Bosnia and Herzegovina: lending & credit regulation

Partially regulated

Lending regulated by entity laws; CBB supervises credit registers and banks only

Lead regulator: Central Bank of Bosnia and Herzegovina (CBB)
Also involved: Ministries of Finance of FBiH and RS (non-bank supervision) · Agency for Personal Data Protection
Core law: Law on Banks and Other Financial Institutions (FBiH/RS)
Entry capital: —
Approval timeline: —
Customer assets: Segregated accounts required by entity laws
Data protection: Law on Personal Data Protection · Agency for Personal Data Protection
Sandbox: No

Bosnia and Herzegovina has a complex, decentralized regulatory structure. The Central Bank of Bosnia and Herzegovina (CBB) directly supervises only banks and financial institutions, while non-bank lending is regulated by the laws of its two entities: the Federation of Bosnia and Herzegovina (FBiH) and the Republika Srpska (RS). The CBB manages the Central Credit Register, which is mandatory for reporting entities. There is no unified federal license for non-bank consumer lending; founders must navigate entity-specific capital and registration requirements.

Which licence do you need?

Your activity	Requirement	Capital	Timeline	Authority
Consumer lending	LicenceConsumer Credit License Entity-specific licensing required; CBB does not license non-banks	—	—	FBiH/RS Ministry of Finance
SME / commercial lending	LicenceFinancial Institution License Banks regulated by CBB; non-bank SME lenders by entities	—	—	CBB (if bank) or Entity Ministry (if non-bank)
Microfinance	LicenceMicrofinance Institution License Specific legal framework exists in FBiH for microfinance	—	—	FBiH/RS Ministry of Finance
Buy-now-pay-later	Uncertainverify with regulator No specific BNPL regime; likely falls under consumer credit	—	—	—
P2P lending platform	Uncertainverify with regulator No explicit P2P lending regulation identified	—	—	—
Credit bureau / scoring	RegistrationCentral Credit Register Participant^[1][2][3][4] Mandatory data submission to CBB register for reporting entities	—	—	Central Bank of Bosnia and Herzegovina
Debt collection	LicenceCollection Agency License Regulated under entity-specific debt collection laws	—	—	FBiH/RS Ministry of Interior/Finance

New — what changed recently

2019-01-01Decision on Amendments to the Central Credit Register — Aligned data processing with personal data protection laws, requiring explicit informed consent for data access.^[1]
2019-01-01Decision on Amendments and Supplements to the Central Credit Register — Introduced new fields for delay days and defined inactive participants failing to update data for 12 months.^[2]
2019-01-01Decision on the Central Credit Register — Formally established the Central Credit Register, mandating systematic credit data submission by financial institutions.^[3]

Market-entry checklist

1Determine entity jurisdictionDecide whether to operate in FBiH or RS, as lending laws differ significantly between the two entities.
2Register with Central Credit RegisterRegister as a participant with the CBB to comply with mandatory credit data reporting requirements.
3Obtain entity-specific licenseApply for the appropriate consumer credit or financial institution license from the relevant Ministry of Finance.
4Ensure data protection complianceImplement systems compliant with the Law on Personal Data Protection and CBB register access rules.
5Verify capital requirementsCheck the specific statutory minimum capital for non-bank lenders in the chosen entity jurisdiction.

Sources

This guide is compiled automatically from 4 primary-source documents published by Bosnia and Herzegovina's regulators, reviewed by RegAlert, and refreshed monthly (last updated 2026-07-12). It is not legal advice — always confirm requirements with the regulator or local counsel before acting.