What you need to know about Business Laws and Regulations in Kenya-2026

Trying to navigate Kenya’s business laws and regulations can seem straightforward at first. Online business registration now saves operators weeks of paperwork, and many government services have moved online.

But the legal environment is changing fast.

The Finance Act 2025 introduced major tax changes that took effect on July 1, 2025. Labor compliance costs also increased this year, while a new disability employment quota came into force in May 2025.

For businesses operating without understanding these changes, penalties can accumulate quickly.

This guide covers what Kenyan businesses actually need to know—business registration, taxes, employment law, foreign investment, data protection, environmental compliance, and the latest 2025 regulatory changes.

Not the full legal text. Not theory. Just what matters and what to do about it.

Start-Up and Registration Business Laws in Kenya

Kenya has made registration significantly easier. The Business Registration Service (BRS) runs through eCitizen, and most founders can complete company formation from a laptop without visiting any office.

The process is simpler than it used to be. You create an account on the eCitizen portal, enter three to five preferred business names (the system checks availability), fill in your business address and the nature of operations, and provide ID details. The system generates the required forms, you print them, sign, and upload. Payment is online.

The costs are low. A Business Name (sole proprietorship) costs KSh 950. A Private Limited Company costs KSh 10,750. Processing takes a few days. Once approved, you get a Certificate of Registration or Incorporation and a Business Registration Number (BRN), which you’ll use for every tax and compliance purpose from that point on.

The trickier question is which structure to choose.

• A sole proprietorship is fast and cheap to register, but the owner is personally liable for every debt the business incurs. If the business fails, creditors can come after your personal assets. This matters.
• A Private Limited Company is a separate legal entity. Shareholders are only liable up to what they invested. This is why it’s the most common structure for startups and SMEs. It also signals credibility to banks, investors, and institutional buyers. The cap of 50 shareholders is rarely a constraint for most businesses.
• A Limited Liability Partnership (LLP) is a hybrid—it’s a legal entity but taxed like a partnership. It works well for professional service firms where partners want liability protection without corporate formality.

For most operators reading this, a Private Limited Company is the right choice. The cost difference from a sole proprietorship is minimal. The liability protection is meaningful.

Tax Laws in Kenya

The Finance Act 2025 was signed into law on June 26th, 2025, with most changes effective July 1st, 2025. This is a significant update and operators need to know it.

Corporate Tax Rate

The standard corporate income tax rate remains 30% for resident companies. This hasn’t changed.

Tax Losses: Now Capped at Five Years

This is a big change. Previously, if your company ran at a loss, you could carry that loss forward indefinitely and use it to offset future profits. Under the Finance Act 2025, you can only carry forward losses for five years from when they were incurred. Losses older than five years are written off.

This directly affects capital-intensive businesses—farming, processing, manufacturing—where the early years involve heavy investment before profitability arrives. If you’re in that position, you need to plan your cash flow and financing assumptions around this constraint. You cannot assume unlimited loss carry-forward.

VAT Registration Threshold Raised

The threshold for mandatory VAT registration has increased from KSh 5 million to KSh 8 million annual turnover. If your turnover is below KSh 8 million, you’re not required to register for VAT.

This gives smaller operators some room. You don’t need to collect and remit VAT until you hit that threshold. Once you cross it, registration becomes mandatory and you must charge 16% VAT on your supplies (with exceptions).

Digital Assets Tax: Abolished, Replaced by Excise Duty

The old 3% Digital Assets Tax on cryptocurrency transactions has been removed. In its place, a 10% excise duty now applies on fees charged by virtual asset providers on virtual asset transactions. If your business involves crypto, review how this affects your cost structure.

Significant Economic Presence Tax (SEPT): Broader Now

SEPT replaced the Digital Service Tax in December 2024. It targets non-resident businesses earning from Kenya through digital means. As of July 2025, the scope has been expanded—the KSh 5 million annual turnover exemption that previously protected smaller non-resident digital suppliers has been removed. All income earned by non-residents via internet or electronic networks from Kenya is now in scope.

