Banking Law and Professional Conduct Standards for Bankers in Kuwait

1. Introduction

Professional conduct standards for bankers in Kuwait are the legal, regulatory, ethical, and internal-governance rules governing how bank directors, senior managers, employees, relationship managers, compliance officers, dealers, credit officers, and other banking personnel must perform their duties.

There is no single Kuwaiti statute titled a “Bankers’ Professional Conduct Act.” Instead, professional conduct arises from several overlapping sources, particularly the Central Bank of Kuwait (CBK) framework, banking legislation, AML/CFT legislation, commercial and civil law, corporate governance requirements, customer-protection rules, and banks’ internal policies.

The fundamental expectation is that banking personnel should act lawfully, competently, carefully, honestly, and within their authority while protecting customers and the financial system.

The principal areas include:

• honesty and integrity;
• professional competence and due care;
• customer confidentiality;
• fair treatment of customers;
• avoidance and management of conflicts of interest;
• accurate disclosure;
• responsible lending;
• AML/CFT compliance;
• protection of customer assets and information;
• market integrity;
• appropriate handling of complaints;
• cybersecurity and operational controls; and
• accountability of senior management.

2. Main Kuwaiti Legal Framework

The principal banking legislation is Law No. 32 of 1968 concerning Currency, the Central Bank of Kuwait and the Organisation of Banking Business, as amended.

The law establishes the CBK and provides the foundation for the regulation and supervision of banks operating in Kuwait.

CBK instructions supplement the legislation in areas including:

• corporate governance;
• risk management;
• internal controls;
• compliance;
• consumer protection;
• remuneration;
• information security;
• outsourcing;
• credit activities; and
• AML/CFT controls.

Bank employees therefore operate within both statutory requirements and detailed supervisory expectations.

3. Integrity and Honesty

Integrity is fundamental to banking conduct.

Bank personnel should not knowingly:

• falsify customer information;
• manipulate internal records;
• conceal material conflicts;
• misrepresent financial products;
• misuse customer money;
• create fictitious transactions;
• circumvent compliance controls; or
• assist customers in concealing unlawful activity.

For example, assume a relationship manager knows that a customer's actual income is KWD 1,500 per month but enters KWD 4,000 into the credit system so that the customer qualifies for a larger facility.

This is not simply poor customer service. It potentially raises issues involving internal misconduct, inaccurate records, responsible lending, fraud risk, and regulatory compliance.

4. Professional Competence and Due Care

Bankers handling specialized activities should possess appropriate knowledge and competence.

This is particularly important for employees working in:

• lending;
• treasury;
• investment products;
• private banking;
• Islamic banking;
• derivatives;
• AML compliance;
• sanctions screening;
• cybersecurity; and
• operational risk.

Professional care requires employees to understand the transaction rather than merely follow customer instructions mechanically.

A credit officer, for example, should evaluate the information required under applicable lending policies instead of approving a facility solely because the applicant is an important client.

5. Customer Confidentiality

Banking relationships inherently involve sensitive information.

Employees can encounter:

• account balances;
• salaries;
• loan obligations;
• investments;
• transaction histories;
• identity information;
• business information; and
• family financial arrangements.

Such information should not be disclosed merely because another person asks for it.

Confidentiality obligations are nevertheless subject to lawful exceptions, including circumstances where disclosure is required under applicable legislation, regulatory supervision, judicial processes, or AML/CFT obligations.

The appropriate principle is therefore:

customer confidentiality, subject to legally authorized disclosure.

6. Fair Treatment of Customers

Professional conduct also requires appropriate treatment of customers.

Customers should receive sufficiently clear information about significant characteristics of banking products, including applicable:

• interest or profit arrangements;
• fees;
• repayment obligations;
• security requirements;
• penalties;
• important risks; and
• contractual conditions.

A bank employee should not describe a materially risky financial product as effectively risk-free merely to obtain a sale.

The sophistication of the customer and the nature of the product can affect the extent of explanation reasonably required.

7. Conflicts of Interest

Conflicts can arise when an employee's personal interest interferes with the bank's or customer's interests.

Consider a credit manager whose relative owns a company seeking substantial financing from the bank.

The manager should not conceal that relationship and independently control the approval process.

Banks normally address such risks through:

disclosure → recusal → independent assessment → documentation.

Similar issues arise in investment services where an institution receives economic benefits for promoting particular products.

