Setting the Stage
The Data Privacy and Governance Society of Kenya (DPGSK), in partnership with the Kenya Revenue Authority (KRA), hosted a webinar exploring the intersection of taxation, privacy and data protection in Kenya’s increasingly digital tax environment.
Opening the session, DPGSK President Dr. Mugambi Laibuta highlighted the Society’s commitment to continuous professional development and fostering dialogue between regulators, practitioners, civil society and industry. Moderator Grace Kibu framed the discussion around Kenya’s transition from traditional self-assessment to digitally enabled tax administration, where tax compliance increasingly relies on electronic records, eTIMS invoicing, digital platforms and automated processes.
KRA on Digital Tax Administration
Representing KRA, Albert K. Kogoo from the Taxpayer Experience Division explained how the Authority has digitized the entire tax compliance lifecycle—from taxpayer registration and return filing to tax payment, dispute resolution and enforcement. He noted that taxpayers can now access services through iTax, eTIMS and WhatsApp, significantly reducing paperwork, physical visits and processing times. According to KRA, digitization has improved efficiency, expanded the tax base, enhanced transparency and enabled real-time visibility of tax data while simplifying compliance for taxpayers.
Strengthening Privacy and Data Protection at KRA
KRA’s Data Protection Officer, Peter Kabura, outlined the Authority’s data protection programme, emphasizing that KRA operates as both a data controller and processor under the Data Protection Act. He highlighted measures including privacy-by-design, Data Protection Impact Assessments (DPIAs), staff awareness programmes, governance structures, data retention policies, security controls, privacy notices, data sharing agreements and ongoing collaboration with the Office of the Data Protection Commissioner (ODPC). He also discussed KRA’s cautious adoption of artificial intelligence, noting that AI is being deployed to enhance taxpayer services, analytics and customs operations while internal safeguards seek to minimize privacy risks.
A Human Rights Perspective on Digital Taxation
Providing a human rights perspective, Victor Kapiyo examined the implications of increasingly data-driven tax administration. He argued that while digital taxation can improve efficiency, it must remain anchored in constitutional protections and international human rights principles. He emphasized the importance of data minimization, transparency, proportionality, accountability and effective remedies for automated decision-making. He also cautioned against excessive data collection, unchecked algorithmic profiling, broad exemptions from data protection obligations and the growing interoperability of government databases without adequate safeguards.
Understanding Taxpayer Rights and Dispute Resolution
Tax expert Anne Wambui Beya, a former Registrar and Secretary of the Tax Appeals Tribunal, explained how tax disputes are handled within Kenya’s legal framework. She outlined the objection and appeal process, the role of the Tax Appeals Tribunal and the constitutional protections that apply during tax administration, including the rights to privacy, fair administrative action and a fair hearing. She noted that emerging disputes are increasingly likely to involve issues such as algorithmic assessments, data matching, third-party information sharing, international exchange of taxpayer information and the evidentiary treatment of digital records.
Key Questions from Participants
The webinar concluded with an interactive question-and-answer session where participants sought clarification on taxpayer rights, data accuracy, rectification mechanisms, automated data matching, access to personal data and the safeguards protecting taxpayer information. KRA representatives reiterated that taxpayers have channels to correct inaccurate records, verify pre-filled tax information and engage the Authority on data protection concerns.
Looking Ahead
The discussion underscored that as Kenya continues to modernize its tax administration, effective revenue collection and the protection of privacy rights must advance together. Building and maintaining public trust will require strong governance, transparency, robust data protection practices and continued engagement between government, industry and civil society.