If you’re a Kenyan-registered business with local operations, SEPT doesn’t apply to you—you pay normal corporate tax. It’s the foreign platforms earning from Kenya without a local presence that need to worry about this.

e-Invoicing (eTIMS): Mandatory for Everyone

Since January 1, 2024, all businesses must issue invoices through KRA’s electronic Tax Invoice Management System (eTIMS). This applies even if you’re not VAT-registered. Any business expense you want to deduct for tax purposes needs to be supported by an eTIMS-compliant invoice.

If you haven’t registered on eTIMS yet, this is urgent. The penalty for non-compliance is twice the tax due, plus disallowance of the related expense. There is no grace period anymore.

Certificate of Origin Now Required for All Imports

New as of Finance Act 2025: every import into Kenya requires a valid Certificate of Origin. Without it, goods can be seized or forfeited at the border. If your business imports inputs—machinery, raw materials, electronics—make sure your suppliers provide this documentation.

Advance Pricing Agreements: New for Multinationals

For businesses transacting with related parties across borders, the Finance Act 2025 introduced Advance Pricing Agreements (APAs). These allow businesses to agree with KRA upfront on how transfer pricing will be calculated, providing certainty and reducing dispute risk. APAs are valid for up to five years. This is mainly relevant for subsidiaries of foreign companies or businesses with significant cross-border related-party transactions.

What Hasn’t Changed

Turnover tax for small businesses (annual turnover up to KSh 50 million) remains at 1%. Withholding taxes on dividends, interest, and royalties for non-residents remain at 5–15% depending on type. The standard VAT rate stays at 16%.

Employment and Labor Business Laws in Kenya

Running staff in Kenya comes with mandatory contributions to three statutory funds, plus compliance with employment law. The costs went up in 2025.

The Four Statutory Deductions Every Employer Must Make

PAYE (Pay As You Earn)

Standard income tax deducted from employee salaries monthly. Rates are progressive, based on the employee’s income. You deduct it from salary and remit to KRA by the 9th of the following month.

NSSF (National Social Security Fund)

Kenya’s pension scheme. Effective February 2025, contributions increased again—this is the third phase of a five-year phased increase under the NSSF Act 2013. The current rates are:

• Tier 1: 6% of salary up to KSh 8,000 lower earnings limit (minimum KSh 480/month each side)
• Tier 2: 6% of salary between KSh 8,000 and KSh 72,000 upper earnings limit

Both employer and employee contribute equally. The upper ceiling is now KSh 3,840 each per month. Employers with qualifying private pension schemes can opt out of Tier 2. Remit by the 9th of the following month.

SHIF (Social Health Insurance Fund)

As of October 2024, NHIF was replaced by SHIF under the new Universal Health Coverage framework. The rate is 2.75% of the employee’s gross monthly salary, deducted and remitted by the employer to the Social Health Authority (SHA). Unlike the old NHIF, this contribution is uncapped—there’s no maximum. If your employee earns KSh 200,000, you deduct KSh 5,500. Employers were required to register all staff with SHA by October 2024.

Affordable Housing Levy (AHL)

1.5% of the employee’s gross monthly salary, matched by the employer. This goes to the Affordable Housing Programme fund. So employer total cost is 3% of gross salary monthly for each employee.

If you haven’t built all four of these into your payroll, do it now. Penalties for non-compliance range from KSh 100,000 to KSh 500,000 in fines, with potential imprisonment.

Employment Contracts

The Employment Act 2007 requires written employment contracts for all staff. Minimum standards are fixed by law: a maximum 52-hour work week, at least 21 days paid annual leave after 12 months, 30 days’ notice for termination (or pay in lieu), and 3 months paid maternity leave. Dismissal without following due process leads to labor tribunal cases that almost always favor the employee.

Disability Employment Quota

The Persons with Disabilities Act 2025 came into force on May 27th, 2025. If you employ twenty or more people, you must reserve at least 5% of direct employment opportunities for persons with disabilities. You must also formulate policies to promote their rights and modify premises to accommodate them. This is now law.

Work Permits for Foreign Staff

If you’re hiring foreigners, you need the right permit class—Class C for skilled professionals, Class D for general employees, Class G for investors. Applications go through eCitizen. Processing takes weeks. Plan ahead and don’t let permits expire. There are no shortcuts.

Foreign Investment Rules

Kenya allows 100% foreign ownership in most sectors. A foreign entrepreneur can wholly own a Private Limited Company here without a local partner.

