If your business is not listed on the Nairobi Securities Exchange and does not raise capital from the public, you are not directly caught by Kenya’s mandatory ESG disclosure rules. That much is settled. What catches most small and medium businesses off guard is not the direct rule, it is what happens when your biggest customer is a listed company, a multinational, or a DFI-funded project that is caught by it.
The direct obligation genuinely stops at listed companies
The NSE’s ESG Disclosures Guidance Manual, mandatory for listed companies since November 2022, and the CMA’s Code of Corporate Governance Practices both apply to companies that issue securities to the public. An ordinary private SME, however large its revenue, sits outside both frameworks entirely. There is no separate statute requiring a private, unlisted business to publish an ESG report.
Where the obligation actually reaches you anyway
A listed company reporting under the NSE Manual increasingly has to account for its supply chain’s ESG impact, not just its own operations, to satisfy its own disclosure obligations credibly. This gets passed down contractually rather than by law: supplier codes of conduct, procurement questionnaires, and vendor onboarding requirements that ask about your labour practices, environmental impact, and anti-corruption controls before you can even bid for the contract. A DFI-funded project, a World Bank or IFC-backed development, or an export contract into the EU market, works the same way, often more strictly, since development finance institutions typically build ESG screening directly into their own lending conditions.
Your bank can also pass the obligation down through your loan
The Central Bank of Kenya’s Green Finance Taxonomy and Climate Risk Disclosure Framework, in force for banks since April 2025, gives lenders a formal system for classifying which loans qualify as green financing. A bank increasingly building this classification into its own lending decisions can mean the terms, or even the availability, of a loan to your SME are shaped by how your business answers questions that look a great deal like an ESG questionnaire, even though nothing in the law directly requires your business to answer them.
What this actually means for a small business
You do not need a listed-company-style sustainability report. You do need to be able to answer, honestly and specifically, the questions a large customer, a DFI-funded buyer, or a bank is likely to ask: how you treat employees, whether you have any environmental impact worth naming, and whether you have basic anti-corruption controls in place. Businesses that can answer these clearly win contracts and financing that businesses with no answer at all lose, regardless of what the underlying law technically requires of either of them.
