Kenya's draft AI policy sets out a framework for governing emerging technology
Kenya is developing an AI and Emerging Technologies Policy focused on risk, data governance, oversight and responsible adoption.

Quick answer
Kenya is moving toward a more formal framework for governing artificial intelligence. The Kenya Artificial Intelligence and Other Emerging Technologies Policy is being developed alongside the National AI Strategy 2025 to 2030 and is intended to guide responsible adoption across sectors.
Kenya is moving toward a more formal framework for governing artificial intelligence. The Kenya Artificial Intelligence and Other Emerging Technologies Policy is being developed alongside the National AI Strategy 2025 to 2030 and is intended to guide responsible adoption across sectors.
AI is already moving into banking, healthcare, recruitment, education, agriculture and government services. That makes governance more important than it was when AI was mainly an experimental technology.
Why an AI policy matters
An AI system can influence access to credit, employment, healthcare or public services. It can also process large quantities of personal information.
Those risks are different from ordinary software bugs. AI can reproduce bias, produce unreliable outputs or make decisions that are difficult for users to challenge.
Data is central
AI systems depend on data, so governance and data protection are closely connected. Kenya already has a Data Protection Act and a national AI strategy. The emerging policy framework adds a broader governance layer for AI systems and emerging technologies.
Risk-based regulation
Not every AI application presents the same risk. A creative writing assistant is different from a system used to evaluate loan applications or assist medical decisions.
A risk-based approach can therefore apply stronger controls to high-impact systems while keeping lighter requirements for lower-risk applications.
Potential safeguards include testing, documentation, human oversight, auditability and data controls.
Government adoption is especially important
Public agencies hold sensitive information and can affect citizens who have little practical choice about using government services. Automated decisions in government therefore require clear accountability.
Businesses also have a stake
For technology companies, clearer rules can reduce uncertainty, but compliance can also increase costs. Smaller firms may struggle if obligations are complex or change frequently.
The final policy will matter in the details: definitions of high-risk AI, enforcement mechanisms, cross-border services, data requirements and how citizens can challenge automated decisions.
Kenya in the global context
The policy debate is part of a wider global movement toward AI governance. The European Union has adopted the AI Act, while other countries are taking different approaches. African governments are also developing national AI strategies and regulatory frameworks.
Kenya's challenge is to protect citizens while preserving room for local research and innovation.
The draft is not the final law
This point is important for accurate reporting. A draft policy is a policy proposal, not the same thing as an enacted statute. Provisions can change through consultation, legal review and implementation work.
The tecMAMBO take
Kenya's AI governance challenge is to build institutions quickly enough to keep pace with technology. The strongest framework will be one that protects data and citizens without making responsible innovation unnecessarily difficult.
The headline matters less than the implementation details. Who regulates? What is considered high risk? What evidence must companies provide? How can citizens appeal automated decisions? Those questions will determine the practical impact.
FAQ
Is Kenya's AI policy already law?
The policy discussed here is a draft framework and should not be treated as a fully enacted law.
Why regulate AI?
AI can affect high-impact areas such as finance, healthcare, recruitment and government services.
What is risk-based AI regulation?
It applies stronger controls to systems that can cause greater harm and lighter controls to lower-risk applications.
Does it affect businesses?
The final obligations will depend on the policy and any implementing laws or regulations that follow.
Sources
Share this story
Enjoyed this? Share it with someone who'd appreciate it.
Ask MAMBO
Have a plain-English question about this topic? Send it in and we may answer it in a future guide.
Ask a question