8. Gifts and Improper Benefits

Banks generally need internal controls governing gifts, hospitality and personal benefits.

A small conventional business gift may present a very different risk from a substantial personal payment offered immediately before approval of a loan.

Bankers should not accept benefits intended to improperly influence:

• lending decisions;
• procurement;
• investment recommendations;
• account opening;
• compliance decisions; or
• internal investigations.

Depending on the circumstances, serious conduct can extend beyond internal disciplinary matters into criminal or anti-corruption issues.

9. Responsible Lending

Professional standards are particularly important in consumer and retail credit.

Employees should follow applicable creditworthiness, affordability and internal risk procedures.

For example:

A customer requests a substantial consumer facility. The banker discovers significant existing obligations but deliberately omits them to obtain approval.

Such conduct can expose both the employee and institution to risk.

Responsible lending therefore requires accurate information, appropriate assessment and compliance with applicable CBK requirements rather than simply maximizing loan volumes.

10. Mis-Selling

Mis-selling occurs where financial products are sold through materially misleading, incomplete or inappropriate representations.

For example, a banker might describe a market-linked investment as a “guaranteed deposit” even though the customer's capital is exposed to investment risk.

Potential consequences include:

• customer complaints;
• contractual disputes;
• compensation claims;
• regulatory intervention;
• disciplinary action; and
• reputational damage.

Sales incentives should therefore not override customer-protection obligations.

11. AML/CFT Conduct

Professional conduct has a particularly strong connection with Law No. 106 of 2013 regarding Anti-Money Laundering and Combating the Financing of Terrorism.

Bank employees form an important part of the institution's AML control system.

Their responsibilities can include:

• customer identification;
• beneficial-owner verification;
• understanding the business relationship;
• transaction monitoring;
• enhanced due diligence;
• PEP controls;
• sanctions-related procedures;
• record keeping; and
• escalation of suspicious activity.

A relationship manager should not deliberately structure customer records to prevent compliance personnel from understanding the true beneficial ownership of an account.

12. Suspicious Transactions and Tipping-Off

Where suspicious circumstances arise, employees should follow the institution's escalation procedures.

They should not improperly alert the customer that an AML report or investigation is being considered where such disclosure is prohibited.

For example, telling a customer:

“Compliance thinks your transfers are suspicious, so move the money before they report you”

would represent an extremely serious compliance failure.

Bank personnel should follow formal internal AML channels instead.

13. Know Your Customer

Professional bankers must understand that KYC is more than collecting a passport copy.

Depending on the risk and applicable requirements, the institution may need to understand:

Identity → beneficial ownership → purpose of relationship → expected activity → source information → ongoing behaviour.

For corporate customers, this can require examination beyond the company's immediate legal representative to determine relevant ownership and control.

14. Record Keeping

Professional conduct includes maintaining accurate records.

Employees should not:

• backdate documents improperly;
• destroy relevant records;
• alter customer signatures;
• manipulate transaction descriptions;
• create fictitious approvals; or
• conceal compliance warnings.

Good record keeping is particularly important because banking disputes frequently turn on documentary evidence.

An institution must often demonstrate what information was provided, what instructions were received, and who authorized the transaction.

15. Acting Within Authority

Bank employees operate under defined authority limits.

A branch manager authorized to approve facilities up to KWD 100,000 cannot necessarily approve a KWD 500,000 facility merely because the customer urgently needs it.

Internal authority structures protect the institution from uncontrolled risk.

Professional conduct therefore requires employees to distinguish between:

having access to a banking system

and

having legal or internal authority to approve the transaction.

16. Customer Instructions and Payment Fraud

Employees must verify customer mandates and payment instructions according to applicable procedures.

Suppose an employee receives an unusual request to transfer a customer's entire account balance to a newly introduced overseas beneficiary.

Depending on the circumstances, appropriate verification and fraud controls may be required before processing.

At the same time, bankers cannot simply disregard valid customer instructions without a legal or contractual basis.

The difficult balance is between:

executing legitimate instructions promptly

and

responding appropriately to indicators of fraud or lack of authority.

17. Data Security and Digital Conduct

Modern professional standards extend beyond physical documents.

Employees may have access to:

• mobile banking systems;
• customer databases;
• authentication information;
• internal communications;
• credit records; and
• transaction-monitoring platforms.

