CBB Regulations: Compliance Requirements for Bahrain Financial Services
The Central Bank of Bahrain (CBB) is the sole regulator of Bahrain’s financial services sector, overseeing banks, insurance companies, investment firms, payment service providers and finance companies through its comprehensive rulebook. Compliance with CBB regulations is mandatory for all licensed financial institutions operating in or from Bahrain. The rulebook is structured into multiple volumes, each covering a specific sector, and sets out licensing, capital adequacy, risk management, corporate governance, AML/CFT and reporting requirements. This guide provides a detailed overview of the key compliance obligations for financial services firms regulated by the CBB.
Published: July 2026 | Last updated: July 2026 | Author: Bitrixme Compliance Team
CBB Rulebook Volumes
The CBB rulebook is divided into ten volumes, each addressing a distinct sector of the financial services industry. Each volume contains modules covering specific regulatory topics such as licensing, capital adequacy, public disclosure, AML/CFT, corporate governance and reporting.
| Volume | Sector Covered | Key Modules |
|---|---|---|
| Volume 1 | Islamic banks | Licensing, capital adequacy, Sharia governance, risk management, public disclosure |
| Volume 2 | Conventional banks | Licensing, capital adequacy (Basel III), liquidity, credit risk, operational risk, market risk |
| Volume 3 | Insurance | Licensing, solvency margins, actuarial requirements, Takaful, reinsurance |
| Volume 4 | Investment firms | Licensing (4 categories), capital requirements, client money, custody, conduct of business |
| Volume 5 | Payment service providers | Licensing (4 categories), safeguarding, operational risk, reporting, AML/CFT |
| Volume 6 | Capital markets | Listing rules, market conduct, collective investment schemes, clearing and settlement |
| Volume 7 | Trustee services | Licensing, fiduciary duties, client asset protection, record keeping |
| Volume 8 | Finance companies | Licensing, capital requirements, lending limits, consumer credit, reporting |
| Volume 9 | Specialist licensees | Microfinance, crowdfunding, digital financial advice, ancillary services |
| Volume 10 | Resolution and recovery | Resolution planning, recovery plans, cross-border resolution, bail-in provisions |
Licensing Requirements
No person or entity may conduct financial services business in or from Bahrain without a licence from the CBB. The licensing process depends on the type of activity and the volume of the rulebook that applies. Applicants must submit a detailed business plan, organisational structure, financial projections, fit and proper declarations for senior management and beneficial owners, and evidence of minimum capital requirements. The CBB conducts a thorough assessment of each application, including interviews with proposed senior management. The licensing timeline typically ranges from 3 to 12 months depending on the complexity of the application and the completeness of the submission.
| License Type | Minimum Capital Requirement | Applicable Volume | Typical Timeline |
|---|---|---|---|
| Conventional bank (full branch) | BHD 50 million (USD 133 million) | Volume 2 | 6 – 12 months |
| Islamic bank | BHD 40 million (USD 106 million) | Volume 1 | 6 – 12 months |
| Investment firm (Category 1) | BHD 2 million (USD 5.3 million) | Volume 4 | 4 – 8 months |
| Payment service provider | BHD 200,000 – 1 million (USD 530,000 – 2.65 million) | Volume 5 | 3 – 6 months |
| Insurance firm | BHD 5 million (USD 13.3 million) | Volume 3 | 6 – 9 months |
| Finance company | BHD 1 million (USD 2.65 million) | Volume 8 | 3 – 6 months |
Capital Adequacy
Conventional banks must comply with Basel III capital adequacy requirements as implemented by the CBB. The minimum Common Equity Tier 1 (CET1) ratio is 8.5 per cent of risk-weighted assets, the minimum Tier 1 capital ratio is 10.5 per cent, and the total capital ratio minimum is 13 per cent. These ratios include the capital conservation buffer of 2.5 per cent. Islamic banks follow equivalent requirements under Volume 1, which align with the Accounting and Auditing Organization for Islamic Financial Institutions (AAOIFI) standards. All licensed institutions must calculate and report capital ratios monthly, quarterly and annually as prescribed by the relevant volume.
Capital adequacy requirements extend beyond banks. Investment firms must maintain capital based on a combination of fixed overheads, risk-based capital and credit risk requirements under Volume 4. Payment service providers must hold capital equal to the higher of the minimum capital requirement, 2 per cent of the average monthly transaction value, or the sum of their operational risk exposure and safeguarding requirement. Insurance firms must maintain solvency margins calculated on the basis of premium income and claims exposure under Volume 3.
AML/CFT Compliance
Bahrain’s AML/CFT framework is governed by the CBB rulebook module AML (applicable across all volumes), the Anti-Money Laundering Law (Law No. 4 of 2001 as amended), and the Financial Intelligence Unit (FIU) regulations. Licensed institutions are subject to comprehensive AML/CFT obligations aligned with Financial Action Task Force (FATF) recommendations. Bahrain has been a member of FATF since 2024 and is rated Compliant or Largely Compliant on most FATF recommendations.
Key AML/CFT obligations include conducting customer due diligence (CDD) at account opening and on an ongoing basis, enhanced due diligence (EDD) for high-risk customers and politically exposed persons (PEPs), ongoing transaction monitoring, reporting suspicious transactions to the FIU within 14 days, conducting AML/CFT staff training annually, appointing a compliance officer and a Money Laundering Reporting Officer (MLRO) at managerial level, implementing a risk-based AML/CFT compliance programme, and retaining records for a minimum of five years. The CBB conducts thematic AML/CFT inspections and imposes significant penalties for deficiencies.
