Kenya has no dedicated whistleblower protection law yet - the Whistleblower Protection Bill has been reintroduced repeatedly since 2017 without passing. That makes the obligation picture different from the EU, UK, Australia, Japan, or the US, and worth stating plainly rather than dressing up as an equivalent regime.
What does apply today
Bribery Act 2016, section 9 places a duty on public and private entities to put in place procedures appropriate to their size and circumstances for preventing bribery and corruption. A reporting route that people will actually use is one component of that, not the whole of it.
Data Protection Act 2019 governs how reporter identity and case data are handled: lawful basis, minimisation, and controls on who can access identifying information.
What that means for a reporting channel
Because statutory whistleblower protection is not yet in place, the practical protection a reporter has is largely whatever the organization builds. That puts more weight, not less, on the technical side of anonymity: a reporting path that requires no login and no identifying field, a case ID and passcode for follow-up so a reporter can keep a two-way conversation open without revealing who they are, and identity storage behind the encrypted vault with split-key access so disclosure is a deliberate, logged act.
Where Rectifia fits
The same case model used for the other configured jurisdictions applies here - structured categories, severity and evidence scored separately, a timestamped audit trail, and consistency checks across closed cases. For groups operating in Kenya alongside other jurisdictions, the strictest applicable deadline across the configured set is what the case is held to, which in practice means a Kenyan operation inside a multi-jurisdiction group often runs on tighter internal benchmarks than local law alone would require.
Because the statutory position here is the least settled of the jurisdictions we support, this page is deliberately narrower than the others. Confirm current obligations with local counsel before relying on any of it.