Kenya: Kenya Cloud Policy including data localisation requirements entered into force

On 2 May 2025, the Kenya Cloud Policy, 2025 became effective following its publication in the Kenya Gazette. This policy, in line with the Kenya Information and Communication Act, includes data localisation requirements based on the sensitivity classification of data. Data classified as “Top Secret” or “Secret” must be hosted within dedicated Government Cloud infrastructure located in Kenya. “Restricted” data is to be hosted within public cloud infrastructure in Kenya, where standards are met, and “Open” data must be hosted within the Government Cloud to support transparency and access.