Contact us

Bank regulatory map: which regulations, by when, what to change

Applicable regulations, deadlines and changes to the bank’s IT and processes. An AI scout collects regulator publications; experts verify applicability and conclusions.

Bank regulatory map34 regulationsInformation security requirements · ARDFMJuly 12, 2026 · digital banking, KYC, infosecIn progressDigital assets · National Bank of KazakhstanMay 1, 2026 · licensing, exchangeDoneIslamic window · Central Bank of Uzbekistanlicensing of Islamic operationsDeadline riskCompiled with AI scout · 3 regulatorsAI scout3 regulatorsMap readyregulation deadlines
Market context

2026: the rules are changing all at once

Kazakhstan. The new 135-article banking law rewrote 47 acts and is coming into force in stages through 2027, while new information security requirements and new personal data rules took effect in parallel — three waves of regulation in one year, each of which has to be mapped to systems and deadlines. Uzbekistan. Reform is on schedule: Basel III capital rules are already in force, IFRS 9 follows in 2026 and consolidated supervision in 2027, and state banks holding two thirds of assets are being prepared for sale from 2027.

135
articles in Kazakhstan’s new banking law, with amendments to 7 codes and 40 laws
64,5%
of Uzbekistan’s banking assets held by the state; target: 55% by 2030
FintechstanBased on “Market radar” data

The regulatory map links applicable rules to the bank’s deadlines, systems and owners

The map links requirements to the bank’s systems and processes: deadlines, owners and work status. Source coverage and the as-of date are recorded during preparation.

Why a map, not a folder of regulator letters

Timeline

Rules arrive in batches

Requirements take effect on different dates and may have transition periods. The map links deadlines to tasks and the bank’s owners.

IT

Requirements and IT changes

For applicable requirements, we assess changes to systems and processes: access, identification, reporting or separate accounting.

Radar

Source updates

The AI scout collects publications from selected regulators. Experts verify applicability; update frequency and coverage are agreed.

What’s included: eight parts, from rule inventory to the board pack

Rules for the bank · 34Banking Law No. 258-VIIIARDFMInfoSec requirementsARDFMDigital assetsNBKIslamic windowsCBUBy the bank’s licence, products and business lines

Rule inventory

A list of applicable laws, rules and letters by the bank’s licence, products and business lines, with sources and review date.

Calendar · 2026MayJunJulAugSepOctMay 1 · digital assetsJuly 12 · InfoSecreport · Q3Islamic window

Deadline calendar

Effective dates, transition periods, reports and inspections for the year ahead; horizon and updates are agreed.

InfoSec requirements · July 12, 2026Two-factor accessDigital banking · mobile appBiometrics at sign-upKYC · onboardingIncident reportInfoSec · processChannel encryptionintegrationsWhat changes in the core banking system, digital banking, data and processes

Impact on IT and processes

Applicable requirements mapped to the core banking system, digital banking, data and processes; a list of required changes.

Statuses · 34 requirementsInfoSecInfoSec requirementsIn progressCPIslamic windowDoneITDigital assetsDeadline riskDone18 of 34for the management board

Owners and statuses

The person at the bank responsible for meeting the requirement, work status and risk of missing the deadline.

AI scout · todayARDFMresolution No. 81 · InfoSecNBKdigital asset exchange rulesCBUIslamic banking operationsPublications → expert review → mapAffects the bank2 of 3Reviewexpert

AI scout for regulatory decisions

Collects publications from the ARDFM, the National Bank of Kazakhstan and the Central Bank of Uzbekistan. Applicability and impact are assessed by experts.

Biometrics in online lendingCheck against state databaseincludedLiveness checkpartialPhone number checkno · 6 wksInput to gap analysisexpert assessment

Gap assessment by requirement

A preliminary assessment of compliance and the scope of changes. Complex requirements get a separate gap analysis. Regulatory compliance

Priorities · change budgetInfoSec requirementsurgentDigital assetsQ3Islamic windowQ4Open API2027Plan instead of firefighting

Priorities and budget

Priorities by deadline, risk and scope of work; a preliminary estimate of the change budget.

For the boardmap · calendar · priorities6 pagesFor compliance and ITRequirements34Responsibilities87Owners12working spreadsheet

Package for the board and compliance

A short version of the map for the board; tasks, deadlines and owners for compliance and IT.

Engagement formats: a map within a fixed timeframe, followed by gap analysis and implementation

Card

Timeline and deliverables set in the contract

Map, calendar, priorities and a board package. Scope, timeline and price are set in the contract.

Gap analysis

For a specific requirement

A detailed review of the gap between the requirement and your systems, with a change plan and timeline. Regulatory compliance

Rollout

Changes to IT and processes

Agreed changes delivered by Rocket Tech teams; ready-made modules where they fit the task. Delivery

Experience: banking app research

FAQ

A list of applicable requirements within an agreed scope: deadlines, changes, owners and statuses. The working version goes to compliance and IT, the short version to the board.

The map links the legal assessment to changes in IT and processes, deadlines and owners. It is prepared together with compliance and does not replace legal review.

It collects publications from selected regulators for expert review. Sources, update frequency and applicability to the bank are defined while the map is prepared.

Yes: the ARDFM and the National Bank of Kazakhstan, and the Central Bank of Uzbekistan. The scope of requirements and the format of a group-wide map are agreed by jurisdiction and licence.

Detailed gap analysis and implementation are separate engagements based on the map’s priorities, carried out by Rocket Tech or the bank’s own team.

A fixed price for the agreed scope of the map. Terms for updates, detailed analysis and implementation are set separately.

Market

Market now

What regulators in Kazakhstan and Uzbekistan are changing

52
Kazakhstan regulator announcements in 30 days
10
regulatory announcements in Uzbekistan
All announcements in the Fintechstan radar · as of November 2, 2026
  • ARDFMKazakhstan · October 9The Agency discussed consumer lending and the protection of financial consumers’ rights
  • National Bank of KazakhstanKazakhstan · October 15Macro survey: inflation forecasts improved across the entire horizon
  • National Bank of KazakhstanKazakhstan · October 23Base rate cut to 15.75%
  • National Payment Corporation of KazakhstanKazakhstan · October 27Kazakhstan’s National Antifraud Center launched an information website for citizens

Contact us

Your request goes to our business development team: we will get in touch, work out what needs to go live at your bank and propose a solution.

Brief or presentation, up to 10 MB
Bereke Bank
Halyk Bank
Octobank
Davr Bank
Forte Bank
Colvir
OpenAI Select Partner OpenAI Partner Network badge: ChatGPT Deployment PractitionerOpenAI certificate Alibaba CloudReseller Partner Claude Partner Badge: Claude CodeAnthropic certificate Partnerships
Send a request Tell us what needs to go live at your bank, and a manager will get in touch.
Brief or presentation, up to 10 MB