Legal insight
Kenya's National AI Strategy 2025-2030: Vision, Pillars, and Pathways to Implementation
A practical reading of Kenya's National AI Strategy: infrastructure, data, research and the governance choices needed to move from policy to delivery.

Kenya has established itself as one of Africa's leading technology and innovation centres, supported by a growing digital economy, widespread adoption of mobile financial services, an active startup ecosystem and increasing investment in digital infrastructure. From financial technology and e-commerce to agricultural innovation and digital public services, technology has become an important driver of economic activity and institutional transformation.
Artificial intelligence presents an opportunity to build on these achievements. Its potential extends beyond automating existing processes to improving public service delivery, developing new products, advancing research and creating opportunities for Kenyan businesses to participate in the global digital economy.
However, realising these opportunities requires more than encouraging the adoption of AI tools. Kenya must develop the infrastructure, data resources, technical expertise, investment environment and governance arrangements necessary to support a sustainable domestic AI ecosystem.
Recognising these priorities, the Government of Kenya officially launched the National Artificial Intelligence Strategy 2025–2030 on 27 March 2025 at the Kenyatta International Convention Centre in Nairobi.
Developed through consultations involving government institutions, the private sector, academia, civil society and development partners, the strategy establishes a national framework for advancing AI research, innovation and commercialisation while promoting responsible and inclusive adoption. Our partner, Nelson Nkari, participated in these consultations as a stakeholder.
Its overarching ambition is to position Kenya as a regional leader in AI research, development, innovation and commercialisation for inclusive socioeconomic development.
The strategy also builds on broader continental developments, particularly the African Union's Continental Artificial Intelligence Strategy, which was endorsed in July 2024. While the continental framework articulates Africa's collective vision for responsible AI, Kenya's national strategy identifies the particular capabilities and priorities the country intends to develop in pursuit of that vision.
The significance of Kenya's strategy therefore lies not only in its ambitions, but also in the institutional, economic and legal decisions required to translate those ambitions into measurable outcomes.
The three pillars of Kenya's National AI Strategy
Kenya's National AI Strategy is structured around three interconnected pillars: AI Digital Infrastructure, Data, and AI Research, Development and Innovation.
Together, these pillars address important requirements for building a competitive domestic AI ecosystem. They recognise that innovation cannot be sustained without the underlying infrastructure needed to develop and operate AI systems, reliable data to support their functionality, and institutions capable of transforming research into useful commercial and public-sector applications.
The strategy is also supported by four cross-cutting enablers: talent development, governance, investment, and ethics, equity and inclusion.
These elements are closely related. Infrastructure provides the technical foundation for development, data supports AI research and system performance, and innovation converts those capabilities into products and services. The supporting enablers seek to ensure that the ecosystem develops sustainably and responsibly.
AI Digital Infrastructure: Building the foundation for innovation
The first pillar focuses on modernising Kenya's digital infrastructure to support AI development and adoption.
Artificial intelligence, particularly the development and operation of advanced models, can require significant computing capacity, reliable connectivity, data storage and supporting technical infrastructure. Access to these resources influences which organisations can develop AI solutions and the costs involved in doing so.
For Kenyan startups, universities and smaller technology companies, limited access to affordable computing resources can create a significant barrier to innovation. Organisations may possess the technical expertise or ideas necessary to develop useful AI applications but lack the infrastructure required to train, test or deploy them at scale.
The strategy seeks to address these constraints by strengthening the country's infrastructure capabilities and improving access to resources necessary for AI development.
This ambition is relevant to Kenya's broader digital transformation agenda, including investment in connectivity, data infrastructure and digital services.
From a commercial perspective, the infrastructure pillar creates opportunities for technology companies operating in cloud computing, data centres, telecommunications, cybersecurity and managed services.
It also raises important questions for institutions procuring AI infrastructure or cloud-based services.
Organisations must consider how their infrastructure arrangements will affect information security, system availability, operational resilience and compliance with applicable data-protection requirements.
For example, a Kenyan organisation intending to deploy AI through a foreign cloud provider should examine the locations in which its information will be processed, the provider's contractual commitments, applicable cross-border data-transfer requirements and the practical consequences of service disruption.
Public institutions face additional considerations relating to procurement, interoperability, continuity of service and the responsible management of public resources.
The infrastructure pillar should therefore be understood as both a technological development priority and an opportunity to strengthen the commercial and governance arrangements supporting Kenya's digital economy.
