From NHIF to SHA: A Legal Transition Guide for Private Hospitals and Providers

The National Hospital Insurance Fund stopped being the vehicle for public health cover on 1 October 2024, replaced by the Social Health Authority and its Social Health Insurance Fund. For a private hospital or provider, that change was not simply a rebrand of the same claims process. Empanelment works differently, the claims cycle runs on new statutory deadlines, and the penalties for getting either wrong are real and already being enforced. This article maps the NHIF to SHA transition as it actually happened, and corrects a misconception we hear often: that NHIF accreditation carried over automatically.

The legal basis for the NHIF to SHA transition

The Social Health Insurance Act, 2023 repeals the NHIF Act, 1998 under section 54, and the Social Health Insurance (General) Regulations, 2024, gazetted as Legal Notice No. 49 of 2024, set out how the new scheme actually operates. The Social Health Authority launched the scheme on 1 October 2024. The regulations have been amended more than once since launch, including changes to the tariff schedule as recently as 2026, so a provider relying on the original 2024 text for reimbursement rates specifically should check the current gazetted version before treating any figure as final.

Empanelment is not automatic, and it runs through your professional regulator

Section 33 of the Act and regulation 31 of the General Regulations set out how a facility actually becomes empaneled to receive SHA-covered patients. The mechanism is not a fresh, from-scratch application to the Authority in the ordinary case; it runs through the body responsible for accrediting the facility for quality of care, such as the Kenya Medical Practitioners and Dentists Council. That accrediting body submits a list of currently licensed and certified providers, and the Authority is required to empanel every provider on that list within seven days. The practical consequence is that empanelment tracks the currency of a facility’s regulator licensing, not its prior NHIF accreditation status. A facility whose KMPDC or equivalent licensing has lapsed, or whose particulars are out of date with its regulator, will not appear on the list regardless of how long it was NHIF-accredited, and a facility that assumes its old NHIF status was simply carried across should confirm directly that its current licensing has actually reached the Authority. Regulation 7(2) channels primary care through Level 2, 3 and 4 facilities, while regulation 10(c) directs the Social Health Insurance Fund itself, the scheme covering secondary and tertiary care, to Level 4, 5 and 6 facilities, which matters for how a multi-tier hospital group structures its empanelment.

The claims cycle runs on statutory deadlines

Once empaneled, a provider is bound by a set of specific timelines rather than an open-ended billing relationship. Regulation 58(1) requires claims to be lodged with the Claims Management Office within seven days of a patient’s discharge. Regulation 59(1)(c) requires any rejection notice to issue within fourteen days. Where pre-authorisation is required before treatment, regulation 60(3) requires a decision within seventy-two hours of the request. A provider disputing a rejected claim has seven working days under regulation 61(4) to submit new evidence for review. The Act itself does not fix a corresponding payment timeline running the other way, from the Authority back to the provider, which is worth knowing before assuming reimbursement follows on any particular schedule. Where a contract with a provider is terminated, regulation 34(6) gives the provider a right of appeal to the Dispute Resolution Tribunal established under the Social Health Insurance (Tribunal Procedure) Rules.

Non-empanelment and fraudulent claims carry real, enforced penalties

Regulation 63(a) is unambiguous: the Authority will not pay a claim from a provider that is not empaneled and under contract, except for emergency services. On the fraud side, section 48(3) of the Act makes a false statement made to obtain benefits an offence carrying a fine of up to KES 1,000,000, imprisonment of up to sixty months, or both, and section 48(5) allows a fine of up to KES 2,000,000, suspension, or removal from the register for a provider that knowingly submits a falsified claim. These are not theoretical numbers. Kenya Gazette Notice No. 168 of 7 August 2025 recorded the suspension of forty health facilities following a forensic audit of claims, with cases referred on to the Directorate of Criminal Investigations, the Ethics and Anti-Corruption Commission, and the relevant professional councils, and in early 2026 several facilities and individuals were separately charged with conspiracy to defraud in connection with SHA claims. Any provider with claims practices that would not survive a forensic audit should treat that as an active, not hypothetical, risk.