Corporate Governance
The CBB has issued comprehensive corporate governance requirements across all volumes. Each licensed institution must have a board of directors with at least five members, a majority of whom must be independent non-executive directors. The board must establish board committees including an audit committee, a risk committee, a remuneration committee and a nomination committee. All committee chairs must be independent directors. The board is responsible for approving and overseeing the institution’s strategy, risk appetite, internal controls and compliance framework.
Senior management must include a chief executive officer approved by the CBB as fit and proper, a chief financial officer, a chief risk officer, a head of compliance (who may also serve as the MLRO), and an internal auditor. All senior management appointments require CBB approval or notification depending on the role. The CBB conducts fit and proper assessments of all board members and senior management, evaluating competence, honesty, integrity and financial soundness.
Sharia Compliance (Islamic Finance)
Bahrain is a leading centre for Islamic finance and the CBB has established a comprehensive Sharia compliance framework under Volume 1 (Islamic banks). Licensed Islamic banks and Islamic windows of conventional banks must establish a Sharia supervisory board (SSB) comprising at least three qualified Sharia scholars. The SSB is responsible for approving products and contracts, supervising operations, reviewing Sharia audits and issuing annual Sharia compliance opinions.
Sharia compliance requirements extend beyond the SSB. Islamic banks must have a Sharia audit function independent of the Sharia supervision function, maintain Sharia-compliant liquidity management arrangements, and ensure that all profit-sharing investment accounts (PSIAs) are managed in accordance with AAOIFI standards. The CBB’s Volume 1 modules on Sharia Governance (SG) and Sharia Compliance (SC) set out detailed requirements. All licensed institutions offering Islamic financial services must comply, regardless of size.
Reporting Requirements
Licensed institutions must submit regular financial, prudential and regulatory returns to the CBB. The frequency and format of reporting depends on the volume and the institution’s licence category. Standard reports include monthly capital adequacy and liquidity returns, quarterly financial statements and risk management reports, annual audited financial statements submitted within three months of year-end, annual compliance and AML/CFT returns, annual internal audit reports, ad hoc notifications for material events, breaches and changes in senior management, and resolution and recovery plan updates as required under Volume 10.
The CBB has implemented an electronic reporting system that all licensed institutions must use. Late or inaccurate reporting can result in penalties ranging from formal warnings to fines and restrictions on business activities. Institutions should maintain a reporting calendar and assign clear responsibility for each return to ensure timely and accurate submission.
CBB Inspections and Penalties
| Inspection Type | Frequency | Scope | Potential Outcome |
|---|---|---|---|
| Full-scope on-site inspection | Every 1 – 3 years, risk-based | Comprehensive review of all activities, controls and risk management | Formal finding letter, corrective action plan, enforcement action |
| Thematic inspection | As determined by CBB | Single topic across multiple institutions (e.g. AML/CFT, credit risk) | Sector-wide guidance, institution-specific findings |
| Desk-based review | Quarterly / ongoing | Review of submitted returns, ratio monitoring, trend analysis | Clarification requests, early warning letters |
| Targeted inspection | As triggered | Specific concern, complaint or breach report | Immediate corrective measures, potential penalties |
The CBB has a graduated enforcement framework. Minor breaches typically result in a letter of comment or formal warning. More serious or repeated breaches can lead to financial penalties of up to BHD 500,000 (approximately USD 1.33 million) per violation, restrictions on business activities, suspension or removal of senior management, suspension or revocation of the licence, public censure, and in cases of wilful violation, referral to the public prosecutor. The CBB published its Enforcement Policy in 2022, which outlines the range of enforcement actions and the factors the CBB considers in determining the appropriate response.
FAQ
Who needs a CBB licence?
Any person or entity conducting financial services in or from Bahrain requires a CBB licence. This includes banking, insurance, investment, payment services, finance company activities, trustee services and capital market activities. Operating without a licence is a criminal offence.
What is the difference between the CBB rulebook volumes?
Each volume covers a specific sector of the financial services industry. Your institution is regulated under the volume that corresponds to your licence category. Some institutions hold licences under multiple volumes if they conduct multiple types of regulated activities.
How long does a CBB licence application take?
Licensing timelines vary by complexity. A simple payment service provider licence may take 3 to 6 months. A full banking licence can take 6 to 12 months. The CBB provides a pre-application process that can help identify issues early and accelerate the timeline.
What are the AML/CFT requirements for CBB-regulated firms?
CBB-regulated firms must conduct customer due diligence, maintain ongoing transaction monitoring, report suspicious transactions to the FIU, appoint a compliance officer and MLRO, conduct annual AML training, implement a risk-based compliance programme and retain records for five years. The CBB conducts regular AML/CFT inspections.
Does the CBB regulate Islamic finance separately?
Yes. Islamic banks and Islamic windows are regulated under Volume 1 of the CBB rulebook, which sets out specific requirements for Sharia governance, Sharia compliance, capital adequacy for Islamic institutions and AAOIFI alignment. Conventional banks offering Islamic windows must maintain separate Sharia compliance arrangements.
What happens if my institution fails a CBB inspection?
The CBB will issue a findings letter requiring corrective actions within a specified timeframe. Failure to address findings can lead to escalating enforcement actions including financial penalties of up to BHD 500,000, restrictions on activities, suspension of senior management or licence revocation.
Ready to ensure your CBB compliance is up to date? Contact our compliance team for a comprehensive regulatory gap analysis, or message us directly on WhatsApp.