Exceptions exist. Telecoms are capped at 80% foreign ownership. Mining requires local participation. Insurance companies must have Kenyan directors. Foreigners cannot own freehold land—you can lease for up to 99 years but cannot hold agricultural freehold. Check sector-specific regulations before assuming you can operate freely.

If you’re investing USD 100,000 or more, consider applying for an Investment Certificate from the Kenya Investment Authority (KenInvest). It’s optional but it fast-tracks permits, locks in protections against nationalization, and guarantees free repatriation of profits and foreign currency.

All foreign-owned businesses must still register with BRS, obtain a KRA PIN, and get all relevant sectoral licenses before operating.

Data Protection Rules

Kenya’s Data Protection Act 2019 requires any business that collects or handles personal data; names, contacts, payment info, biometrics, to register with the Office of the Data Protection Commissioner (ODPC) and comply with its rules.

This isn’t theoretical anymore. The ODPC has been active. Penalties for non-compliance run up to KSh 5 million or imprisonment for officers.

What you need to do: register as a data controller or processor with the ODPC, have a clear privacy notice on your website or platform, collect only the data you need, get consent before processing, and notify ODPC if you experience a data breach.

In late 2024, ODPC published draft regulations on compliance audits and data sharing. Large data handlers should expect periodic audits going forward. If your business handles significant volumes of customer data—a fintech, health platform, or any e-commerce operation—treat this as a real compliance obligation.

Environmental (NEMA) Laws

If your business generates waste, uses chemicals, involves construction, or could affect water, air, or land—you need a NEMA license before you start.

The National Environment Management Authority (NEMA) enforces the Environmental Management and Co-ordination Act (EMCA). Practically, this means any significant project needs an Environmental Impact Assessment (EIA) approval or Environmental Audit before proceeding.

Since 2024, NEMA has introduced new rules on:

• Extended Producer Responsibility (EPR): If you manufacture or import packaged consumer goods, you must register your products and participate in a recycling scheme.
• Hazardous chemicals: If you deal in toxic substances, you must register those chemicals with NEMA effective November 2024.
• Single-use plastics: Restrictions are in force and enforced.

Non-compliance leads to fines and potential project shutdown. Check NEMA’s website for the specific regulations affecting your industry before you start operations.

Local Licenses and County Business Permits

Local business licenses are separate from national registration and they’re not optional. Every county issues trade permits and business licenses under their own business laws, schedule of fees and requirements. The process varies significantly.

Nairobi County runs through the Nairobi Business Center, while rural counties have their own portals or walk-in offices. Budget KSh 2,000–10,000 annually depending on county and business type, and renew before expiry. Operating without a valid county license exposes you to county enforcement and spot fines.

Some sectors add another regulatory layer on top.

Business Standards and Certifications

The Kenya Bureau of Standards (KEBS) operates under the Standards Act (Cap 496) and has authority over product quality and safety across manufacturing, food production, water, building materials, and imports.

There are four key areas you must understand.

Standardization Mark (SM)

The Standardization Mark (SM) is mandatory if you’re manufacturing or selling a product that falls under a regulated Kenya Standard (KS), you must obtain and display this mark before going to market. It applies to food and beverages, bottled water, electrical equipment, construction materials, petroleum products, and dozens of other categories.

The process involves applying to KEBS, submitting product samples for testing, a factory/premises inspection, and paying annual fees. Getting it takes several weeks to a few months. Operating without it where required is an offence.

Diamond Mark of Quality

The Diamond Mark of Quality is voluntary. It’s essentially a premium certification KEBS’s signal that your product exceeds minimum standards. It has marketing value, especially for products competing with imports.

Pre-Export Verification of Conformity

For importers, KEBS runs a Pre-Export Verification of Conformity (PVoC) program. All consignments shipped from countries where KEBS has appointed inspection companies must be accompanied by a Certificate of Conformity. Shipments that fail to comply are subjected to destination inspection at a fee of 5% of the approved customs value. If you’re importing finished goods — food products, electronics, building materials — factor PVoC inspection into your lead times and cost structure.

ISO certification

KEBS also offers three ISO certifications

• ISO 9001 for quality management
• ISO 22000 for food safety
• ISO 14001 for environmental management.

