Practice Areas / Regulatory & Compliance
Regulatory & Compliance
Kenya's regulatory environment is expanding in scope and increasing in enforcement. The Data Protection Act 2019 introduced a new compliance regime, overseen by the Office of the Data…
Your Business, Our Solutions.
Overview
Kenya's regulatory environment is expanding in scope and increasing in enforcement. The Data Protection Act 2019 introduced a new compliance regime, overseen by the Office of the Data Protection Commissioner. POCAMLA imposes AML obligations. Tax legislation changes regularly. Employment law creates ongoing requirements for every employer.
For businesses, the challenge is building systems that achieve compliance without paralysing operations. Our regulatory practice helps businesses understand obligations, build proportionate frameworks, and respond when regulators come calling.
We do not approach compliance as box-ticking. Our counsel integrates legal requirements into the way a business actually operates.
What we do
6 service lines. Select one to see what it covers.
Regulatory & ComplianceTax Advisory
Corporate tax planning, VAT compliance, withholding tax, eTIMS configuration, transfer pricing, KRA audit representation, and tax appeals before the Tax Appeals Tribunal and High Court.
Regulatory & ComplianceData Protection (DPA 2019)
ODPC registration, DPIAs, privacy policies, data processing agreements, cross-border transfer mechanisms, breach notification, and tailored compliance programmes for technology companies.
Regulatory & ComplianceAML / KYC Compliance
AML policy development, KYC procedures, suspicious transaction reporting, DNFBP compliance, FRC registration, and staff training. We also assist businesses responding to FRC enquiries.
Regulatory & ComplianceInsurance Regulatory
IRA licensing, regulatory compliance, product approval, reinsurance arrangements, and the intersection of insurance regulation with data protection and AML requirements.
Regulatory & ComplianceEmployment Law
Employment contracts, workplace policies, redundancy compliance (Section 40 Employment Act), disciplinary procedures, OSHA, statutory contributions (NSSF, NHIF, NITA, housing levy), and employment dimensions of corporate transactions.
Regulatory & ComplianceEAC & COMESA Trade
EAC customs union compliance, rules of origin, COMESA preferential trade, AfCFTA opportunities, cross-border investment structuring, and trade dispute resolution.
Most matters cross two or three of these.
Describe the situation in your own words. We will tell you what it actually involves, which services it touches, and what it will cost, before you commit to anything.
Why clients instruct us for regulatory & compliance
Four commitments specific to this practice.
Proportionate compliance, not compliance theatre
Frameworks sized to your business, so a growing company is not paying for a multinational’s programme.
Across the regulators that matter
Data Protection Act 2019, AML and KYC, tax, insurance regulation, employment, and EAC and COMESA trade rules.
We act when the regulator arrives
Advisory work and enforcement response handled by the same team, so nothing is relearned mid-crisis.
Obligations mapped to dates and owners
Compliance calendars your board can actually use, rather than a memo that sits unread.
Latest Insights
Discover more
Regulatory & ComplianceYour Former Employee Is Posting Damaging Claims About Your Company Online. What Are Your Options?A former employee airing grievances online after leaving is common enough that most companies eventually deal with it.…19 Sep 2026
Regulatory & ComplianceA Damaging Story About Your Company Is About to Run. What Can You Actually Do in the Next 24 Hours?A journalist calls, describes what they intend to publish about your company, and gives you until the end…19 Sep 2026
Corporate & CommercialDoes the Data Protection Act Protect Your Company’s Reputation?When something damaging about a company appears online, it is tempting to reach for the Data Protection Act…19 Sep 2026
Regulatory & ComplianceA Competitor Posted a Fake Negative Review About Your Business. What Can You Actually Do?A one-star review from an account with no other activity, posted the same week a competitor launched nearby,…19 Sep 2026
Regulatory & ComplianceFire Safety and DOSH Compliance for a Kenyan Data CentreA data centre concentrates exactly the conditions fire safety law is built around: continuous high electrical loads, dense…19 Sep 2026
Regulatory & ComplianceInsurance a Kenyan Data Centre Operator Actually NeedsKenyan law does not prescribe a specific insurance package for a data centre. Only one element is actually…18 Sep 2026
Regulatory & ComplianceDecommissioning a Data Centre in Kenya: Data Destruction and Customer Transition ObligationsClosing a data centre, whether by choice, at the end of a lease, or because a facility has…18 Sep 2026
Regulatory & ComplianceDoes ESG Actually Matter in a Kenyan M&A Deal?Most Kenyan acquisitions still run due diligence around the traditional list: financial statements, tax position, litigation history, title…18 Sep 2026Get in touch
Tell us what you are working on. You will get a clear view of what the matter involves and what it costs before you commit to anything.
- &Your consultation fee is credited in full against your engagement fee
- &Scope, approach and fee confirmed in writing before work begins
- &Our full fee schedule is published online
- &Nextgen Mall, 5th Floor Suite 6, Mombasa Road, Nairobi
