Many Kenyan businesses still treat bribery as a criminal-law problem for individuals rather than a compliance obligation attaching to the company itself. That reading is out of date. The Anti-Bribery Act, originally enacted as the Bribery Act, No. 47 of 2016 and later renamed by the Statute Law (Miscellaneous Amendment) Act, 2023, places a standing legal duty on every private entity, regardless of size, to have anti-bribery procedures in place, not merely to avoid participating in bribery itself.
What the Act actually requires of a private entity
Section 9 of the Act requires every public and private entity to put in place procedures, appropriate to its size, scale, and the nature of its operations, for the prevention of bribery and corruption. This is a freestanding obligation. A company does not need to have paid or received a bribe to fall foul of section 9; simply failing to have adequate procedures in place is itself the offence, and where that failure is proved to have been committed with the consent or connivance of a director or senior officer, that individual commits an offence personally.
Section 10 goes further and creates direct corporate liability: a private entity commits an offence if a person associated with it bribes another person intending to obtain or retain business, or an advantage in the conduct of business, for that entity. Section 11 defines an associated person broadly to include anyone who performs services on the entity’s behalf as an agent, employee, or in any other capacity, which is wide enough to catch subsidiaries, contractors, and agents acting for the company’s benefit even if the company never instructed or knew about the specific act.
The Bribery Regulations, 2022, which replaced the original 2021 regulations and operationalise section 9, confirm that the required procedures scale with the entity, a small trading company is not held to the same documentation standard as a multinational, and permit a subsidiary or franchisee to adopt its parent or franchisor’s anti-bribery procedures, provided it still meets section 9’s requirements in its own right. A joint venture, however, cannot rely on a partner’s procedures; each venture partner must maintain its own.
Reporting and whistleblower protection
Anyone holding a position of authority in a public or private entity who knows of, or suspects, an instance of bribery must report it to the Ethics and Anti-Corruption Commission, and failing to do so within twenty-four hours is itself an offence. This reporting duty sits uncomfortably alongside ordinary confidentiality and internal escalation practices, and businesses should make sure their internal reporting lines do not create a practical delay that puts the individual who receives the report in breach of the statutory deadline.
The Act protects whistleblowers and witnesses from intimidation, harassment, or disclosure of their identity, and separately makes it an offence to take adverse action against a whistleblower’s employment, including demotion, termination, or an unfavourable transfer.
Consequences of getting it wrong
The penalties reach beyond the company. A director convicted in connection with a bribery offence can be disqualified from holding the position of director in that or any other Kenyan company for up to ten years; a convicted partner faces the equivalent bar from partnerships. A person convicted of an offence involving bribery can be disqualified from being elected or appointed to state or public office for up to ten years, and a convicted entity that is not a natural person can be barred from transacting business with the national or county government for ten years. Where a quantifiable benefit was received or a quantifiable loss suffered, the court can impose a mandatory additional fine of up to five times that amount, on top of the underlying penalty, and can order the benefit itself paid over to the Government.
For a business bidding on public contracts or dealing with county or national government agencies, the ten-year government-transacting bar is often the most commercially significant consequence, more damaging in practice than the fine itself, since it can remove the company from an entire category of revenue regardless of the size of the underlying bribe.
Building procedures that actually satisfy section 9
The Act does not prescribe a template, and the Cabinet Secretary’s guidelines contemplated under section 12 remain thin, but the Ethics and Anti-Corruption Commission is required to assist entities that ask for help developing procedures. In practice, a defensible section 9 programme covers a written anti-bribery policy tailored to the business’s actual risk areas (government tenders, customs and licensing interactions, and high-value procurement are the obvious ones in the Kenyan context), a due diligence process for agents and intermediaries who deal with public officials on the company’s behalf, a internal reporting channel that can meet the twenty-four hour reporting deadline without penalising the person who raises the concern, and periodic review as the business’s operations and risk profile change. A joint venture or group structure should map out separately, in writing, which entity owns which part of the procedure, given that the Regulations only permit shared procedures between a parent and its own subsidiaries or franchisees, not between unrelated venture partners.
How We Can Help
Clay & Associates Advocates advises businesses on designing and documenting anti-bribery procedures that meet section 9, conducting bribery risk assessments before entering high-risk markets or government contracts, and responding where an allegation or an internal report has already surfaced. Where the concern extends beyond bribery to the wider governance framework a business has in place, our guide to corporate governance for private companies covers the director duties these procedures sit alongside. Contact our regulatory and compliance practice to review your current procedures or to put a compliance programme in place before a tender, an audit, or an incident forces the issue.
Sources: Anti-Bribery Act (Cap. 79B), sections 9, 10, 11, 12, and 14; The Bribery Regulations, 2022 (Legal Notice 88 of 2022).
Frequently asked questions
Does a company need to have actually paid a bribe to be liable under the Act?
No. Section 9 makes the failure to have adequate anti-bribery procedures in place an offence in its own right, separate from any actual instance of bribery.
How quickly must a suspected bribery incident be reported?
Within twenty-four hours of becoming aware of it. A person holding a position of authority who fails to report within that window commits an offence.
Can a subsidiary rely on its parent company’s anti-bribery procedures?
Yes, under the Bribery Regulations, a subsidiary or franchisee may adopt its parent or franchisor’s procedures, provided the arrangement still satisfies section 9 in substance. Joint venture partners cannot rely on this route and must maintain their own procedures.
What is the most damaging consequence for a business convicted under the Act?
Often the ten-year bar on transacting business with the national or county government, which can matter more commercially than the fine itself for businesses that depend on public sector contracts.
