Kenya's Draft AI Policy Reshapes Investment Economics, Infrastructure Obligations and Consumer Rights
Detailed analysis of Kenya's draft AI policy finds it reshapes investment economics, imposes infrastructure obligations, and extends consumer rights in ways that could serve as a continental benchmark. A separate provision would require companies to take responsibility for data sent to offshore AI platforms, imposing compliance obligations on any Kenyan business using international AI services.
Kenya AI Rules: you can outsource the processing, but not the blame
The most consequential line in Kenya's draft AI guidance isn't about algorithms or investment — it's about accountability.
Under the proposal from Kenya's Office of the Data Protection Commissioner, a Kenyan bank or hospital that sends customer data to an offshore AI platform remains legally responsible if that data is mishandled abroad. The decision to transfer was yours; the liability travels with it.
For any business currently using ChatGPT, a cloud fraud-detection tool, or any AI service running on servers outside Kenya — which is most of them — this isn't a future problem. It's a compliance obligation that arrives the moment the policy is finalised.
That's a serious ask. But it's also the honest version of data sovereignty: not a flag-waving principle, but a legal cost you carry every time you click 'send'.
2 sources
- Who wins and who loses under Kenya’s AI policy proposal? · techcabal.com · T1
- Kenya wants companies to take responsibility for data sent to offshore AI platforms · techtrendske.co.ke · T2