These are voluntary but increasingly required by larger institutional buyers, export markets, and tender processes. If you’re supplying to hotels, supermarkets, or government, ISO certification will come up.

OSHA Workplace Safety Obligations

The Occupational Safety and Health Act 2007 (OSHA) governs all workplaces in Kenya not just factories. It’s enforced by the Directorate of Occupational Health and Safety Services (DOSHS), which conducts workplace inspections and issues enforcement notices.

Under OSHA, it is the employer’s responsibility to provide and maintain plant and systems and procedures of work that are safe and without risk to workers’ health. Employers must ensure safety in connection with the use, handling, storage and transport of articles and substances, provide information, instruction, training and supervision to maintain a safe and healthy workplace, and keep the work environment safe and without health risks.

In practice, this means:

Workplace registration

Any business premises employing people must be registered with DOSHS. This is separate from BRS registration and is often overlooked. Inspectors are authorized to enter premises and check for registration.

First Aid compliance

New First Aid regulations issued in 2024 apply to all workplaces, not just factories. Employers must conduct a first-aid needs assessment and ensure a sufficient number of trained first-aid providers, adequate first-aid boxes, and where necessary, dedicated first-aid rooms. They must also keep records of first-aid incidents and equipment. The first aid audit must be carried out annually by a competent professional.

PPE (Personal Protective Equipment)

It is the employer’s responsibility to provide free protective equipment, including clothing and appliances. If your staff work with machinery, chemicals, construction materials, or agricultural inputs — gloves, goggles, boots, helmets — you provide them. You cannot pass the cost to employees.

Work Injury Benefits Act (WIBA)

Separate from but related to OSHA, WIBA 2007 requires every employer to insure workers against injury and death. You must take out a WIBA-compliant insurance policy. If a worker is injured on the job and you haven’t complied, liability falls entirely on you. The insurance is annual and relatively inexpensive compared to the exposure.

DOSHS has been increasingly active. Enforcement notices, closure orders for non-compliant workplaces, and fines are all in their toolkit. A manufacturing plant, processing facility, farm with employed labor, or even a busy office should have OSHA compliance on the setup checklist not the afterthought list.

County licenses, KEBS standards marks, and OSHA compliance are three separate requirements that most operators treat as one vague obligation. Treating them separately and addressing each before operations start is what actually keeps you out of trouble.

Competition and Anti-Corruption Rules

There are two business law regimes everyone should know.

Competition Law: The Competition Act (Cap. 504) bans price-fixing, market allocation, collusion, and abuse of dominant position. It’s enforced by the Competition Authority of Kenya (CAK).

Any merger or acquisition above the set thresholds must be approved by CAK before closing. Fines for cartels can reach 10% of annual turnover. If you’re discussing pricing with competitors in any context, stop.

Anti-Bribery: The Bribery Act 2016 criminalizes bribery in both public and private sectors. Fines run up to KSh 10 million. Imprisonment up to 10 years. Facilitation payments—small bribes to speed up a government process—are illegal. If someone in government is asking for payment to process your license, document it, report it, and don’t pay.

Investment Incentives: SEZ, EPZ, and NIFC

If you’re a larger investor or export-oriented business, Kenya has significant incentive regimes worth understanding.

Special Economic Zones (SEZ)

Companies that register and operate within SEZs pay only 10% corporate tax for the first 10 years (vs. the normal 30%). They get full exemption from customs duty, VAT, and excise duty on inputs and equipment. Investment allowance of 100% applies for entities investing outside Nairobi and Mombasa, as well as for SEZ businesses. Apply through KenInvest.

Export Processing Zones (EPZ)

Export-oriented manufacturers get a 10-year 0% corporate tax holiday on income from export activities. No VAT or customs duty on imported inputs. Full profit repatriation rights.

Nairobi International Financial Centre (NIFC)

Finance Act 2025 updated the NIFC incentives. Startups certified by NIFC pay:

• 15% corporate tax for the first three years
• 20% for the subsequent four years

For larger NIFC companies investing at least KSh 3 billion in their first three years (and meeting employment thresholds): 15% for 10 years, then 20% for 10 years. This makes Nairobi a genuinely attractive base for regional financial services, fund management, fintech, and insurance operations targeting East Africa.

