Kenya published the Statistics Bill, 2026 on April 28, 2026, proposing a comprehensive overhaul of the country's statistical framework - one that would dissolve the Kenya National Bureau of Statistics, create an entirely new body, and extend state data powers to cover biometric data, big data, and citizen-generated data for the first time. The Bill is promoted by John Mbadi Ng'ongo, the Cabinet Secretary for the National Treasury and Economic Planning, and it is currently open for public participation.

What is being proposed is not a minor revision. The Bill repeals the Statistics Act, No. 4 of 2006 (Cap. 112), the law that established the Kenya National Bureau of Statistics (KNBS) twenty years ago. In its place, the legislation creates the Kenya Statistics Authority - a body corporate with perpetual succession, a new governing board, and a revised leadership structure anchored by a Statistician-General. All assets, liabilities, and ongoing legal proceedings of the KNBS would transfer to the new Authority on commencement of the Act.

Why a new law now

The 2006 Act predates several of the most significant institutional changes in Kenya's recent history. According to the Bill's memorandum, the legislation responds to the promulgation of the Constitution of Kenya in 2010, the subsequent devolution of government functions to 47 counties, and the enactment of the Data Protection Act in 2019. Beyond domestic change, the document also cites Kenya's obligations under the United Nations Fundamental Principles of Official Statistics, a framework that the new Bill would give the force of law.

That last point is significant. Under Clause 5, the UN Principles would no longer be aspirational guidelines - they would bind every person and institution involved in collecting, producing, analysing, and disseminating official statistics across Kenya. The Authority must exercise its mandate with "full professional and scientific independence, free from political, commercial or other external influence, including independent choice of sources, methods, concepts, classifications, and the timing and content of statistical releases," according to the Bill text.

The drive to embed statistical independence in statute reflects a tension that data governance practitioners recognise globally. A coordinated national statistical system depends on centralised authority. But that same concentration of power creates risks if the institution is not insulated from political pressure. The Bill attempts to balance both concerns: it gives the Authority broad legal powers while formally prohibiting interference in how those powers are exercised.

Structure of the Kenya Statistics Authority

The Authority's headquarters would remain in Nairobi, though the Bill permits offices anywhere in Kenya. A Board of Directors would govern the institution. Its composition is specified precisely: a Chairperson appointed by the President; the Principal Secretary for statistics; the Principal Secretary to the National Treasury; the Attorney-General; a representative of the Council of Governors; the Data Protection Commissioner; two members representing the private sector and public research institutions respectively; and the Statistician-General as an ex-officio member with no voting rights.

Including the Data Protection Commissioner on the Board is a structural choice with practical implications. The Bill's own data provisions intersect directly with the 2019 Data Protection Act, particularly where administrative and personal data are repurposed for statistical use. Having the Commissioner at the table is intended to manage that interface, though the LinkedIn commentary from the Data Governance Pros Kenya group - which noted the Bill "raises important questions around data access powers, proportionality, and the interface with the Data Protection Act, particularly where administrative and personal data are repurposed at scale for statistical use" - suggests practitioners see room for tension even with that safeguard in place.

Board members appointed by the President and the Cabinet Secretary serve three-year terms and are eligible for one renewal of three years, based on satisfactory performance. Gender provisions apply: no more than two-thirds of members may be of the same gender. The Board must also observe regional balance and ensure representation of persons with disabilities and marginalised groups.

The Statistician-General, appointed through an open competitive process, serves a five-year term renewable once. That person must hold at least a master's degree in statistics, economics, demography, mathematics, or data science, and must have at least ten years' relevant experience plus a minimum of five years in senior management. The position functions as chief executive officer, secretary to the Board, and custodian of day-to-day operations.

The data provisions: big data, biometric data, citizen-generated data

Part III of the Bill contains what is arguably its most consequential set of clauses. The existing Statistics Act dealt primarily with traditional data collection - surveys, censuses, administrative records. The new Bill formally extends the legal framework to three categories that did not exist in statute before.

Big data is defined in the Bill as "large, complex and high-frequency datasets generated primarily outside the traditional statistical system." Under Clause 26, the Authority would issue guidelines for its production, use, and validation for statistical purposes. No timetable is specified in the Bill for when those guidelines must be produced, though the regulations-making power in Clause 65 gives the Cabinet Secretary broad authority to set procedures.

Citizen-generated data is defined as "data produced by non-state actors with the active consent and participation of citizens, primarily to tackle issues that affect them directly." Clause 25 requires the Authority to issue guidelines for its production and validation for official reporting. The inclusion of this category acknowledges a data production model that has grown substantially across Africa, where mobile-enabled citizen surveys and participatory mapping have become part of development and governance practice.

Biometric data receives the most detailed treatment - and the most explicit safeguards. Clause 28 permits the Authority to collect and process biometric data in censuses and surveys "for purposes of improving accuracy, preventing duplication and ensuring integrity of data." The Bill defines biometric data to include fingerprints, facial images, iris patterns, and other prescribed identifiers.