A banker who accesses the account of a celebrity, friend or neighbour merely out of curiosity can create a serious confidentiality and internal-control issue even if the information is never publicly disclosed.

Access should therefore be based on legitimate business need.

18. Social Media

Confidentiality obligations continue outside working hours.

Employees should not publish customer information on social media or disclose confidential internal banking information through personal communication channels.

Even apparently harmless comments can reveal protected information.

For example:

“A famous client just transferred KWD 10 million through my branch.”

Removing the client's name may not necessarily make the disclosure safe if the surrounding information makes the person identifiable.

19. Senior Management Responsibility

Professional conduct is not limited to junior employees.

Boards and senior management are responsible for establishing an appropriate governance and control environment.

Their responsibilities can include:

• defining risk appetite;
• ensuring adequate compliance resources;
• establishing internal controls;
• overseeing conflicts;
• approving important policies;
• supervising remuneration structures; and
• ensuring effective internal audit.

A bank cannot maintain an aggressive sales culture and then treat every resulting compliance failure solely as the fault of frontline employees.

Governance incentives matter.

20. Three Lines of Defence

Banks commonly organize control responsibilities through a model resembling three lines:

First line — business functions

Employees conducting banking activities own and manage operational risks.

Second line — risk and compliance

These functions establish frameworks, monitor compliance and challenge business decisions.

Third line — internal audit

Internal audit independently evaluates governance, risk management and controls.

Professional conduct therefore operates institutionally rather than depending entirely on individual morality.

21. Islamic Banking Conduct

Kuwait has an important Islamic banking sector.

Personnel working in Islamic finance may face additional requirements concerning the institution's Sharia-compliant products and governance arrangements.

Misrepresenting a conventional economic arrangement as Sharia-compliant can create contractual, governance and reputational concerns.

Employees should accurately explain structures such as:

• Murabaha;
• Ijara;
• Musharaka;
• Mudaraba; and
• other Islamic financing products.

The legal form, documentation and approved Sharia structure should correspond with how the transaction is presented to customers.

22. Employment and Disciplinary Consequences

Professional misconduct can lead to internal consequences, including:

• warning;
• suspension;
• reassignment;
• loss of authority;
• dismissal; or
• internal investigation.

More serious conduct may also create:

• civil liability;
• regulatory consequences; or
• criminal liability.

The consequence depends on the conduct and the legal provisions involved.

Case Law and Comparative Banking Authorities

A qualification is important: publicly accessible Kuwaiti judgments dealing specifically with modern professional-conduct standards for individual bankers are relatively limited compared with jurisdictions maintaining extensive searchable banking-law databases. It would be unreliable to manufacture six Kuwaiti case citations merely to fill a list.

The following well-established comparative banking decisions illustrate principles relevant to Kuwaiti professional banking practice. They are not binding Kuwaiti precedents. Kuwaiti courts apply Kuwaiti legislation and applicable principles of Kuwaiti law.

1. Barclays Bank plc v Quincecare Ltd [1992] 4 All ER 363

This English case became the foundation of what became known as the Quincecare duty.

The dispute concerned payment instructions given by an agent associated with fraud against the company.

Professional-conduct relevance

It illustrates why banking employees should not treat authority and suspicious circumstances as irrelevant when processing instructions through an agent.

However, its scope must be understood alongside later authority, especially Philipp v Barclays.

2. Philipp v Barclays Bank UK PLC [2023] UKSC 25

The UK Supreme Court substantially clarified the Quincecare principle.

It distinguished situations involving instructions from an agent from circumstances where a customer personally and validly authorizes a payment.

Relevance to Kuwait

The comparative lesson is that bankers need to determine who actually issued the instruction and whether that person had authority, rather than applying an unlimited obligation to prevent every potentially unwise payment.

3. Lipkin Gorman v Karpnale Ltd [1991] 2 AC 548

The case arose after a law-firm partner dishonestly withdrew money from the firm's bank account and used it for gambling.

The House of Lords considered restitutionary recovery.

Banking relevance

It illustrates the serious legal consequences that can follow misuse of money and unauthorized dealings with funds.

For professional bankers, reliable mandate controls and transaction records are crucial safeguards against comparable problems.

4. Royal Brunei Airlines Sdn Bhd v Tan [1995] 2 AC 378

The Privy Council considered dishonest assistance in breach of trust.

