Product Liability and Regulatory Enforcement in Kenya’s health sector operates on two tracks that a manufacturer or importer needs to watch simultaneously: a regulatory enforcement track run by the Pharmacy and Poisons Board, and a civil liability track available to an injured patient or consumer through the courts. A recall handled well on the regulatory side does not automatically shield a manufacturer from a damages claim on the civil side, and the two tracks generate different kinds of exposure.
Product Liability and Regulatory Enforcement Is Active, Not Theoretical
PPB’s own reported enforcement figures show this is a live risk, not a background compliance concern. Between 2021 and 2025, PPB recorded 1,413 quality complaints and issued 99 product recalls. In 2025 alone, the Board issued 58 recalls, and its pharmacovigilance system logged 32,833 adverse drug reaction reports. These numbers reflect an active surveillance and enforcement posture, not an agency that only acts on rare, high-profile incidents.
Under the Pharmacy and Poisons (Registration of Health Products and Technologies) Rules, 2022, PPB can withhold, suspend, or cancel a product’s registration where the holder misrepresented information, breached a licence condition, or where the product’s safety profile has changed materially, or simply where cancellation is judged to be in the public interest. The Board must issue a notice of intention and give the holder an opportunity to be heard first, but the threshold for triggering that process, “in the public interest”, gives PPB considerable latitude to act on emerging safety signals without waiting for definitive proof of harm.
Civil Liability Runs on a Separate Track
Separately from PPB’s regulatory powers, a patient or consumer harmed by a defective health product has civil remedies available. The Consumer Protection Act, 2012 gives a consumer whose agreement was entered into after or while a supplier engaged in an unfair practice, including a false or misleading representation about a product’s safety, performance, or characteristics, the right to rescind the agreement and claim damages, with every party involved in the unfair practice jointly and severally liable and exemplary damages available on top of ordinary compensation. Outside the Consumer Protection Act specifically, ordinary common law negligence principles also apply: a manufacturer owes a duty of care to the ultimate consumer of its product, and a breach causing injury can found a negligence claim regardless of whether the Consumer Protection Act’s unfair practice provisions are separately engaged.
These two tracks can run concurrently against the same manufacturer arising from the same defective batch, a PPB-ordered recall does not resolve or limit the civil damages exposure to individual patients who were already harmed before the recall was issued, and a civil settlement with individual claimants does not satisfy PPB’s separate regulatory requirements around reporting, recall scope, and corrective action.
Adverse Event Reporting as a Compliance Obligation
Insurance is the other practical piece of this picture. Product liability and clinical negligence cover, sized appropriately to the manufacturer’s actual market exposure rather than a generic policy limit, is worth reviewing specifically against Kenya’s litigation environment, where the Consumer Protection Act’s exemplary damages provision and joint and several liability across everyone involved in an unfair practice can produce exposure that standard product liability policies written for a different jurisdiction may not anticipate. Given the scale of PPB’s adverse drug reaction reporting, over 32,000 reports in 2025 alone, manufacturers and healthcare providers should treat pharmacovigilance reporting as an ongoing operational obligation rather than a reactive step taken only after a serious incident. A pattern of adverse event reports, even individually minor, is precisely the kind of signal that can trigger PPB’s “public interest” suspension power before a single catastrophic incident occurs. Under-reporting does not reduce regulatory risk, it delays PPB’s visibility into a developing problem and increases the likely severity of the eventual regulatory response once the pattern does surface.
Practical Risk Management
A manufacturer or importer operating in Kenya’s health products market should maintain a documented product complaint and adverse event handling process that feeds both regulatory reporting to PPB and an internal risk register, since the same underlying complaint data is relevant to both the regulatory relationship and eventual civil liability defence. Marketing and labelling claims should be reviewed against the Consumer Protection Act’s unfair practice standard specifically, not just general accuracy, since a technically true but misleading performance claim can independently trigger consumer liability even where the product itself functions as intended and no PPB safety concern exists.
Establishing Causation and Common Defences
Product Liability and Regulatory Enforcement claims in the health sector turn heavily on causation, a plaintiff must show not just that a product was defective but that the specific defect caused their specific injury, which is often genuinely difficult in a pharmaceutical or medical device context given that patients frequently have underlying conditions, take multiple medications, and present with symptoms that could plausibly have several causes. Manufacturers facing a claim commonly raise defences including intervening cause (a healthcare provider’s dosing error or a patient’s failure to follow instructions breaking the chain of causation), the learned intermediary doctrine (adequate warnings given to a prescribing physician, rather than the end patient directly, can satisfy the duty to warn for prescription-only products), and contributory conduct where a patient used the product outside its approved indication or dosage. None of these defences is automatic, each requires evidence, and a manufacturer’s own records, correspondence with prescribers, and adverse event documentation often become the decisive evidence in establishing or defeating them.
Digital Health and Medical Device Software Liability
Liability exposure is not limited to physical products. A diagnostic algorithm that produces a false result, or a telemedicine platform that fails to connect a patient with appropriate care in time, can generate the same kind of negligence and consumer protection exposure discussed above, layered on top of the Digital Health Act’s own certification and data protection compliance framework. A software-driven health product manufacturer should not assume that because its product is software rather than a physical device, ordinary product liability principles do not apply, Kenyan courts have not carved out an exception for software, and the practical analysis of duty of care, breach, and causation proceeds the same way regardless of whether the underlying defect is a manufacturing flaw or a coding error.
Related Reading
This is the sixth and final article in our Life Sciences and Healthcare series. See our companion guides to medical device and health product registration, and the Consumer Protection Act 2012 for the general consumer remedy framework referenced above, and digital health and telemedicine regulation for the software-specific liability angle.
Facing a product recall, adverse event investigation, or consumer liability claim? Clay & Associates Advocates advises on PPB regulatory response, product liability defence, and compliance programme design. Contact us to discuss your matter.
This article is for general information and does not constitute legal advice. Specific enforcement statistics cited here are drawn from PPB’s own reported figures and should be independently verified for any matter where they are material.
