Healthcare regulation Kenya Health Act 2017 provides the foundational legal framework for Kenya’s health system, governing facilities, practitioners, and health financing under a structure that spans the Health Act No. 21 of 2017, the Pharmacy and Poisons Act, the Nursing Act, and county health legislation.
Sitting alongside that regulatory framework, and arguably the single biggest change to how healthcare actually gets paid for in Kenya in the last decade, is the Social Health Insurance Act, 2023, which dissolved the National Hospital Insurance Fund and replaced it with a new financing architecture that every facility and investor in this sector now has to operate under.
Healthcare Regulation Kenya Health Act 2017: Facility Licensing
A common misconception is that a county health department is the sole licensing authority for any health facility. In practice, private, community, and faith-based health institutions are registered and licensed by the Kenya Medical Practitioners and Dentists Council (KMPDC) under the Health Act read with the older Cap 253 framework on health institutions, not by the county.
Section 15 of the Act requires that no premises be used as a health institution unless registered and licensed by the Council, and Section 22 makes it an offence to operate an unlicensed premises as a health institution. Licences are now applied for and renewed through KMPDC’s Online Services Portal and must be renewed annually; KMPDC has been actively using digitised inspection data to identify non-compliant facilities, closing several hundred and downgrading others in recent enforcement sweeps.
County health departments retain devolved functions over public health facilities and county-level health service delivery under the Constitution’s Fourth Schedule, but for a private clinic, hospital, or faith-based health institution, KMPDC, not the county, is the body whose licence actually has to be current before the doors open. A facility that has only ever dealt with its county government on environmental or business permit matters should not assume that relationship extends to its core operating licence as a health institution.
Healthcare Regulation Kenya Health Act 2017: Professional Registration
All health professionals must be registered with their respective professional regulatory body before they can practise. The KMPDC regulates doctors, dentists, and clinical officers under the Medical Practitioners and Dentists Act. The Nursing Council of Kenya regulates nurses and midwives under the Nurses Act. The Pharmacy and Poisons Board regulates pharmacists and pharmaceutical technologists under the Pharmacy and Poisons Act.
Each body maintains its own register, sets its own continuing professional development and examination requirements, and operates its own disciplinary process; operating without current registration, or continuing to practise after a registration has lapsed or been suspended, is a criminal offence under the relevant Act regardless of how long the practitioner has actually been working in the role.
A facility employing or contracting clinical staff carries its own exposure here: engaging a practitioner whose annual licence has lapsed does not just expose the practitioner, it can also expose the facility for permitting an unregistered person to provide clinical services on its premises, which is a separate basis for KMPDC enforcement action against the institution itself rather than the individual.
The NHIF-to-SHA Transition: Healthcare’s Biggest Recent Regulatory Change
The Social Health Insurance Act, 2023 dissolved the National Hospital Insurance Fund and replaced it, effective 1 October 2024, with the Social Health Authority (SHA), which now administers three separate funds rather than NHIF’s single basket: the Primary Healthcare Fund, covering preventive and outpatient care at lower-level facilities; the Social Health Insurance Fund (SHIF), the main contributory scheme covering inpatient and higher-level care; and the Emergency, Chronic and Critical Illness Fund, a backstop for catastrophic conditions once a member’s SHIF allocation is exhausted.
Contributions are mandatory for Kenyan residents, set at 2.75 percent of gross salary for employed persons with a floor of KES 300 per month and no upper cap, a significant departure from NHIF’s old flat-banded structure that topped out at KES 1,700 regardless of income. SHIF also introduced a gatekeeping mechanism requiring referral from a registered primary care provider before a member’s costs at a higher-level facility are reimbursed, except in emergencies.
For a healthcare facility, the practical compliance question is no longer just KMPDC licensing and professional registration but accreditation as an SHA provider, since reimbursement for services delivered to SHIF members depends on a facility’s standing with SHA rather than its KMPDC licence alone.
The rollout has not been smooth: reporting through 2025 and into 2026 has flagged a funding shortfall against projected collections and a Ministry of Health audit identifying losses to fraudulent claims, mostly from private facilities, so a facility relying on SHA reimbursement as a core revenue stream should budget for payment delays as an operational reality rather than an occasional exception, and should build internal claims documentation discipline into its compliance programme rather than treating it as a back-office afterthought.
Private Healthcare Investment
Healthcare regulation Kenya Health Act 2017 does not impose sector-specific foreign equity caps, though general foreign investment rules apply. Foreign investment in the healthcare sector is permitted, and competition law considerations apply where a proposed investment, acquisition, or merger would give the investor a significant market position in a particular healthcare segment or geography, a threshold assessed by the Competition Authority of Kenya on a case by case basis rather than a fixed percentage.
PPP structures under the Public Private Partnerships Act, 2021 provide a mechanism for investor-government partnerships in larger healthcare infrastructure projects, including hospital build-operate arrangements, and typically involve a longer procurement and approval timeline than a straightforward private acquisition, which should be factored into any investment schedule from the outset rather than discovered midway through due diligence.
Investors entering digital health, telemedicine, or health-data platforms should also be aware that health information exchange and interoperability now sits under a dedicated digital health framework administered alongside the Digital Health Agency, which works with KMPDC and other regulators on facility digitisation, meaning a digital health product is likely to touch both general data protection compliance and sector-specific digital health requirements rather than data protection compliance alone.
Medical Negligence
Healthcare providers owe patients a duty of care, and a breach resulting in harm gives rise to a medical negligence claim. The standard applied is that of a reasonably competent practitioner in the relevant speciality, assessed against what a similarly qualified professional would have done in the same circumstances rather than against a standard of perfection.
Informed consent must be documented in writing for invasive procedures, and the adequacy of that documentation is frequently the actual battleground in a negligence dispute, since a provider with a clear, contemporaneous consent record is in a materially stronger position than one relying on staff recollection of a conversation that took place months or years before the claim was filed.
Claims are typically brought in the High Court or, depending on the value claimed, the subordinate courts, and ordinary limitation periods for civil claims apply, which makes early, organised retention of clinical records and incident documentation a practical priority rather than a purely administrative one.
Clay & Associates Advocates advises healthcare providers, investors, and digital health businesses on KMPDC and professional licensing, SHA provider accreditation, PPP structuring, and medical negligence defence. If your facility needs its licensing position reviewed against current KMPDC and SHA requirements, or you are structuring an investment into Kenya’s healthcare sector, we can help you map what actually applies before it becomes a compliance gap or a stalled reimbursement claim.
Investing in or operating a healthcare facility in Kenya? Contact Clay & Associates Advocates. Book a Consultation
Related reading: Pharmaceutical Regulation in Kenya | Medical Devices Regulation in Kenya | Insurance Law and Regulation in Kenya
For expert legal guidance on this matter, consult our life sciences and healthcare legal services team at Clay & Associates Advocates. We advise healthcare businesses, investors, and practitioners across Kenya on Life Sciences and Healthcare matters from our offices at Nextgen Mall, Nairobi.
