Mergers and acquisitions in Kenya’s healthcare sector move through more regulatory checkpoints than a typical commercial deal. A buyer acquiring a diagnostics chain, pharmaceutical distributor, device supplier, or health insurer must clear competition law thresholds, confirm sector licences survive the change of control, and work through due diligence areas heavier than an ordinary trade sale. This guide sets out the legal due diligence framework and deal-structuring choices for M&A in Kenya’s healthcare sector, from Competition Authority of Kenya merger notification to the licence transferability problem shaping almost every deal here.
Asset Sale or Share Sale: The Structuring Question That Drives Everything Else
The first structuring decision in a healthcare acquisition is whether the buyer takes the shares of the target or buys its assets out of it. In most sectors this is primarily a tax and liability question. In Kenyan healthcare it is also a licensing question, because it determines whether the buyer needs fresh regulatory approvals before it can lawfully operate the business.
A share sale leaves the licensed entity itself unchanged. The company holding the KMPDC facility licence, PPB premises licence, or insurance authorisation continues to exist; only its shareholders change. In principle this avoids reapplying from scratch, but Kenyan health regulators still require notification of a change in ownership or control, and several regimes reserve the right to reassess the licensee once ownership has changed, so a share sale reduces rather than eliminates licensing risk.
An asset sale is cleaner on liability, since historical claims and tax exposures can stay in the seller entity, but it usually means the buyer is seeking a licence it has never held, triggering a full new application rather than a notification. For a hospital, clinic, pharmacy, or laboratory, that can mean regulatory limbo between completion and grant of the new licence, bridged contractually through a transitional services agreement rather than assumed away.
Competition Authority of Kenya Merger Notification and Clearance
Under the Competition Act, No. 12 of 2010, no merger may be implemented unless approved by the Competition Authority of Kenya (CAK); a merger implemented without approval has no legal effect. Section 41 defines a merger broadly to include the acquisition of shares, assets, or control, whether the acquiring party is inside or outside Kenya. Section 43 requires each undertaking involved to notify the Authority, and section 44 gives CAK 60 days from complete information to determine the application, extendable where a hearing or further information is required.
What triggers mandatory notification depends on turnover and asset thresholds, and CAK applies a lower, sector-specific threshold to healthcare transactions than to the general economy. Under CAK’s Consolidated Merger Guidelines, a healthcare-sector merger requires notification where combined turnover or assets reach at least KES 500 million and the target’s own turnover exceeds KES 50 million, well below the general-sector threshold of KES 1 billion combined turnover with a target turnover above KES 100 million. This reflects the weight CAK gives to concentration in healthcare markets. Deals falling between KES 50 million and KES 500 million are excluded, and parties can apply for confirmation of that exclusion on an expedited basis. These thresholds are set by guideline rather than the Act itself and have moved before, so deal teams should confirm current figures against CAK’s published guidance.
Licence Transferability: Why Healthcare Deals Cannot Just Follow the Corporate Structure
The single biggest structuring constraint in Kenyan healthcare M&A is that most operating licences are tied to the licensee and are not freely transferable on a change of ownership. The Health Act, No. 21 of 2017, requires private entities to hold an operational licence to run hospitals, clinics, laboratories, and similar institutions, with standards and conditions set out in regulations, and licensed institutions carry ongoing duties, including permitting inspection at any time. The Act leaves the mechanics of a change of ownership to KMPDC practice, which requires the regulator to be notified of, and to approve, any change to a facility’s ownership particulars before it takes effect operationally.
Pharmacy premises licensed under the Pharmacy and Poisons Act, Cap 244, face a comparable constraint. PPB’s guidelines for registration and licensing of premises require the Board to be notified in writing at least 30 days before any change of ownership, including a change in shareholding or directors, and renewal is not automatic: the Board reassesses each application against conditions prevailing at the time. A premises also needs a superintendent pharmacist in place, so a change of control that disrupts that role can put the licence at risk regardless of who owns the shares. Consent to the change of control, whether from KMPDC, PPB, or another sector regulator, needs to sit in the conditions precedent and long-stop date, with the risk of a delayed consent allocated between buyer and seller in the transaction documents.
Core Legal Due Diligence Areas Beyond Licensing
Licensing continuity dominates healthcare deal risk in Kenya, but due diligence still has to cover the areas common to any acquisition, adjusted for the sector’s exposures.
Employment due diligence should look closely at clinical staff, since doctors, nurses, and pharmacists are individually registered with their own professional bodies, and a change of employer can raise continuity questions for practising certificates and indemnity cover. Data protection is now a standing item: the Data Protection Act, No. 24 of 2019, requires controllers and processors to register with the Office of the Data Protection Commissioner and conditions any transfer of personal data outside Kenya. A healthcare target holds patient records as sensitive personal data, so the buyer needs to confirm registration status and whether the transaction transfers that data to a new controller. IP review should cover trademarks, patents or regulatory data protection over pharmaceutical products, and software licences behind health-tech platforms. Environmental compliance matters because facilities generate medical waste subject to NEMA licensing and county inspection, and gaps can hold up the ownership-change approval itself. Litigation and tax due diligence should be scoped for negligence claims, national health insurance disputes, and any history with KEBS, PPB, or KMPDC over compliance.
How We Can Help
Clay & Associates Advocates advises acquirers, investors, and sellers on mergers and acquisitions across Kenya’s healthcare sector, from deal structuring and CAK merger notification through to closing conditions built around sector licence transfers. Our guide to private equity due diligence for hospital groups in Kenya covers hospital and clinic chain transactions in more depth, while our Life Sciences & Healthcare page sets out our broader work across pharma, diagnostics, and medical devices. Contact our Corporate & Commercial practice to discuss structuring, due diligence, or regulatory clearance for a healthcare transaction.
Sources: Competition Act, No. 12 of 2010, Kenya Law, sections 41, 42, 43, 44; Competition Authority of Kenya, Consolidated Merger Guidelines; Health Act, No. 21 of 2017, Kenya Law, sections 89, 91; Pharmacy and Poisons Board, Guidelines for Registration and Licensing of Premises; Data Protection Act, No. 24 of 2019, Kenya Law, sections 18 to 22, 48.
Frequently asked questions
Do all healthcare mergers in Kenya need Competition Authority of Kenya approval?
No. Only mergers meeting or exceeding the applicable threshold require mandatory clearance before implementation. CAK applies a lower, healthcare-specific threshold than the general-sector one, so mid-sized deals excluded elsewhere still require notification or an exclusion application. Parties should confirm current figures against CAK’s published guidance.
Can a buyer simply keep operating under the seller’s existing KMPDC or PPB licence after completion?
Generally no. Kenyan health regulators require notification, and usually approval, of a change of ownership before a licence continues on the new structure. Operating without that consent risks enforcement action, so it should be a condition to closing or a fast-tracked post-closing obligation with contractual protection for the buyer meanwhile.
What data protection issues come up in healthcare M&A due diligence?
The main issues are whether the target is properly registered as a data controller or processor, how patient records will be handled through the transaction, and whether any cross-border transfer is involved, which triggers additional conditions under the Act. Given the sensitivity of health data, this is now a standard workstream rather than a peripheral check.
