E-Commerce Regulation in Kenya: Consumer Protection, Digital Marketplace Rules, and Data Compliance

Kenya's e-commerce landscape is one of the most dynamic in Africa, fuelled by near-universal mobile money adoption, growing internet penetration exceeding 53%, and a young, digitally savvy population. The country ranks as the third-largest e-commerce market in Africa, with penetration standing at 43.2% in 2023 and projected to exceed 53.6% by 2025. Yet this rapid growth has outpaced the regulatory framework, creating challenges around consumer protection, counterfeit goods, data privacy, digital lending abuses, and platform accountability. The government's draft E-Commerce Policy and recent legislative amendments signal a new era of structured regulation for Kenya's digital marketplace.

The Legal Framework Governing E-Commerce

The Kenya Information and Communications Act (KICA)

KICA provides the primary legal framework for electronic transactions, recognising electronic records, digital signatures, and electronic contracts as legally valid. The Act, administered by the Communications Authority of Kenya, establishes the legal equivalence of electronic and paper-based transactions, enabling the enforceability of online contracts. However, KICA was drafted before the current e-commerce boom and lacks specific provisions addressing marketplace platforms, social commerce, and cross-border digital trade.

The Consumer Protection Act 2012

The Consumer Protection Act establishes fundamental rights for Kenyan consumers including the right to information, fair and honest dealing, fair value and quality, and redress mechanisms. The Competition Authority of Kenya (CAK) enforces consumer protection provisions, investigating unfair trade practices, deceptive advertising, and unconscionable conduct. However, the Act does not specifically address e-commerce scenarios such as withdrawal rights for online purchases, platform liability for third-party seller failures, protection against dark patterns (manipulative user interface designs), or redress for harm from biased algorithms.

The Data Protection Act 2019

The Data Protection Act is critically important for e-commerce as online platforms collect vast amounts of personal data including names, addresses, phone numbers, payment information, and browsing behaviour. The Act, enforced by the Office of the Data Protection Commissioner (ODPC), requires lawful processing of personal data, informed consent, data minimisation, and security safeguards. The ODPC has issued numerous determinations in 2025 including fines and orders, with penalties of up to KES 5 million or 1% of annual turnover for violations. The Draft Data Protection (Amendment) Bill 2025 aims to strengthen enforcement, clarify data sharing protocols, and address emerging technologies like artificial intelligence.

Recent Regulatory Developments

The Competition (Amendment) Bill 2024

This landmark bill expands the CAK's authority over digital markets and defines new terms including "digital activities" and "business consumer" to address modern commercial realities. The bill addresses the growing power of digital platforms and protects consumers from exploitative online practices. It empowers the CAK to investigate platform market dominance, anti-competitive algorithms, and unfair terms imposed on third-party sellers.

Digital Lending Regulation

The Business Laws (Amendment) Bill 2024 regulates non-deposit-taking credit providers, including digital lenders that operate through mobile apps. The law mandates transparent disclosure of loan terms, interest rates, and repayment obligations while curbing predatory collection practices that had plagued Kenya's digital lending space. Before this regulation, digital lenders charged effective annual interest rates exceeding 300%, shamed borrowers through contact list access, and operated with minimal oversight. The Central Bank of Kenya now licenses and supervises digital credit providers.

The Draft National E-Commerce Policy

The Ministry of Investments, Trade and Industry released a draft National E-Commerce Policy in 2025, inviting public memoranda. The policy addresses consumer protection in digital marketplaces, digital infrastructure development, digital skills enhancement, MSME empowerment in e-commerce, climate-smart digital trade practices, and bridging the digital divide between urban and rural Kenya. The policy aligns with regional frameworks including the EAC E-Commerce Strategy 2022, the COMESA Digital Free Trade Area, and the AfCFTA Protocol on Digital Trade.

Consumer Protection Challenges in E-Commerce

Counterfeit Goods

Online platforms have become significant channels for counterfeit products. The 2025 Consumer-Level Survey Report by the Anti-Counterfeit Authority found that online platforms account for 31.27% of illicit transactions, with Jumia and Kilimall identified as leading sources of counterfeit goods. The Anti-Counterfeit Act of 2008 does not explicitly address e-commerce, creating legal loopholes for online marketplaces. Consumers purchasing electronics, cosmetics, pharmaceuticals, and fashion items online face significant risks of receiving counterfeit products with potential health and safety implications.

Delivery and Service Failures

The CAK reports that 16% of consumers using food delivery and grocery platforms express dissatisfaction with services, with approximately 60% of these complaints not being addressed. Common issues include late deliveries, damaged goods, substitution without consent, and difficulty obtaining refunds. The absence of clear statutory withdrawal rights for online purchases — similar to the EU's 14-day cooling-off period — leaves Kenyan consumers with limited recourse when online purchases disappoint.

Social Commerce Risks

A growing share of Kenya's e-commerce occurs through social media platforms — WhatsApp, Instagram, Facebook, and TikTok — where sellers operate without formal business registration, consumer protection mechanisms, or dispute resolution systems. Payment is typically through M-Pesa, with no escrow or buyer protection. When disputes arise, buyers have limited recourse beyond social pressure. This informal commerce channel is virtually unregulated despite handling billions of shillings in annual transactions.

Platform Accountability and the Way Forward

Kenya's e-commerce regulatory evolution mirrors a global trend toward holding platforms accountable for the activities of third-party sellers. Key areas requiring attention include mandatory seller verification on marketplace platforms, escrow payment systems protecting buyers until delivery confirmation, standardised return and refund policies, product safety standards for goods sold online, cross-border e-commerce customs and tax compliance, and accessible dispute resolution mechanisms including online mediation. The CAK's 2024 Dispute Resolution Guidelines represent a step toward streamlined consumer redress, but Kenya needs a comprehensive e-commerce law that consolidates and updates the fragmented provisions currently spread across multiple statutes.