Regulatory AlertsUganda: lending & credit regulation
RegulatedUganda lending: BOU licenses SFIs/CRBs; unlicensed digital lending faces enforcement
- Lead regulator
- Bank of Uganda
- Also involved
- Uganda Communications Commission (UCC) · Data Protection and Privacy Office (DPO)
- Core law
- Financial Institutions Act 2004
- Entry capital
- UGX 10 billion (Commercial Bank)
- Approval timeline
- 6-12 months for SFI license
- Customer assets
- Segregated accounts required for licensed institutions
- Data protection
- Data Protection and Privacy Act 2019 · Data Protection and Privacy Office
- Sandbox
- No
Lending is strictly regulated under the Financial Institutions Act 2004. Only licensed Supervised Financial Institutions (SFIs) may legally lend. The Bank of Uganda (BOU) supervises banks, microfinance deposit-taking institutions, and credit reference bureaus. Unlicensed digital lenders are subject to enforcement action for operating without a license.
Which licence do you need?
| Your activity | Requirement | Capital | Timeline | Authority |
|---|---|---|---|---|
| Consumer lending | LicenceSFI License (Commercial Bank or Microfinance Deposit-Taking Institution)[1][2] Unlicensed digital lending is prohibited and subject to enforcement. | UGX 10 billion (Commercial Bank) | 6-12 months | Bank of Uganda |
| SME / commercial lending | LicenceSFI License (Commercial Bank or Microfinance Deposit-Taking Institution)[1][3] SME lending requires full SFI license and compliance with concentration limits. | UGX 10 billion (Commercial Bank) | 6-12 months | Bank of Uganda |
| Microfinance | LicenceMicrofinance Deposit-Taking Institution License[1][4] Specific tier for microfinance; lower capital than commercial banks. | UGX 5 billion (Microfinance Deposit-Taking Institution) | 6-12 months | Bank of Uganda |
| Buy-now-pay-later | LicenceSFI License[1] BNPL is treated as consumer credit; requires SFI license. | UGX 10 billion (Commercial Bank) | 6-12 months | Bank of Uganda |
| P2P lending platform | LicenceSFI License[1] P2P platforms facilitating lending must be licensed SFIs. | UGX 10 billion (Commercial Bank) | 6-12 months | Bank of Uganda |
| Credit bureau / scoring | LicenceCredit Reference Bureau License[2][4] CRBs must be licensed by BOU under FIA 2004. | UGX 1 billion (CRB) | 3-6 months | Bank of Uganda |
| Debt collection | Uncertainverify with regulator No specific license identified; likely requires SFI license if lending. | — | — | — |
New — what changed recently
- 2022-06-01GnuGrid CRB Licensing — BOU licensed GnuGrid as the third Credit Reference Bureau, expanding credit data sharing.[2]
- 2022-06-01Mandatory CRB Data Submission — BOU mandated all SFIs to submit credit data to CRBs, effective February 2022.[4]
- 2022-06-01Small Business Recovery Fund Guidelines — BOU issued guidelines for reporting SBRF loans to CRBs and operational standards.[5]
Market-entry checklist
- 1Apply for SFI LicenseSubmit application to BOU with proof of UGX 10 billion capital for commercial lending.
- 2Establish CRB MembershipRegister with licensed CRBs like GnuGrid for mandatory credit data submission.
- 3Implement IFRS 9 ComplianceSet up systems for monthly credit risk returns and impairment classification.
- 4Adopt Data Protection StandardsComply with the Data Protection and Privacy Act 2019 for customer data handling.
- 5Set Up Internal ControlsEstablish policies for insider lending limits and large exposure concentration.