Kenya Medical Council issues new certification rule for health facilities from 2025

Starting January 1, 2025, all new health facilities in Kenya will be required to obtain a valid Certificate of Data Handler/Processor issued by the Office of the Data Protection Commissioner (ODPC).

This is part of a new compliance requirement announced by the Kenya Medical Practitioners and Dentists Council (KMPDC) announced on Tuesday.

This move comes as part of Kenya's ongoing efforts to align with the Data Protection Act, 2019, which was established to safeguard individuals' privacy and ensure responsible data processing.

The Act, implemented by the ODPC, mandates that any organisation handling personal data must comply with strict regulations to mitigate the risk of data misuse.

Other Topics To Read

• National
• data privacy
• data protection
• Data Protection Act
• Kenya Medical Practitioners and Dentists Council
• Office of The Data Protection Commissioner
• Kenya Medical Council issues new certification rule for health facilities from 2025
• Headlines

In the notice, Dr. David G. Kariuki, Chief Executive Officer of the KMPDC, stressed the critical role this certification will play in the medical sector.

"This requirement underscores the critical importance of safeguarding patient privacy, a fundamental aspect of ethical medical practice," he said.

Safety improvement

Kariuki added that by ensuring the responsible and lawful handling of personal data, health institutions not only meet regulatory standards but also bolster patient trust and improve safety.

The new rule applies to both new and existing health facilities.

While newly registered health institutions will need to present the certification starting in 2025, all current health facilities must obtain the necessary certification by March 31, 2025.

This timeline gives facilities three months to comply with the regulation, which is part of the Council's broader effort to maintain professionalism, accountability, and respect for individual rights within the healthcare sector.

The CEO stated that the KMPDC remains committed to upholding high standards in the healthcare sector.

"KMPDC remains steadfast in its mission to uphold the highest standards of professionalism, accountability, and respect for individual rights in the healthcare sector," Kariuki said.

This new certification requirement is part of a wider initiative aimed at enhancing data protection across various sectors in Kenya, ensuring that patient information is handled securely and with the utmost confidentiality.