AjiNova
A few weeks ago, something happened in Kenya's Senate that didn't make the evening news, didn't trend on X, and barely registered in the national conversation. But if you run a startup, work in fintech, build software, or use AI tools in your business, it may end up affecting how you operate more than any budget statement or monetary policy shift of the last five years.
Kenya tabled the Artificial Intelligence Bill, 2026.
Sponsored by Nominated Senator Karen Nyamu, the Bill is Kenya's first attempt to write a dedicated law governing how artificial intelligence can be developed, deployed, and used within the country. It is comprehensive, it is ambitious, and depending on where you sit in the ecosystem, it is either overdue or premature.
Either way, it is coming. And the time to understand it is now, before it becomes law.
What the Bill Is Actually Trying to Do
At its core, the AI Bill is trying to solve a problem that Kenya's existing laws weren't designed for: the fact that AI systems from mobile lending algorithms to facial recognition cameras at transport hubs are already making consequential decisions about Kenyan citizens, often with no transparency, no accountability, and no legal framework to challenge them.
Privacy experts at the Kenya ICT Action Network have flagged that millions of Kenyans have already experienced real consequences from unregulated AI. Mobile lending platforms have blacklisted borrowers based on algorithmic scores that applicants cannot see or appeal. Facial recognition systems have been deployed at major transport points without clear legal authorisation or data protection standards.
The Bill is the government's response: a legal architecture for AI that sets out who is responsible, what rules apply, and what happens when those rules are broken.
The Risk-Based System: Who Gets Hit Hardest
The idea is straightforward: not all AI is equally dangerous. A music recommendation algorithm and a credit scoring system that determines whether you can get a loan are not the same kind of tool, and they shouldn't be regulated the same way.
Under the Bill, high-risk AI systems - those operating in areas like healthcare, financial services, employment, education, law enforcement, and critical infrastructure - would face the strictest requirements. That means mandatory registration with the regulatory authority, exhaustive annual impact assessments, transparency obligations, record-keeping requirements, and intensive oversight.
Lower-risk applications face broader but lighter disclosure duties. The intention is to let innovation breathe at the less sensitive end of the spectrum while drawing hard lines where the stakes are highest.
The AI Commissioner: A New Regulator Is Coming
The Bill proposes the creation of the Office of the Artificial Intelligence Commissioner, a dedicated regulatory body that would oversee all AI systems operating in Kenya.
The Commissioner would be responsible for monitoring risk across sectors, developing implementation policy, advising government on AI-related matters, and enforcing compliance. Think of it as the Data Commissioner's office, but specifically for AI - with teeth.
What that looks like in practice remains to be seen. The Bill has been published as a Senate Bill but has not yet been formally tabled before the Senate. Because it touches on county governments' functions, it must also pass through the National Assembly before it can go to the President for assent. There is still a significant legislative road ahead.
But the direction is clear. Kenya is no longer asking whether AI should be regulated. It's deciding how.
What This Means If You Build or Use AI in Kenya
This is the part that most coverage has glossed over, and it's the part that matters most practically.
The Bill, if passed in its current form, would apply to any business that develops, deploys, or uses AI systems in Kenya, including multinationals and cross-border operators. That is a wide net.
For Kenyan startups building AI-powered products, whether in fintech, healthtech, agritech, or education, the high-risk classification could mean significant compliance costs: legal reviews, impact assessments, registration fees, and ongoing reporting obligations. For a seed-stage startup, that burden is not trivial.
Legal experts at Bowmans have noted that the Bill raises real questions around regulatory scope, certainty, and proportionality. The concern isn't that regulation is wrong - it's that regulation designed for large, well-resourced organisations can quietly crush the smaller players it was never targeting.
That tension is at the heart of the debate around the Bill right now. <br> The upcoming public participation process is the most important opportunity for Kenya's tech community to shape what this law actually becomes. That window is open. But it will not stay open forever.
The Bigger Picture: Kenya Is Moving Fast
The AI Bill doesn't exist in isolation. Kenya has been building its AI governance stack systematically over the past two years.
In March 2025, the Ministry of Information, Communications and the Digital Economy formally launched the National AI Strategy 2025–2030. In November 2025, work began on a broader National AI and Emerging Technologies Policy, targeted for completion by this month — June 2026. The AI Bill is the third layer: the enforcement mechanism that gives the strategy and policy actual legal force.
Put together, Kenya is assembling one of the most comprehensive AI governance frameworks on the continent - one that draws from both the EU's risk-based approach and Africa's own development priorities. Rwanda enacted its national AI policy in 2023 and was the regional benchmark until recently. Kenya, with the Bill, is positioning to leapfrog that.
The investment community is watching. Recent roundtables projected up to KSh 38 billion - roughly $295 million - in AI-related investment over the next year if enabling policies and incentives materialise. Regulatory clarity, paradoxically, tends to attract investment rather than repel it. Investors want to know the rules before they write the cheques.
The Question Kenya Has to Answer
There is a version of this Bill that gets the balance right, that protects citizens from algorithmic harm, creates real accountability for companies using AI in high-stakes decisions, and does so in a way that doesn't pile so much compliance burden on early-stage startups that the ecosystem quietly relocates to Kigali or Lagos.
There is another version that overcorrects, that borrows the EU's framework without adapting it to Kenya's economic reality, and ends up regulating innovation out of the country it was supposed to protect.
Which version becomes law depends on what happens between now and the day it lands on the President's desk. The tech community - developers, founders, investors, civil society, and ordinary users who bear the consequences when AI goes wrong - has a say in that.
The question is whether they'll show up to use it.
Need help building software?
Talk to the AjiNova team about web applications, mobile platforms, AI integrations, and cloud solutions.