Understanding BOFIA 2020: What Nigerian Banks Need to Know

The Banks and Other Financial Institutions Act (BOFIA) 2020, signed into law on 12 November 2020, represents the most comprehensive reform of Nigeria's banking regulatory framework since the original BOFIA 1991. Replacing the nearly three-decade-old legislation, BOFIA 2020 significantly expands the Central Bank of Nigeria's (CBN) supervisory powers and introduces new compliance requirements that every Nigerian financial institution must understand.

Why BOFIA 2020 Matters

The previous Act was drafted in a pre-digital era. It did not contemplate fintech, mobile money, agency banking, or the interconnected global financial system that Nigerian banks now operate in. BOFIA 2020 modernises the legal architecture to reflect current realities while strengthening the CBN's ability to maintain financial stability.

For compliance officers and risk managers, this is not a cosmetic update — it is a fundamental shift in regulatory expectations.

Key Changes at a Glance

1. Expanded CBN Powers

BOFIA 2020 significantly broadens the CBN's regulatory authority. The Act now empowers the CBN to:

Regulate payment service providers, fintechs, and digital lenders — previously outside the CBN's direct supervisory scope
Revoke banking licences without going through a court process in cases of systemic risk
Remove directors and officers of financial institutions who fail to meet fit-and-proper requirements
Set governance standards including board composition, term limits, and independence requirements

2. Corporate Governance Requirements

The Act introduces stricter governance mandates aligned with international best practices:

Maximum tenure for managing directors and board chairs
Enhanced fit-and-proper criteria for directors, including ongoing assessment
Mandatory whistle-blower protection mechanisms
Restrictions on related-party transactions with mandatory disclosure

3. Enhanced Penalties

BOFIA 2020 dramatically increases the consequences for non-compliance:

Fines of up to ₦5 million per day for ongoing regulatory violations
Prison sentences of up to 10 years for directors involved in fraudulent activities
Personal liability for officers who authorise unlawful transactions
Forfeiture of assets derived from regulatory violations

4. Fintech and Digital Banking Regulation

For the first time in Nigerian law, BOFIA 2020 explicitly covers:

Payment service providers and mobile money operators
Digital lending platforms and micro-lenders
Technology-driven financial services not previously contemplated by law

5. Anti-Money Laundering (AML) Alignment

The Act strengthens AML/CFT obligations by requiring financial institutions to:

Maintain robust customer due diligence programmes
Report suspicious transactions within prescribed timelines
Implement effective sanctions screening procedures

What Compliance Teams Must Do Now

Conduct a Gap Analysis

Compare your current policies, procedures, and governance framework against BOFIA 2020 requirements. Key areas to assess include board composition, related-party transaction policies, whistle-blower mechanisms, and AML/CFT procedures.

Update Board Governance

Review director tenures, independence criteria, and fit-and-proper assessments. Ensure your board meets the Act's composition requirements and that proper documentation is maintained for regulatory examination.

Review Technology Partnerships

If your institution partners with fintechs or technology providers, those relationships now fall under enhanced regulatory scrutiny. Ensure proper due diligence and contractual safeguards are in place.

Strengthen Compliance Reporting

With significantly higher penalties for non-compliance, your compliance monitoring and reporting frameworks must be robust enough to identify violations before they escalate. Automated compliance tracking tools can help manage the increased regulatory burden.

How Atheris Helps

Atheris' Compliance Management module comes pre-loaded with BOFIA 2020 requirements mapped to actionable obligations. Our platform provides automated gap analysis, deadline tracking, and board-ready compliance reports — helping Nigerian banks stay ahead of their regulatory obligations without the burden of manual tracking.

By Module

By Industry