Intellectual Property Laws

Kenya has functional IP protection business laws. Most operators ignore them until it’s too late.

Trademarks, patents, and industrial designs go through the Kenya Industrial Property Institute (KIPI). KIPI has an online filing system. Register your brand name and logo as a trademark before you build equity in it—the cost is low, the protection is real. Kenya is also a member of ARIPO, which allows regional patents across member states.

Copyright is automatic on creation (books, software, music, designs) but formal registration with the Kenya Copyright Board (KECOBO) makes enforcement significantly easier.

If you’re building a product with a unique name, visual identity, or technology, register the IP now. Waiting costs more than registering early.

Sector-Specific Business Laws and Regulations

Financial Services Regulations

If your business touches money in any structured way lending, savings, forex, mobile money, insurance, investment funds you need a license from either the Central Bank of Kenya (CBK) or the Capital Markets Authority (CMA) or the Insurance Regulatory Authority (IRA).

The licensing thresholds, minimum capital requirements, and compliance obligations are substantial and completely different from normal business compliance. A lot of SMEs drift into regulated territory without realising it.

Food Safety and Public Health

KEBS covers product standards but there’s a separate layer.

Public Health Act compliance, enforced by county public health officers. Any business preparing, handling, or selling food needs a Food Hygiene Certificate for premises and medical certificates for food-handling staff, renewed annually.

County public health inspectors visit without warning and shut premises immediately for violations. This affects restaurants, caterers, processors, hotels, agro-processors.

Agriculture-Specific Licensing

These are mandatory, sector-specific rules and regulators to consider if you are in farming business

• PCPB (Pest Control Products Board) if responsible foe licensing for anyone selling or distributing agrochemicals.
• AFA (Agriculture and Food Authority) for tea, coffee, sugar, dairy, horticulture export.
• Kenya Plant Health Inspectorate Service (KEPHIS) for seed certification and plant imports/exports.

Alcohol and Excise Licensing

Any business producing, distributing, or retailing alcohol needs a license from the Alcoholic Drinks Control Board plus county-level liquor licensing. Excise duty registration with KRA on top. This is relevant for agribusinesses and traders moving into value-added products such as as fruit wines, spirits, fermented beverages.

Consumer Protection Laws

The Consumer Protection Act 2012 is enforced by the Competition Authority of Kenya (CAK). It covers misleading advertising, unfair contract terms, product liability, and right to refund. Most businesses don’t know it exists until a customer complaint escalates to CAK.

Digital and E-Commerce Rules

The Computer Misuse and Cybercrimes Act 2018 and the draft e-Commerce policy create obligations around online transactions, digital contracts, and cybersecurity. Any business operating a website that processes payments or stores customer data has exposure here beyond just ODPC. The Communications Authority of Kenya (CAK) also regulates online content in some contexts.

Land and Property Laws

Leasing commercial property, understanding title search obligations before buying land, stamp duty on lease agreements (currently 1% of annual rent), and the restrictions on foreign land ownership already mentioned briefly. For any business that involves land farming, processing, construction.

The Bottom Line

Kenya’s legal environment is genuinely business-friendly in its structure—low registration costs, improving online systems, and real incentives for compliant operators. The penalties hit non-compliant ones hard.

The key shifts in 2025 are: tax losses now expire at five years (plan your capital structure around this), NSSF contributions increased again in February, SHIF replaced NHIF and is now uncapped, the disability employment quota is law, and the Finance Act 2025 contains several other adjustments worth reviewing if you’re already operating.

The operators who do well in Kenya are not the ones who avoid regulation. They’re the ones who understand it, build it into their operations from the start, and use the compliance systems to their advantage.

Everything above is a framework. For your specific situation especially around tax structuring, data compliance, or employment law engage a certified public accountant (CPA) or an advocate. The laws are real, the regulators are active, and getting it right from the start is cheaper than fixing it later.

---

Updated May 2026, incorporating Finance Act 2025 (effective July 1, 2025), NSSF third-year adjustments (February 2025), SHIF implementation, Persons with Disabilities Act 2025, and related regulations. Consult a qualified Kenyan professional for advice specific to your business.

---

If you’re setting up or scaling a business in Kenya and need help with financial modelling, regulatory navigation, or compliance planning, Trailblazers can help.

Request for Free Consultation Today!