Does ESG Reporting Apply to My Small Business? The Supply Chain Answer Most SMEs Miss

If your business is not listed on the Nairobi Securities Exchange and does not raise capital from the public, Kenyan ESG reporting rules do not directly apply to you. That much is settled. What catches most small and medium businesses off guard is not the direct rule. It is what happens when your biggest customer is a listed company, a multinational or a development-finance-funded project that has ESG expectations of its own.

Where direct ESG reporting stops

The Nairobi Securities Exchange published its ESG Disclosures Guidance Manual on 29 November 2021, for listed companies. The NSE said at the time that it had yet to mandate ESG reporting, so the manual is guidance for issuers rather than a statutory duty. The Capital Markets Authority’s Code of Corporate Governance Practices for Issuers of Securities to the Public, 2015, also addresses issuers of securities to the public. An ordinary private SME, however large its revenue, sits outside both frameworks. No general statute requires a private, unlisted business to publish an ESG report. The duties that do bind it are specific ones, in employment, data protection and anti-bribery law.

Where ESG reporting reaches a small business anyway

A listed company that follows the NSE manual increasingly has to account for ESG impact in its supply chain, not just its own operations, if its own reporting is to be credible. That gets passed down contractually rather than by law: supplier codes of conduct, procurement questionnaires and vendor onboarding forms asking about your labour practices, environmental impact and anti-corruption controls before you can bid. A project funded by a development finance institution, or an export contract into a market with its own due diligence rules, works the same way and is often stricter, since development finance institutions typically build ESG screening into their own lending conditions.

Your bank may ask the same questions

On 4 April 2025 the Central Bank of Kenya issued the Kenya Green Finance Taxonomy and the Climate Risk Disclosure Framework for the Banking Sector. The release says banks should use the taxonomy to classify economic activities by how far they support or hinder climate goals, and the framework helps banks collect and publish climate-related information. It places no obligations on borrowers, and it does not state an effective date. The practical point is narrower: a bank that adopts the taxonomy may start asking borrowers questions that look like an ESG questionnaire, even though nothing in the law requires your business to answer them.

What a small business should be able to say

You do not need a listed-company sustainability report. You do need honest, specific answers to the questions a large customer, buyer or bank is likely to ask:

• Employees. How you treat staff. Section 5 of the Employment Act, 2007 already requires an employer to promote equal opportunity and prohibits discrimination.
• Anti-corruption. What controls you have. Section 9 of the Anti-Bribery Act (Cap. 79B) requires a public or private entity to put in place bribery prevention procedures appropriate to its size and operations.
• Data. How you handle personal data under the Data Protection Act, 2019.
• Environment. Whether your operations have an environmental impact worth naming, even if the honest answer is very little.

Businesses that can answer these clearly win contracts and financing that businesses with no answer lose, regardless of what the underlying law technically requires of either of them.

A simple supplier readiness pack

Instead of answering each questionnaire from scratch, keep one short pack that you update at least once a year:

• a one or two page policy covering employment, anti-bribery, data and environment;
• copies of your core registrations, tax and licence documents;
• a named person responsible for answering supplier and bank questionnaires; and
• a log of the questionnaires you have answered, so later answers stay consistent with earlier ones.

Consistency matters. A questionnaire answer is a statement you may later be held to, so avoid claims you cannot document.

Reading the ESG clauses in a supply contract

When a customer sends a supplier code of conduct, check four things before signing: whether it is a warranty or only a statement of intent, whether the customer may audit you and at what notice, how long you have to remedy a breach, and whether breach lets the customer terminate or withhold payment. A clause you cannot realistically meet at your size should be narrowed or phased in before signature, not discovered after the first audit.