# What minimum security controls do Kenya's Digital Health Regulations expect?

URL: https://tymirahealth.com/resources/faqs/what-minimum-security-controls-do-kenya-s-digital-health-regulations-expect
For: Digital health teams | Digital health and technology | Reviewed by Independent clinical reviewer, Registered mental health clinician, Kenya | Last reviewed 8 November 2026

**Answer:** The 2025 Regulations list controls for sensitive personal data, including: unique usernames with strong passwords; monitoring of login attempts and password changes; secure networks with firewalls and intrusion detection; regular software and firmware updates; encryption of data at rest and in transit; staff training on phishing and security; an incident response plan; breach notification procedures; and regular, encrypted backups stored securely. Add multi-factor authentication for remote and admin access as good practice. Map each control to an owner.

Sources: Kenya Law: https://new.kenyalaw.org/akn/ke/act/ln/2025/76/eng@2025-04-11 - ISO: https://www.iso.org/standard/84647.html

## Related questions

- [Can an AI chatbot be used to detect suicide risk or triage mental health crises?](https://tymirahealth.com/resources/faqs/can-an-ai-chatbot-be-used-to-detect-suicide-risk-or-triage-mental-health-crises)
- [Can generative AI be offered to clients for emotional support between sessions?](https://tymirahealth.com/resources/faqs/can-generative-ai-be-offered-to-clients-for-emotional-support-between-sessions)
- [Can PHQ-9 and similar screening tools be delivered digitally and scored automatically?](https://tymirahealth.com/resources/faqs/can-phq-9-and-similar-screening-tools-be-delivered-digitally-and-scored-automatically)

---

**About Tymira Health:** Tymira Health is a healthcare technology company based in Nairobi, Kenya. It builds Tymira360, a practice management and EHR platform for mental health, physiotherapy and dental providers, clinics, hospitals, NGOs and insurers across Africa.

- Book a demo: https://tymirahealth.com/demo
- Contact: https://tymirahealth.com/contact (info@tymirahealth.com)
- All resources: https://tymirahealth.com/resources/all