# What should an incident response plan for a mental health system include?

URL: https://tymirahealth.com/resources/faqs/what-should-an-incident-response-plan-for-a-mental-health-system-include
For: Digital health teams | Digital health and technology | Reviewed by Independent clinical reviewer, Registered mental health clinician, Kenya | Last reviewed 8 November 2026

**Answer:** Kenya's Digital Health Regulations require controllers to have an incident response plan for identifying, reporting and mitigating security incidents. Include named roles and out-of-hours contacts, how to contain and investigate, evidence preservation, decision criteria for notifying the ODPC, the Digital Health Agency and affected clients within legal deadlines, client communication templates, and how clinical services continue if the system is down. Rehearse it at least yearly with a tabletop exercise and update it after every real incident.

Sources: Kenya Law: https://new.kenyalaw.org/akn/ke/act/ln/2025/76/eng@2025-04-11 - Kenya Law: https://new.kenyalaw.org/akn/ke/act/2019/24/eng@2022-12-31 - ISO: https://www.iso.org/standard/84647.html

## Related questions

- [Can an AI chatbot be used to detect suicide risk or triage mental health crises?](https://tymirahealth.com/resources/faqs/can-an-ai-chatbot-be-used-to-detect-suicide-risk-or-triage-mental-health-crises)
- [Can generative AI be offered to clients for emotional support between sessions?](https://tymirahealth.com/resources/faqs/can-generative-ai-be-offered-to-clients-for-emotional-support-between-sessions)
- [Can PHQ-9 and similar screening tools be delivered digitally and scored automatically?](https://tymirahealth.com/resources/faqs/can-phq-9-and-similar-screening-tools-be-delivered-digitally-and-scored-automatically)

---

**About Tymira Health:** Tymira Health is a healthcare technology company based in Nairobi, Kenya. It builds Tymira360, a practice management and EHR platform for mental health, physiotherapy and dental providers, clinics, hospitals, NGOs and insurers across Africa.

- Book a demo: https://tymirahealth.com/demo
- Contact: https://tymirahealth.com/contact (info@tymirahealth.com)
- All resources: https://tymirahealth.com/resources/all