But the conditions attached are strict. Biometric data collected under the Act must be used solely for statistical purposes, must be limited to what is necessary, and must be anonymised or pseudonymised as soon as practicable. Crucially, it cannot be shared with any person or body for "administrative, enforcement or investigative purposes" except by court order. Children are treated separately: biometric collection is not mandatory for minors, identification falls back on demographic and household information, and a person cannot be excluded from a census solely because they have not provided biometric data.

The biometric provisions mirror concerns being litigated in European data protection enforcement. Spain's data protection authority fined FC Barcelona €500,000 in March 2026 for an inadequate data protection impact assessment covering biometric data from approximately 143,000 members. A separate ruling in the same month imposed €950,000 on age-verification firm Yoti for unlawful processing of biometric special category data, invalid consent, and excessive retention. The Kenya Bill's approach - limiting use to statistical purposes and requiring anonymisation - reflects the same principles that European regulators have been enforcing through fines.

Access to administrative data

Clause 24 is one of the more commercially significant provisions for organisations that hold data. It empowers the Authority to request administrative data from any national or county government entity for the purpose of producing official statistics. Public entities must comply and must provide accompanying metadata at the level of detail the Authority specifies.

More directly, the Clause states that provisions in other laws relating to confidentiality or secrecy shall not prevent the provision of administrative data for statistical purposes "unless that law expressly excludes such use." That overrides a common objection - that confidentiality obligations block data sharing with statistics offices. Under the Bill, the default flips: sharing is required unless a specific law explicitly prohibits it.

Clause 23 extends a version of this access to non-government entities as well. The Statistician-General may make a written request to any person or entity holding records or documents for access where reasonably required for official statistics. The request must specify the information sought and the purpose, and must be proportionate. Information obtained this way may be used solely for statistical purposes and cannot be repurposed for administrative, regulatory, or enforcement uses.

Those use-limitation provisions are direct responses to a data governance concern common to modern statistics law: that a powerful statistical office, once it gains access to data, might use it for purposes beyond what data subjects expected when the information was originally collected. The Bill structures that limitation as a statutory obligation, not a policy commitment.

Enforcement and penalties

The Bill creates a graduated enforcement regime. The Statistician-General can issue enforcement notices requiring compliance within a specified period. Failure to comply with an enforcement notice is itself an offence. Penalty notices can impose daily financial charges for continuing non-compliance after an enforcement notice has been served. Administrative fines - the most severe non-criminal response - are capped at five million Kenyan shillings under Clause 34.

Criminal sanctions sit alongside the civil enforcement regime. Under Clause 67, making a false statement in required information, disclosing information without lawful authority, using statistical data for personal gain before it is made public, compiling or disseminating false statistics, or using data to identify individuals all carry penalties of a fine not exceeding one million shillings or imprisonment for up to one year, or both.

The right of appeal is preserved throughout. A person aggrieved by a decision of the Statistician-General may appeal to the Board within thirty days. An administrative fine that survives appeal becomes a civil debt recoverable by the Authority.

This enforcement structure is comparable in design - though not in scale - to mechanisms that data regulators in Europe have been deploying. The SECURE Data Act introduced in the United States Congress on April 21, 2026 similarly proposes a tiered enforcement framework split between the Federal Trade Commission and state attorneys general. Kenya's approach is more consolidated: a single authority with enforcement powers rather than a multi-agency model.

County statistics offices

One dimension of the Bill that is specific to Kenya's constitutional structure is the formal integration of county-level statistical functions. Part V requires every county government to establish a County Statistics Office, responsible for statistical functions at county level and forming part of the National Statistical System. Each office is headed by a County Statistician, appointed by the County Public Service Board, who must hold at least a master's degree and have seven years' relevant experience.

County Statistics Offices must comply with the Code of Practice developed by the national Authority. They also sit on County Intergovernmental Coordination Committees on Statistics, which are responsible for harmonising national and county policies and methodologies. These committees include the County Statistician, a representative of the Authority, a representative of the County Commissioner, and two persons appointed by the County Executive Committee member.

The devolution architecture matters because county governments collect and publish their own statistics - and in a federated statistical system, inconsistent methodology produces incomparable data. The Bill attempts to resolve that through binding compliance with national standards while preserving counties' operational autonomy in their own statistical programmes.

Census provisions and petitions

Part VI establishes detailed procedures for Population and Housing Censuses. The Authority must conduct a census every ten years. Provisional results must be published within a reasonable time after enumeration; final results follow validation and verification. Both must be published in the Gazette and in formats that ensure public accessibility.

