational Standard | Financial Institution Requirement |
|---|---|---|
| Payment interoperability | Compatible transaction messaging and reliable cross-platform processing | Assess system compatibility, integration interfaces and reconciliation procedures |
| API connectivity | Secure, documented interfaces for authorised system-to-system communication | Apply authentication, access controls, monitoring and change management |
| Transaction settlement | Accurate transaction records and timely reconciliation | Maintain settlement controls, exception handling and auditable records |
| Cybersecurity | Risk-based security governance and incident response | Maintain cybersecurity policies, conduct testing and address identified vulnerabilities |
| Customer data protection | Lawful, controlled and secure sharing of financial information | Restrict access, protect sensitive data and document permitted data exchanges |
| Consumer protection | Clear transaction information and accessible complaint channels | Provide appropriate disclosures, investigate disputes and safeguard customer interests |
| Business continuity | Resilience against system outages and operational disruption | Test recovery arrangements, backups and continuity procedures |
| CBDC readiness | No final Kenyan CBDC architecture or integration mandate confirmed by the cited 2026 draft | Monitor CBK policy developments and avoid treating a CBDC rollout as already approved |
Commercial Banks and Fintech Companies: Preparing for Integration
Commercial banks, mobile money operators and fintech firms can prepare for possible regulatory changes without assuming that every proposal will become law in its current form.
A first step is to review existing payment infrastructure and identify where connections between systems remain costly, slow or difficult to maintain. Institutions can also assess whether their APIs, transaction monitoring tools and reconciliation systems are capable of supporting greater connectivity.
The second priority is cybersecurity. Technology teams should evaluate authentication, privileged access, third-party integrations and incident-response arrangements. Risk and compliance departments should work alongside developers so that security controls are incorporated into system design rather than added after deployment.
Institutions should also review customer communication and dispute-resolution processes. More interconnected payment services may simplify transactions, but customers still need clear information when payments fail, are delayed or are sent to the wrong recipient.
Finally, banks and fintech companies should monitor official CBK notices, final legislation and any technical standards issued by the regulator. Implementation timelines and precise compliance requirements should be based on authoritative documents rather than industry speculation.
What the Reforms Could Mean for Consumers and Businesses
Improved interoperability could make digital payments more convenient by reducing barriers between financial service providers. Small businesses may benefit if customers can pay through a wider range of banking and mobile money channels without complicated workarounds.
Greater competition could also encourage providers to improve service quality and develop new products. However, the benefits will depend on how the system is implemented, the costs charged to participants and customers, and whether smaller providers can connect on fair and practical terms.
Cybersecurity and consumer protection will remain central to public confidence. Seamless payments will have limited value if customers cannot resolve disputed transactions, access their funds during service disruptions or understand how their financial information is shared.
A future CBDC, if approved, would introduce additional policy and design questions. These could include how users access digital central bank money, how privacy is protected and how the system interacts with commercial bank deposits. Such decisions should be guided by a clearly announced framework rather than assumptions that CBDC implementation is already underway.
A Broader Digital Payments Agenda
The 2026 National Payment System policy and Bill proposals signal a push towards a more connected, secure and competitive payments ecosystem. Interoperability, technical standards, consumer protection and cybersecurity are central to that agenda.
Read Also: KNEC Grade 10 Assessment 2026: Guidelines, Timelines & School Requirements
For commercial banks and fintech companies, the immediate priority is to strengthen existing systems, review operational risks and follow the formal regulatory process. The long-term impact will depend on the final legislation and the technical rules that CBK may issue.
The key distinction remains important: payment system reform is not the same as a confirmed CBDC launch. Kenya’s digital payments infrastructure can continue evolving through interoperability and security improvements even as policymakers assess whether a central bank digital currency would serve a clear public need.