Data: Developing a reliable and sustainable AI ecosystem
The second pillar recognises data as a fundamental resource for AI development.
The performance of an AI system depends substantially on the relevance, quality and suitability of the information available to it. Although sophisticated models can be developed using large quantities of data, the practical value of their outputs depends on how accurately the underlying information reflects the circumstances in which the system will operate.
Kenya generates substantial amounts of information across sectors such as financial services, agriculture, healthcare, education and public administration. However, the existence of data does not necessarily mean it is accessible, properly structured or suitable for AI development.
Information may be distributed across different institutions, maintained in incompatible formats or subject to legal and contractual restrictions.
The strategy seeks to establish a stronger data ecosystem capable of supporting research, innovation and the development of locally relevant AI solutions.
This requires attention to data quality, availability, interoperability, governance and the ability of institutions to manage information responsibly.
For example, an AI application intended to support Kenyan agricultural production would benefit from datasets reflecting local crop varieties, environmental conditions and farming practices. Similarly, AI applications designed for public administration may require reliable and appropriately governed information from existing government systems.
However, the objective of making data more useful for innovation must be balanced against the legal rights and interests associated with that information.
Kenya's Data Protection Act, 2019, and its subsidiary regulations establish obligations governing personal-data processing. Organisations involved in AI development must assess how these requirements apply when collecting, combining, sharing or reusing personal information.
Where organisations intend to use personal data for AI training, testing or other purposes, they must determine whether the proposed processing is lawful, whether appropriate safeguards are in place and whether the intended use is consistent with applicable data-protection obligations.
The treatment of confidential, proprietary and commercially valuable datasets also requires contractual attention.
For Kenyan technology companies, the data pillar creates a practical incentive to develop clearer data-governance policies, establish appropriate licensing arrangements and adopt technical measures that improve data quality and security.
For public institutions, it highlights the need for coordinated approaches to information management that support innovation without compromising statutory obligations or public confidence.
The success of this pillar will depend not merely on expanding access to datasets, but on creating conditions in which data can be used reliably, lawfully and responsibly.
AI Research, Development and Innovation: Creating Kenyan solutions
The third pillar focuses on strengthening Kenya's capacity to research, develop and commercialise AI technologies.
While the adoption of internationally developed AI tools may improve productivity, long-term competitiveness also depends on the country's ability to produce original technologies and commercially viable solutions.
The strategy therefore places importance on local research capabilities, innovation ecosystems and the development of AI applications suited to Kenya's economic and social priorities.
Kenyan universities, research institutions, technology startups and established software companies all have roles to play in this process.
Research institutions can contribute specialised expertise and scientific knowledge, while private-sector organisations can help translate research into products capable of serving identifiable markets.
Commercialisation is particularly important because successful research does not automatically produce a sustainable business or a widely accessible service.
Developers must consider market demand, product reliability, intellectual-property rights, financing, regulatory obligations and the costs associated with maintaining and improving AI systems.
A Kenyan startup developing an AI-powered legal research platform, for example, must consider not only the technical ability of the system to process judgments and legislation, but also the accuracy of its outputs, the reliability of its sources, licensing restrictions and the legal consequences of incorrect information.
Similarly, an AI product intended for healthcare or financial services may require compliance with sector-specific regulatory requirements in addition to general obligations concerning data protection and cybersecurity.
These considerations should form part of the development process rather than being addressed only when the product is ready for commercial deployment.
The strategy's emphasis on research and innovation also creates opportunities for structured partnerships between universities, research centres and industry.
Such collaborations should be supported by agreements addressing ownership of research outputs, intellectual-property rights, access to datasets, confidentiality, licensing and commercialisation.
For Kenyan technology companies, the practical significance of this pillar is that AI innovation should be approached as a complete process, extending from research and technical development to legal compliance, product validation and sustainable commercial operation.
The four enablers supporting Kenya's AI ambitions
The three pillars provide the principal areas of strategic intervention, but their successful implementation depends on broader institutional and economic conditions.
Kenya's National AI Strategy identifies four supporting enablers intended to strengthen the country's ability to achieve its objectives.
The first is talent development. A sustainable AI ecosystem requires professionals capable of researching, developing, deploying and maintaining AI systems. It also requires decision-makers who understand the capabilities and limitations of the technologies adopted within their organisations.