An unusual feature is the formal petition mechanism. Any person or community aggrieved by census results may, within sixty days of provisional publication, petition the Authority for review or correction. The petition must specify grounds, provide verifiable evidence, identify the affected area or population, and state the correction sought. Grounds include errors in enumeration methodology, systematic exclusion or undercount, procedural irregularities, manipulation or falsification of data, or failure to adhere to recognised statistical standards.

If the Statistician-General finds sufficient grounds, an independent review panel - comprising experts in statistics, data science, demography, and law - must be established. The panel has ninety days to prepare a report. A decision follows within fourteen days of the report's receipt and is published in the Gazette. Appeals go to the High Court. Importantly, census results remain in use for constitutional and statutory purposes unless actually set aside by a court - petitions alone do not suspend their effect.

Census data underpins several constitutional functions: allocation of national revenue, electoral boundary delimitation, affirmative action measures, and planning for socioeconomic rights. That context explains why the Bill treats census matters as "a matter of constitutional importance" and requires disputes to be resolved expeditiously.

The National Statistics Fund

Clause 62 establishes the National Statistics Fund. The Cabinet Secretary creates and manages it for purposes that include mobilising resources for large-scale data collection, adopting new and emerging technological advancements in statistics production, building infrastructure, and supporting capacity building and training. The Fund operates under the Public Finance Management Act.

The existence of a dedicated fund, rather than reliance solely on general budget appropriations, is intended to give the Authority a more stable resource base for capital-intensive activities such as censuses and technology investments. It also signals that the government anticipates ongoing expenditure on modernising statistical infrastructure - including the big data and biometric systems that the Bill's substantive provisions contemplate.

Public participation and what happens next

The Bill is currently open for public participation. Written submissions, memoranda, and comments may be submitted to the Kenya National Bureau of Statistics at [email protected] and [email protected]. No closing date is specified in the published materials.

The Bill must pass through Parliament and receive presidential assent before it takes effect. As a money Bill within the meaning of Article 114 of the Constitution, it requires specific procedural treatment. It is also classified as a Bill concerning county governments under Article 110(1)(a), which means additional constitutional requirements apply to its passage through the Senate.

For the data governance community, the public participation window is the opportunity to engage with several open questions: how the Authority will exercise its administrative data access powers in practice; how the interface with the Data Protection Act will be managed operationally; and whether the biometric data provisions contain sufficient safeguards given the sensitivity of the data categories involved.

The global trajectory of data regulation - whether in California, the European Union, or the United States Congress, where the Association of National Advertisers recently backed the SECURE Data Act citing 29 million advertising jobs - has consistently moved toward clearer legal bases, stronger confidentiality protections, and explicit use-limitation rules. Kenya's Statistics Bill, 2026 follows that direction. Whether the specific mechanisms it proposes prove workable in a devolved, resource-constrained context is the question that the public participation process is designed to test.

Timeline

  • 2006 - Statistics Act, No. 4 of 2006 (Cap. 112) enacted, establishing the Kenya National Bureau of Statistics
  • 2010 - Promulgation of the Constitution of Kenya, introducing devolution and new governance frameworks that the 2006 Act did not anticipate
  • 2019 - Data Protection Act enacted in Kenya, creating the Office of the Data Protection Commissioner and establishing rules for personal data processing
  • April 21, 2026 - US House Republicans introduce the SECURE Data Act, proposing a federal framework for consumer data privacy
  • April 28, 2026 - Kenya National Bureau of Statistics publishes the Statistics Bill, 2026, promoted by Cabinet Secretary John Mbadi Ng'ongo, initiating public participation

Summary

Who: The Cabinet Secretary for the National Treasury and Economic Planning, John Mbadi Ng'ongo, promoted the Bill. It directly affects the Kenya National Bureau of Statistics, which would be replaced by the Kenya Statistics Authority. All national and county government entities that hold administrative data, as well as any organisation conducting surveys or censuses in Kenya, fall within scope.

What: A proposed Act of Parliament to repeal the Statistics Act, No. 4 of 2006 and replace it with a comprehensive new framework for official statistics in Kenya. The Bill establishes the Kenya Statistics Authority as a body corporate, creates County Statistics Offices across all 47 counties, extends legal authority to cover big data, citizen-generated data, and biometric data, establishes a National Statistics Fund, and creates a tiered enforcement regime with administrative fines capped at five million shillings.

When: The Bill was published on April 28, 2026, and is currently open for public participation. Submissions may be made by email to the KNBS. Parliamentary passage and presidential assent are required before the Bill becomes law.

Where: Kenya, with direct application across all 47 county governments and national government entities. The Authority's headquarters would remain in Nairobi.

Why: The 2006 Statistics Act predates the 2010 Constitution, the devolution of government, the 2019 Data Protection Act, and the emergence of big data, biometric data collection, and citizen-generated data as active components of statistical systems. The Bill seeks to align Kenya's national statistical framework with both its current constitutional architecture and international standards including the UN Fundamental Principles of Official Statistics.

Share this article
The link has been copied!