The FSCA regulation plan for 2026 has landed, and while headlines will call it a routine annual refresh, the substance marks a hardening of South Africa’s conduct-supervision agenda. The Financial Sector Conduct Authority (FSCA) published its 2026 Three-Year Regulation Plan on 3 July 2026, as confirmed on the regulator’s Latest News media releases page, the latest rolling instalment of a mechanism that is reviewed and updated annually as a strategic planning tool for the regulator, listed among the FSCA’s Publications and Resources. For insurers and brokers, the real story is not that the plan exists again, but which diagnostic themes from prior years have now graduated into enforceable supervisory priorities.
The FSCA, established on 1 April 2018 as South Africa’s dedicated market conduct regulator succeeding the Financial Services Board, frames the 2026 edition against its Regulatory Strategy 2025-2028, which sets out strategic priorities for the three-year period following the 2021-2025 strategy. Four themes stand out as having moved from watch-list status to active compliance workstreams: algorithmic governance, life-sector concentration risk, retirement-fund fee scrutiny, and anti-money-laundering capacity building.
AI and machine-learning oversight moves from principle to framework
The clearest sign that this year’s plan is not a copy-paste exercise is the treatment of automated decision-making. The regulator notes that emerging technologies such as AI and machine learning are reshaping how financial services are delivered and introduce conduct risks including data privacy breaches and bias in automated decision-making. What is new is the operational commitment: the FSCA and the Prudential Authority will explore integrating high-level AI and machine-learning governance principles into the regulatory framework for culture and governance. For insurers running underwriting models or claims-triage algorithms, bias testing is likely to become a supervisory expectation rather than a suggestion. Governance standards are typically the vehicle used to convert such principles into binding requirements, as seen when the FSCA and the Prudential Authority jointly published standards on IT Governance and Risk Management, and on Cybersecurity and Cyber Resilience during the 2021-2025 strategy period.
Life-sector concentration risk keeps top insurers under the microscope
Market structure is the second thread the FSCA is pulling harder on. Citing the Prudential Authority’s own supervisory data, the regulator states that the five largest life insurers collectively held 72% of total life insurance sector assets as of 31 March 2024, a concentration ratio that keeps South Africa’s life market firmly in oligopoly territory. On the non-life side, the picture is only marginally less concentrated: the 10 largest non-life insurers contributed 64.9% of gross premiums as of 31 December 2023. For an authority whose mandate is market conduct rather than prudential solvency, concentration data of this kind typically feeds decisions about where thematic reviews and pricing-fairness scrutiny get targeted first. Smaller insurers competing against dominant life players should expect the FSCA to keep testing whether concentrated market power is translating into weaker policyholder outcomes — a concern that echoes supervisory attention on uninsured-loss exposure elsewhere on the continent, where African disaster losses go largely uninsured.
Two-Pot fee scrutiny signals a broader retirement-product crackdown
Retirement-fund conduct is the theme with the most direct product-line impact for South African life insurers. The FSCA confirms that it will continue examining high transaction fees on the Savings Pot under the Two-Pot Retirement System after requesting detailed fee data from administrators and self-administered funds. This is a continuation, not a new initiative, but the data-request step matters: it gives the regulator a fee benchmark it did not previously have, which typically precedes enforcement action rather than further consultation. Fund administrators and insurers offering Savings Pot withdrawal products should treat this as the clearest near-term compliance item in the plan, given how the FSCA has escalated other thematic work — the authority already conducted thematic reviews covering conduct concerns on bank account terminations, insurance broker fees, and consumer credit insurance, and broker remuneration remains an open file likely to resurface in 2026 supervisory engagements.
Enforcement numbers show the FSCA is not just planning, it is punishing
The 2026 plan lands alongside enforcement statistics that give the compliance priorities teeth. In the 2023/24 supervisory year, the FSCA imposed R943 million in administrative penalties on 31 entities, up from R153.8 million on 44 entities in 2022/23 — a six-fold jump in penalty value even as the number of sanctioned entities fell, implying materially larger individual fines. Public-facing enforcement also intensified: the FSCA issued 104 public warnings in 2023/24, more than double the 47 issued in 2022/23. Together, the trends suggest the FSCA is willing to escalate faster once a thematic review identifies a problem, raising the stakes for insurers under review for broker-fee or Two-Pot-related conduct issues.
Perimeter expansion and the FATF countdown reshape the compliance map
Two structural shifts round out the 2026 plan. First, the FSCA is widening its own jurisdiction: the regulator plans on bringing payment services, credit-related services including debt collection, foreign exchange services, and medical schemes under its conduct framework via the FSR Act. Insurers with adjacent payment or credit-linked products — including premium-financing arrangements and medical-scheme-linked gap cover — should map which lines fall inside this expanded perimeter before the framework is finalised. Second, AML capacity remains a live priority despite recent progress: following South Africa’s anticipated removal from the FATF grey list, the FSCA will continue strengthening its supervisory and enforcement capacity for AML/CFT risks and prepare for the next round of FATF assessments. That posture mirrors a wider African trend toward codifying governance floors ahead of a compliance failure, comparable to how Egypt’s FRA Decision 70 sets new governance floor for takaful across North Africa, and how newer entrants are being brought into supervised frameworks from the outset, as with Nigeria’s NAICOM issuing its first insurtech licence. The message for South African insurers is the same across both shifts: expect the 2026 plan to convert into inspections and data requests well before the next annual iteration is published.
