At a glance
- Every business needs county permits; regulated activities also need a sector licence before trading.
- Many sector licences are open only to companies incorporated in Kenya.
- The ICT sector's 30% local shareholding rule was removed in August 2023.
- Data controllers and processors must register with the ODPC unless an exemption applies.
- Every licence carries a renewal date and conditions, so each one belongs on a calendar.
Start with the county
Every business in Kenya needs permits from the county where it operates, whatever its sector. Expect a single business permit renewed every year, a fire safety certificate, a public health licence for premises that handle food or provide health or hospitality services, and approval for outdoor signs. Each county sets its own fees and renewal dates.
Approvals that cut across sectors
- Environment. Projects listed under the Environmental Management and Coordination Act need an environmental impact assessment licence from the National Environment Management Authority (NEMA) before work begins.
- Standards. The Kenya Bureau of Standards (KEBS) certifies products and enforces standards on imports.
- Workplace safety. Workplaces register with the Directorate of Occupational Safety and Health Services.
- Personal data. Organisations that process personal data register with the Office of the Data Protection Commissioner (ODPC). Entities with annual turnover below KES 5 million and fewer than 10 employees are exempt, unless they work in a listed sector such as telecommunications, financial services, health, insurance, education, hospitality, gaming and betting, transport or credit reference. One-off registration fees run from KES 4,000 to KES 40,000 by size, and certificates last 24 months.
The sector regulators
| Sector | Regulator | What it licenses |
|---|---|---|
| Banking, payments and digital credit | Central Bank of Kenya | Banks, microfinance banks, payment service providers, digital credit providers and forex bureaus |
| Capital markets | Capital Markets Authority | Fund managers, investment advisers, stockbrokers and other market intermediaries |
| Insurance | Insurance Regulatory Authority | Insurers, reinsurers, brokers and agents |
| Pensions | Retirement Benefits Authority | Retirement schemes, administrators and fund managers |
| Savings and credit cooperatives | Sacco Societies Regulatory Authority | Deposit-taking saccos |
| Telecoms, ICT, broadcasting and postal | Communications Authority of Kenya | Network, service and content licences |
| Energy and petroleum | Energy and Petroleum Regulatory Authority | Generation, transmission, distribution and petroleum licences |
| Medicines and medical devices | Pharmacy and Poisons Board | Premises, product registration and import permits |
| Health facilities and practitioners | Kenya Medical Practitioners and Dentists Council | Facility and practitioner licences |
| Scheduled crops | Agriculture and Food Authority | Dealers, processors and exporters of crops such as tea, coffee and horticulture |
| Plant health | Kenya Plant Health Inspectorate Service | Phytosanitary certification for plant imports and exports |
| Construction | National Construction Authority | Contractor registration by category |
| Tourism and hospitality | Tourism Regulatory Authority | Tourism enterprise licences |
| Road transport | National Transport and Safety Authority | Operator and vehicle licences |
| Aviation | Kenya Civil Aviation Authority | Air operator certificates and permits |
| Private security | Private Security Regulatory Authority | Security firm licences |
| Recruitment | National Employment Authority | Private employment agencies |
Ownership and incorporation conditions
Many sector licences are open only to companies incorporated in Kenya, which makes a subsidiary the natural vehicle for regulated work. Ownership rules have loosened: the requirement that ICT licensees be at least 30% Kenyan-owned was deleted from the National ICT Policy Guidelines by gazette notice in August 2023, and the Communications Authority was directed to implement the change. Other regulated sectors still set ownership, capital, fit-and-proper or residency conditions, so read your regulator's rules before you register.
A sensible order of work
- Map every activity you plan to carry out to the licences it requires.
- Incorporate in the form your regulator requires.
- Secure premises approvals: county permits, NEMA where required and fire safety. Many regulators inspect premises before licensing.
- Apply to the sector regulator with its full list of supporting documents.
- Complete employer registrations and data protection registration before operations start.
- Put every licence, its conditions and its renewal date on a calendar.
Checked against the sources below on 12 October 2026. This guide is general information, not legal or tax advice. Rules change with each Finance Act and gazette notice, so confirm the current position before you act, or ask us.