Conduct significance

Financial professionals should not knowingly participate in arrangements involving misuse of property merely because another person formally initiates the transaction.

The case is especially useful when discussing the line between ordinary execution of transactions and dishonest participation in wrongdoing.

5. Twinsectra Ltd v Yardley [2002] UKHL 12

The House of Lords considered dishonest assistance and the misuse of money that had been advanced for a specified purpose.

Subsequent jurisprudence refined the approach to dishonesty.

Banking relevance

The case remains useful in explaining why professionals dealing with restricted or fiduciary funds need to understand the legal purpose for which those funds may be used.

6. Ivey v Genting Casinos (UK) Ltd [2017] UKSC 67

Although not itself a banking dispute, the UK Supreme Court's discussion of dishonesty became highly influential in English law.

The court focused on the individual's actual knowledge or belief about the facts and then assessed the conduct against objective standards of ordinary decent people.

Professional-conduct relevance

Dishonesty in banking can involve more than outright theft. Falsifying records, deliberately concealing conflicts or knowingly facilitating improper transactions can raise similarly serious questions.

7. Hedley Byrne & Co Ltd v Heller & Partners Ltd [1964] AC 465

This famous case arose from information supplied by a bank concerning the creditworthiness of a customer.

The House of Lords recognized the broader principle that negligent statements can, in appropriate circumstances, create liability where a sufficient relationship of responsibility exists, although the disclaimer in that particular case prevented liability.

Professional-conduct relevance

Bank employees should exercise care when providing financial information or representations on which others may foreseeably rely.

8. Caparo Industries plc v Dickman [1990] 2 AC 605

Although primarily an auditors' negligence case, Caparo is important to professional liability because it addresses circumstances relevant to determining whether a duty of care exists.

Banking relevance

Professional status does not mean a banker owes an unlimited duty to everyone affected economically by banking information or decisions. The legal relationship, purpose of the communication and surrounding circumstances matter.

Practical Example

Assume a Kuwaiti bank relationship manager handles a wealthy corporate customer.

The customer requests a KWD 3 million transfer to a newly incorporated overseas company. The transaction differs materially from the customer's usual activity.

The manager also discovers that the overseas company is controlled by a relative of the customer's representative.

The customer says:

“Don't involve compliance. Process it immediately and I'll make sure you receive something personally.”

Professional conduct requires the employee to follow the bank's controls rather than the customer's pressure.

The relevant issues include:

unusual transaction → beneficial ownership → conflict/bribery concern → AML review → authorization → documentation → escalation where required.

The employee should not bypass compliance merely because the customer is commercially important.

Professional Conduct Framework

Relationship Between Law and Ethics

A useful distinction is that legal compliance establishes mandatory requirements, while professional ethics can demand responsible behaviour even where a statute does not prescribe every individual action.

For example, a banker may discover that a sales presentation is technically accurate but deliberately structured so that a vulnerable customer is unlikely to understand a major risk.

Professional conduct should not be reduced to asking:

“Can we legally get away with this wording?”

A sound banking framework instead asks whether the customer receives sufficiently clear and accurate information and whether applicable regulatory requirements have been satisfied.

Conclusion

Professional conduct standards for bankers in Kuwait operate through an interconnected system of banking regulation, CBK supervision, corporate governance, customer protection, AML/CFT requirements, contractual obligations, internal controls and individual accountability.

The principal statutory foundations include Law No. 32 of 1968 concerning Currency, the Central Bank of Kuwait and the Organisation of Banking Business and Law No. 106 of 2013 concerning AML/CFT, together with relevant CBK regulations and instructions.

For individual bankers, the central principles are straightforward: act honestly, remain within authority, protect confidential information, treat customers appropriately, disclose and manage conflicts, maintain accurate records, follow AML/KYC controls and escalate suspicious or unauthorized activity through the proper channels.

Comparative cases such as Quincecare, Philipp v Barclays, Lipkin Gorman, Royal Brunei Airlines, Twinsectra, Ivey, Hedley Byrne,* and *Caparo help explain issues of authority, dishonesty, professional responsibility and financial loss. They should, however, be identified as comparative authorities rather than Kuwaiti precedents. In a Kuwait-specific dispute, the controlling analysis must begin with Kuwaiti legislation, applicable CBK requirements, the parties' contractual arrangements and any relevant Kuwaiti judicial authority.