For Kenya, this creates an opportunity to strengthen collaboration between universities, technical training institutions, professional bodies and industry.
However, AI capacity-building should not be confined to software engineers and data scientists. Lawyers, procurement professionals, regulators, educators, healthcare practitioners and business managers increasingly require sufficient technological literacy to evaluate systems used in their respective fields.
The second enabler is governance.
As AI adoption expands, organisations require clearer frameworks for assessing risk, assigning responsibility and ensuring compliance with applicable legal obligations.
Kenya already has laws addressing matters such as personal-data protection, cybersecurity, intellectual property, consumer rights and administrative decision-making. AI applications may engage several of these frameworks simultaneously.
The governance challenge is therefore not simply whether Kenya should introduce additional AI-specific regulation, but how existing obligations, emerging policies and any future regulatory measures can operate coherently.
The third enabler concerns investment.
Developing competitive AI capabilities requires sustained financial resources for research, infrastructure, talent development and commercialisation.
Public investment can support foundational capabilities and strategic priorities, while private capital can accelerate product development, market expansion and innovation.
For Kenyan AI startups, attracting investment will increasingly require demonstrating not only technical potential but also sound corporate governance, clear ownership of intellectual property, lawful access to relevant datasets and a credible commercial model.
The fourth enabler is ethics, equity and inclusion.
This reflects the importance of ensuring that Kenya's AI development benefits extend beyond a narrow group of businesses, institutions or communities.
AI systems should be evaluated for accessibility, reliability and their potential effects on individuals and groups. Particular attention is necessary where systems influence consequential decisions or may produce discriminatory outcomes.
These four enablers reinforce the understanding that a successful national AI ecosystem cannot be measured exclusively by technological output. It also depends on institutional competence, investment sustainability, public trust and responsible governance.
From national strategy to implementation
The publication of a national strategy establishes policy direction, but implementation determines whether its ambitions are realised.
Kenya has taken a further step through the publication of the National AI Strategy 2025–2030 Implementation Roadmap, which provides a framework for translating the strategy into coordinated activities and outcomes.
The roadmap identifies expected results extending beyond the establishment of AI infrastructure or the development of individual applications.
These include stronger data capabilities, increased economic contributions from AI, a skilled workforce, adaptable governance arrangements, greater investment and more ethical and inclusive AI solutions.
Its framework also identifies priority sectors, including agriculture, healthcare, education, security, micro, small and medium enterprises, public service delivery and the creative industry.
This provides an important basis for determining where national attention and resources may be directed.
However, implementation requires clear institutional responsibilities, coordination among stakeholders and mechanisms for assessing progress.
For public institutions, the strategy should inform decisions concerning digital transformation priorities, procurement planning, staff development and the evaluation of proposed AI projects.
A government agency contemplating the use of AI should begin by identifying a specific operational need and establishing whether AI is an appropriate solution.
The institution should then assess the information and infrastructure required, the applicable legal obligations, the risks associated with deployment and the resources necessary to maintain the system.
Where the proposed application is experimental, a controlled pilot can provide evidence about its performance before a larger investment is made.
The evaluation should examine actual outcomes rather than relying solely on technical demonstrations or promises made by vendors.
For example, an AI-powered public information service should be assessed according to the accuracy and usefulness of its responses, its accessibility to intended users and the effectiveness of procedures for correcting errors.
A system used to support administrative decision-making requires additional scrutiny because inaccurate outputs may affect the rights or interests of individuals.
Kenyan institutions should also ensure that procurement contracts address measurable performance requirements, information security, data processing, intellectual-property rights, technical support and responsibilities when systems fail.
These measures can help translate strategic objectives into operational practices that are transparent, accountable and commercially sustainable.
Kenya's evolving AI governance framework
An important consideration in implementing Kenya's National AI Strategy is the relationship between policy development and existing legal obligations.
The National AI Strategy establishes policy priorities. It does not, by itself, create a comprehensive statute regulating every aspect of artificial intelligence in Kenya.
Organisations deploying AI must therefore continue to evaluate their activities against the laws that apply to the particular technology, sector and processing operations involved.
The Constitution of Kenya, 2010, provides a foundational framework through protections relating to privacy, equality, fair administrative action and other fundamental rights.
The Data Protection Act, 2019, and applicable regulations impose obligations concerning personal-data processing, including requirements relating to lawful processing, security and high-risk activities.
