Kenya · AI Regulations
The country's own AI governance approach, risk tiers, transparency duties, and its official authority.
AI-drafted, editorial review pending. The official links below are checked — confirm specifics with the authority.
Kenya has no AI-specific law in force. The Ministry of Information, Communications and the Digital Economy launched the Kenya Artificial Intelligence Strategy 2025–2030 in March 2025 and published a draft Artificial Intelligence and Emerging Technologies Policy for public comment in 2026, and an Artificial Intelligence Bill, 2026 proposing a risk-based regime and an AI Commissioner is before Parliament but has not been enacted. Until a law passes, AI systems fall under existing rules — above all the Data Protection Act 2019, which covers automated decision-making and any processing of personal data, together with consumer-protection and sector rules.
- No AI-specific law is in force; the Artificial Intelligence Bill, 2026 has not been enacted.
- The Kenya AI Strategy 2025–2030 was launched in March 2025.
- AI that processes personal data must comply with the Data Protection Act 2019.
- Ministry of Information, Communications and the Digital Economy
Ministry of Information, Communications and the Digital Economy, which leads national AI policy.
- Office of the Data Protection Commissioner (ODPC)
Office of the Data Protection Commissioner: registration, complaints and breach reports.
Government portals
- Business Registration Service (BRS) — Company, LLP and business-name registration, official searches and insolvency.
- Kenya Revenue Authority (KRA) — Tax PINs, income tax, PAYE, VAT, eTIMS invoicing and customs.
- Directorate of Immigration Services — Work permits and passes, permanent residence, eTA and passports.
- Office of the Data Protection Commissioner (ODPC) — Registration of data controllers and processors, complaints and breach reports.