Artificial intelligence is transforming industries across Kenya and the world. As regulators scramble to keep pace, businesses deploying AI need to understand their legal obligations today — and anticipate what is coming tomorrow.
Artificial intelligence (AI) is no longer a future technology — it is already embedded in financial services, healthcare, agriculture, logistics, and public administration in Kenya. Yet the legal and regulatory framework governing AI remains nascent, leaving businesses navigating significant uncertainty.
The Current Regulatory Position
Kenya does not yet have AI-specific legislation. However, several existing legal frameworks have significant implications for AI development and deployment:
- Data Protection Act 2019 — AI systems that process personal data must comply with the DPA. This includes obligations around automated decision-making, which must be transparent and subject to human review in certain contexts.
- Computer Misuse and Cybercrimes Act 2018 — Governs cyber-enabled conduct and has implications for AI-generated content and cyber-attacks involving AI tools.
- Communications Authority Act — The CAK regulates communications services, with emerging implications for AI-driven communications platforms.
- Competition Act — Algorithmic pricing and AI-driven market behaviour are increasingly scrutinised under competition law frameworks globally, a trend Kenya is beginning to follow.
Key Risks for Businesses
- Data protection non-compliance where AI systems process personal data at scale
- Intellectual property questions around AI-generated content and AI-assisted inventions
- Liability for AI-generated decisions, particularly in regulated sectors
- Consumer protection obligations where AI is used in customer-facing services
What Businesses Should Do Now
Businesses deploying AI in Kenya should conduct a data protection impact assessment (DPIA) for AI systems that process personal data, review their contractual arrangements with AI vendors, and monitor regulatory developments closely. Proactive engagement with the evolving framework now will reduce compliance risk as AI-specific regulation emerges.
Our Technology Law practice advises businesses on ICT contracts, data protection, cybersecurity governance, and emerging technology regulation. Contact us at office@htadvocates.com.