Exporting Human Biological Samples from Kenya: KEMRI Approval, SERU Ethics Review and Material Transfer Agreements

Exporting human biological samples out of Kenya for research is not governed by a single export law. It runs through an assembled pathway built from KEMRI’s institutional rules, a general research-licensing statute, and, where the samples carry genetic or health data, the Data Protection Act. Understanding how these pieces fit together, rather than treating “export approval” as one form, is what actually gets a shipment through.

KEMRI Is the Default Institutional Gatekeeper

For most externally sponsored biomedical research involving human samples, the Kenya Medical Research Institute sits at the centre of the approval pathway. The sequence typically runs through a Centre Scientific Committee review at the relevant KEMRI research centre, an Animal Care and Use Committee clearance if animal protocols are involved, and then the Scientific and Ethics Review Unit, SERU. SERU is an internal unit of KEMRI, not a separate statutory agency, and it runs a two tier system: scientific peer review followed by combined scientific and ethics review through several standing committees. Initial review typically takes around six weeks. KEMRI’s own published guidance states plainly that no human biological materials may be brought into or taken out of Kenya without the permission and approval of the KEMRI Director-General, who acts as custodian on behalf of the Republic of Kenya on this specific question.

What the Export Application Package Actually Requires

Per KEMRI’s own published guidance, the application package includes a signed explanatory cover letter, a completed SERU form for exportation of human biological samples, the latest SERU approval letter, PPB approval where a clinical trial is involved, a current NACOSTI research licence, approved informed consent documents, the relevant protocol sections justifying the shipment, and an executed Material Transfer Agreement. KEMRI itself flags common rejection reasons: incomplete sample lists, unspecified test types, no justification for why testing has to happen offshore, unclear storage duration, and consent documents that do not clearly disclose the destination and purpose of the export.

Material Transfer Agreements deserve particular attention because they are executed institution to institution, not person to person. KEMRI’s own guidance is explicit that MTAs occur between KEMRI and the collaborating institution, and export or import processing cannot proceed without one already in place. There is no single government mandated MTA template; a company should expect to negotiate terms covering the material description, permitted use, ownership and intellectual property, confidentiality, and return or destruction obligations, rather than assume a standard form exists.

NACOSTI’s Licensing Requirement Captures Sample Transfer Directly

The Science, Technology and Innovation Act, No. 28 of 2013, establishes the National Commission for Science, Technology and Innovation and its licensing function. Section 12(1) provides that a person shall not undertake scientific research in Kenya without a licence under the Act, and section 12(3) extends this expressly to a person who accesses, handles, or transfers material or moves it within, from, or into the country. This means sample export is captured directly by the licensing requirement, not merely swept in as a byproduct of “research” in the abstract. Section 15 sets the penalty for contravening section 12 at a fine not exceeding KES 5,000,000, imprisonment not exceeding four years, or both, with confiscation and a bar on future research also available. NACOSTI’s own site restated this same fine and imprisonment figure in a March 2024 enforcement notice aimed at researchers and institutions, which is a useful signal that the regulator treats this provision as actively enforced rather than dormant.

The Health Act and HIV Act Defer to NACOSTI Rather Than Duplicate It

The Health Act 2017 establishes a National Health Research Committee and sets ethical clearance standards for research, but it creates no parallel approval regime for sample export. Section 99(1) states that medical and scientific research on human subjects must be conducted per regulations under the Commission for Science, Technology and Innovation, meaning the Health Act defers to the STI Act framework rather than duplicating it, and the Act contains no specific provisions on biobanking or export mechanics. The HIV and AIDS Prevention and Control Act, No. 14 of 2006, adds a further consent layer specifically for HIV-related samples: section 40 requires written informed consent disclosing the aims, methods, and risks of research involving HIV-related specimens, with confidentiality provisions in sections 18, 21, and 22 restricting disclosure outside narrow exceptions. The 2006 Act, like the Health Act, does not address export mechanics itself and cross-references the science and technology licensing regime instead.

The Data Protection Act Adds a Separate Consent Layer for Genetic and Health Data

Exported biological samples typically carry associated genetic or health data, which brings the Data Protection Act, No. 24 of 2019, into play as a distinct legal requirement sitting alongside the KEMRI and NACOSTI pathway. Section 2 of the Act defines sensitive personal data to include health status, genetic data, and biometric data. Section 48 permits cross-border transfer only where the controller demonstrates appropriate safeguards to the Data Commissioner or the transfer falls within specified exceptions, and section 49 goes further for sensitive personal data specifically, requiring the data subject’s explicit consent to the transfer on top of the section 48 safeguards. A company assembling an export package should treat this as a separate compliance step from the KEMRI institutional approval, not an assumed byproduct of having secured SERU and NACOSTI clearance.

What This Means for a Company Sponsoring Sample Export

A company planning to export human biological samples from Kenya should expect four layers to satisfy in parallel: KEMRI institutional approval through SERU and the Director-General’s sign off, a current NACOSTI research licence covering the specific transfer, an executed institution to institution Material Transfer Agreement, and, where genetic or health data travels with the samples, explicit consent plus appropriate safeguards under the Data Protection Act. Disclosing the export destination and purpose clearly in the consent documentation from the outset addresses the single most common rejection reason KEMRI itself flags.