Banking Law and Digital Ecosystem Competition Issues in Kuwait

Introduction

Digital banking ecosystems connect banks, payment firms, fintech companies, merchants, telecommunications providers, cloud-service providers and customers through applications, platforms and application programming interfaces (APIs). They can increase convenience, reduce payment costs and improve financial inclusion. However, they can also create competition concerns when a powerful bank or platform controls access to customer data, payment infrastructure, digital identity, cloud capacity or a large customer base.

In Kuwait, competition in digital financial services is regulated through general competition law, Central Bank of Kuwait (CBK) supervision, consumer protection, cyber-security controls and financial-crime rules. The key challenge is to encourage innovation without allowing large banks, payment platforms or technology companies to exclude smaller competitors or misuse customers’ information.

Legal and Regulatory Framework

Kuwait Law No. 72 of 2020 on the Protection of Competition is the main competition statute. It replaced the earlier competition regime and is enforced by the Competition Protection Authority. The law addresses anti-competitive agreements, abuse of dominant position, economic concentration and conduct that restricts competition in the Kuwaiti market.

The law can apply to digital financial markets even though it does not specifically use terms such as fintech, algorithms or platform ecosystems. A digital bank, wallet operator, payment gateway, app marketplace or cloud provider may be subject to competition scrutiny where its conduct affects prices, access, choice, quality or innovation.

The CBK has a separate role because banking is a regulated sector. It licenses and supervises banks, payment services and financial-technology activities. Its open-banking initiatives are important for competition because secure, consent-based APIs can allow licensed third parties to access account information or initiate payments. This may reduce the advantage held by traditional banks that exclusively control customer account data.

However, open banking does not mean unrestricted access. Data sharing must be based on customer consent, secure authentication, confidentiality and appropriate licensing. A bank may refuse access where there is a genuine security, fraud or legal risk, but it should not use compliance as a pretext to block legitimate competitors.

Key Competition Issues

The first issue is market definition. A traditional bank may argue that it competes with all financial institutions, while a fintech may claim that a mobile-payment app is a separate market. Regulators must consider how customers actually use the service, whether they can switch easily and whether a platform has network effects. A service becomes more valuable as more consumers and merchants use it, making it difficult for new entrants to compete.

The second issue is access to data. Customer transaction data can improve credit scoring, fraud detection and personalised products. If a large bank denies fair API access, imposes excessive fees or delays technical integration, it may protect its own digital products from competition. On the other hand, access must remain limited to authorised providers and customer-approved purposes.

The third issue is self-preferencing. A platform may display its own payment method, lending product or insurance partner more prominently than equally suitable third-party services. This can distort consumer choice even if the customer appears to have many options.

The fourth issue is tying and bundling. A bank may offer a popular current account, payment wallet or merchant service on the condition that the customer uses its own lending, investment, cloud or payment product. Bundling is not always unlawful, but it becomes problematic where it forecloses competitors and customers cannot practically obtain the main service elsewhere.

The fifth issue is algorithmic coordination. Digital platforms use pricing, credit and fraud algorithms. If competitors use software that reacts automatically to each other’s prices, their conduct may produce effects similar to price fixing. Firms remain responsible for the commercial outcomes of algorithms that they design, instruct or knowingly use.

The sixth issue is merger control. A large bank or technology company may acquire a small fintech mainly to obtain its customer data, payment technology or future competitive potential. Even if the target has low current revenue, the Competition Protection Authority may need to examine whether the transaction removes an important future competitor.

Regulatory and Compliance Measures

Banks should maintain competition-law compliance programmes for digital products. These programmes should review platform contracts, API access terms, merchant agreements, exclusivity clauses, pricing algorithms and fintech partnerships. Legal and compliance teams should be involved before a digital product is launched.

Open-banking access should be governed by transparent technical standards, objective eligibility requirements and documented refusal procedures. A refusal based on cyber-security or fraud risk should be evidence-based, proportionate and capable of review.

Customer data must not be used beyond the consent given. A bank should separate data governance from commercial pressure and ensure that third-party access does not lead to unauthorised profiling, discriminatory lending or misuse of confidential financial information.

Case Laws

Published Kuwaiti digital-banking competition judgments remain limited. The following European cases are persuasive comparative examples and are not binding on Kuwaiti courts.

In Google Shopping v Commission, Case T-612/17, the General Court upheld action against self-preferencing in online search results. The case illustrates how a dominant digital platform can disadvantage competitors through the design of its own service.

In Meta Platforms v Bundeskartellamt, Case C-252/21, the Court of Justice of the European Union held that competition authorities may consider data-protection rules when assessing abuse of dominance. The case is relevant where financial platforms combine customer data across services.

In Mastercard v Commission, Case C-382/12 P, the Court examined interchange fees in card-payment networks. It demonstrates how payment-network rules can affect merchants, banks and consumers across a two-sided market.

In Intel v Commission, Case C-413/14 P, the Court stressed the need to assess the actual foreclosure effects of loyalty rebates. The principle is relevant where banks use discounts or rewards to discourage customers from using competing payment services.

In Slovak Telekom v Commission, Case C-165/19 P, the Court considered a dominant firm’s obligation not to use access conditions to exclude competitors. The case is useful for analysing fair access to banking APIs and essential digital infrastructure.

In Cartes Bancaires, Case C-67/13 P, the Court clarified that restrictions of competition “by object” require careful legal and economic analysis. It is relevant to digital-payment rules, joint ventures and platform agreements between banks.

Conclusion

Kuwait’s digital financial ecosystem can strengthen banking competition, but only if access, data and platform power are properly controlled. Law No. 72 of 2020 gives the Competition Protection Authority a framework to address anti-competitive agreements, dominance and mergers, while the CBK ensures that innovation remains safe and stable.

The main legal goal is balanced competition: banks and fintech firms should be able to innovate and collaborate, but no participant should use control over data, payment rails or customer access to unfairly block others from the market.