Contact usGet started

Frameworks

AI governance frameworks in Kenya

Kenya regulates automated decisions through the Data Protection Act 2019, with draft AI guidance from the Data Protection Commissioner and the Central Bank of Kenya, and an AI bill before the Senate.

Law

LawKenya DPA section 35Kenya Data Protection Act 2019 and automated decision-makingSection 35 of Kenya's Data Protection Act 2019 limits solely automated decisions with significant effects. Exceptions, the notice and review duty, and AI.In force since 25 November 2019

Regulator guidance

Regulator guidanceODPC AI Guidance NoteODPC Guidance Note on Artificial IntelligenceThe Kenya ODPC's draft Guidance Note on Artificial Intelligence applies the Data Protection Act to AI. High-risk uses, DPIA triggers and governance.Draft dated July 2026, consulted on, final version not yet publishedRegulator guidanceCBK AI Guidance NoteCBK draft Guidance Note on Artificial Intelligence in the Banking SectorThe Central Bank of Kenya's draft Guidance Note on AI would require CBK approval before deploying AI, an annual AI register and 24-hour AI incident reports.Draft for public comment until 7 November 2026
All jurisdictions

Other jurisdictions

Guides

Questions

Which AI governance frameworks are listed for Kenya?

This page lists 3 instruments for Kenya: Kenya DPA section 35, ODPC AI Guidance Note and CBK AI Guidance Note. Which ones apply to you depends on where you operate, your sector and how you use AI. Each framework page explains what it asks of you.

Does Aicura support the frameworks listed for Kenya?

The frameworks listed for Kenya are not built into Aicura. They are explained here to support your governance work, and every plan starts with the AI register, the record any framework needs first.

Start with the AI you run.

Every framework begins with knowing which AI systems and agents you have. The AI register is free to start.

Sign upContact us