Other legal frameworks may become relevant depending on the circumstances, including laws governing intellectual property, employment, financial services, consumer protection and cybersecurity.
Kenya's regulatory environment is also continuing to develop.
In 2026, the Ministry of Information, Communications and the Digital Economy published a Draft Kenya Artificial Intelligence and Other Emerging Technologies Policy for public consultation. The draft reflects further consideration of the governance arrangements required for AI and emerging technologies.
However, a draft policy must be distinguished from an adopted policy or binding legislation. Its publication does not, by itself, establish new statutory obligations.
For Kenyan organisations, this evolving environment makes regulatory monitoring and internal governance particularly important.
Businesses developing or deploying AI should establish processes for identifying applicable legal requirements, assessing technological risks and reviewing their arrangements as the policy environment develops.
Where AI systems process personal data in circumstances likely to result in high risks to individuals' rights and freedoms, organisations must consider the Data Protection Impact Assessment requirements under Kenyan law.
Other assessments may also be appropriate, particularly where AI is used in recruitment, credit decisions, healthcare, public administration or other consequential activities.
Rather than waiting for a single comprehensive AI law, organisations can begin establishing proportionate governance arrangements based on existing legal obligations and recognised risk-management practices.
This may include documenting the AI systems in use, assigning responsibility for their operation, conducting appropriate testing and providing employees with clear instructions concerning acceptable uses.
For legal professionals, the developing policy environment creates opportunities to assist clients with AI procurement, contractual risk allocation, intellectual-property protection, data governance and the design of internal accountability mechanisms.
What Kenya's AI Strategy means for businesses and innovators
Although national strategies are frequently discussed primarily in relation to government policy, Kenya's AI Strategy has significant implications for private-sector organisations.
For established businesses, AI adoption offers opportunities to improve efficiency, enhance customer experiences and develop new products or services.
However, organisations should distinguish between using AI to support existing operations and developing AI technologies as commercial products. These activities may involve different risks, investment requirements and contractual responsibilities.
A law firm using an approved AI assistant to support internal document review, for example, must consider confidentiality, accuracy and professional supervision.
A software company developing an AI-powered legal technology platform for customers must address a broader range of issues, including product reliability, intellectual-property ownership, licensing, security, customer data processing and liability.
The national strategy's emphasis on research, innovation and commercialisation makes these distinctions increasingly relevant.
Kenyan technology startups seeking to develop AI products should pay particular attention to ownership of source code, rights in training datasets, third-party software licences and contractual arrangements with developers and research partners.
Where AI solutions depend on externally developed models or cloud services, developers must understand the rights granted by those providers and the limitations that may affect commercial deployment.
Businesses acquiring AI solutions from vendors should also conduct appropriate due diligence.
The evaluation should consider the proposed system's performance, information-handling practices, security arrangements, support commitments and the provider's responsibilities if the technology produces inaccurate or harmful outputs.
Particular attention is necessary where a vendor reserves the right to use customer information for its own product improvement or model training.
For organisations undertaking AI adoption at scale, an internal AI governance policy can help establish consistent expectations concerning procurement, employee use, confidential information, output verification and incident reporting.
These measures are not merely compliance exercises. They contribute to operational resilience, customer confidence and the long-term commercial viability of AI products and services.
Kenya's place within Africa's continental AI ambitions
Kenya's National AI Strategy should also be understood within the wider African policy environment.
The African Union's Continental Artificial Intelligence Strategy, endorsed in July 2024, establishes a shared vision for African countries to develop AI capabilities while advancing economic development, inclusion and responsible governance.
Kenya's national strategy complements this continental ambition by identifying domestic priorities through which the country seeks to strengthen its own AI ecosystem.
The relationship between the two frameworks is significant.
The continental strategy provides direction on Africa's collective development interests, while Kenya's strategy addresses the infrastructure, data capabilities, research environment and supporting conditions necessary for national progress.
This relationship creates opportunities for Kenya to participate in regional cooperation involving AI research, skills development, data governance and technology commercialisation.
Kenyan universities, startups and research institutions may benefit from partnerships with counterparts in other African countries, particularly where shared challenges create opportunities for developing solutions suitable for multiple markets.
Cross-border collaboration may also support the development of technologies addressing African languages, regional trade, agricultural productivity and other areas of common interest.
However, such arrangements require careful attention to intellectual-property ownership, data-sharing permissions, contractual responsibilities and the laws applicable in participating jurisdictions.
Regional cooperation should therefore be supported by sound institutional and legal arrangements rather than relying solely on shared technological ambitions.
Importantly, the existence of the continental strategy does not replace Kenya's domestic regulatory framework. Kenyan institutions and businesses must continue to comply with the laws applicable to their activities, even where a project contributes to broader regional priorities.
Kenya's contribution to Africa's AI development will ultimately depend on its capacity to convert national strategic priorities into useful technologies, sustainable businesses, effective institutions and meaningful regional partnerships.
Measuring success beyond policy commitments
The success of Kenya's National AI Strategy should ultimately be assessed against the outcomes it produces rather than the ambitions it articulates.
Investment in infrastructure, the establishment of research programmes and the development of new AI applications are important measures of progress. However, they do not independently establish whether AI adoption has improved economic opportunities, strengthened public services or delivered meaningful benefits to Kenyan citizens.
Evaluation must also consider the quality, sustainability and accessibility of the technologies developed.
For example, a publicly funded AI platform should not be regarded as successful solely because it has been deployed. Its value should be assessed in light of its reliability, usefulness, operating costs and the extent to which it addresses the needs for which it was developed.
Similarly, programmes intended to strengthen Kenya's AI workforce should be evaluated not only by the number of participants trained, but also by whether those participants acquire applicable skills and opportunities to use them productively.
Commercialisation initiatives should consider whether supported innovations develop into sustainable products, attract investment and contribute to the growth of Kenya's technology ecosystem.
Governance outcomes also matter.
The development of AI systems should be accompanied by improvements in organisational accountability, the protection of personal information and the ability of affected individuals to identify and challenge inappropriate outcomes.
Achieving these results will require continued collaboration between government, industry, academia, civil society and professional institutions.
It will also require organisations to regard AI governance as an integral part of technology development rather than an administrative requirement addressed after deployment.
Kenya's National AI Strategy 2025–2030 provides an important foundation for that work. Its emphasis on infrastructure, data, research, innovation and supporting governance arrangements reflects the reality that sustainable AI development depends on several interconnected capabilities.
The challenge facing Kenya is now to convert these priorities into coordinated investments, commercially viable innovations and institutional practices capable of delivering measurable benefits.
Kenya's success in artificial intelligence will not be determined simply by how widely AI tools are adopted, but by the country's ability to develop valuable technologies, strengthen domestic expertise, govern emerging risks and translate innovation into inclusive economic and social progress.
For Kenyan businesses, technology developers, public institutions and professional advisers, the strategy provides both an opportunity and a responsibility to participate in shaping the country's AI ecosystem.
Our technology-law practice advises organisations on AI governance, technology procurement, data protection, intellectual-property rights, software commercialisation and the legal arrangements necessary for responsible technology adoption.
Contact our firm to discuss the legal, commercial and governance considerations relevant to your AI project, technology investment or organisational AI policy.
Sources and further reading
The following policy and legal instruments provide the principal reference framework for the issues discussed in this article:
Kenya National Artificial Intelligence Strategy 2025–2030: Establishes Kenya's national vision for AI development, structured around three pillars and four supporting enablers, with the objective of advancing research, innovation, commercialisation and inclusive socioeconomic development.
Kenya National AI Strategy 2025–2030 Implementation Roadmap: Provides the framework for translating the strategy into implementation priorities, activities and expected outcomes.
African Union Continental Artificial Intelligence Strategy, 2024: Establishes the broader continental policy framework for responsible, inclusive and development-oriented AI adoption across African Union member states.
Kenya National Digital Master Plan 2022–2032: Provides the wider national digital transformation context within which Kenya's AI infrastructure and development ambitions are situated.
Constitution of Kenya, 2010: Establishes fundamental rights and governance principles relevant to AI, including equality, privacy and fair administrative action.
Data Protection Act, 2019, and subsidiary regulations: Establish the principal legal framework governing the processing of personal data in Kenya, including obligations relevant to AI systems and high-risk processing.
Draft Kenya Artificial Intelligence and Other Emerging Technologies Policy, 2026: Provides further insight into proposed directions for Kenya's developing policy framework for AI and emerging technologies. Its draft status should be distinguished from adopted policy or binding law.
The analysis and practical recommendations in this article are informed by Kenya's national policy priorities and the wider continental AI framework.

The African Union's AI strategy explained, including local applications, human rights, infrastructure and practical national implementation choices.
