OPINION: Kenya’s AI regulation must catch up with innovation

The advent of technology has fundamentally transformed the way we live, work and conduct business. Today, it is difficult to identify an industry that has remained untouched by technological advancement. 

From banking and healthcare to education, agriculture, manufacturing, legal practice and government services, technology has become an indispensable part of our everyday lives. Artificial Intelligence (AI) has taken this transformation a step further.

What was once regarded as a futuristic concept has now become an everyday reality. Businesses are using AI to analyse data, automate processes, recruit employees, interact with customers, detect fraud and make business decisions. 

Professionals are increasingly relying on AI to draft documents, conduct research, analyse information and improve efficiency. 

Consumers interact with AI, often without even realising it, through recommendation systems, chatbots, facial recognition technologies and other automated services.Kenya is no exception.

Indeed, the rapid adoption of AI presents enormous opportunities for a country seeking to position itself as a technology and innovation hub. 

AI has the potential to increase productivity, improve access to services, support medical research, enhance education and create entirely new industries and employment opportunities. But with innovation comes responsibility.

The question that Kenya must now confront is not whether Artificial Intelligence should be embraced. That debate has, in many respects, already been overtaken by events. 

The more pressing question is whether our legal and regulatory frameworks are sufficiently equipped to govern the opportunities and risks presented by AI.

Regulation is not necessarily the enemy of innovation. In fact, well-designed regulation can provide the certainty, accountability and public confidence necessary for innovation to flourish.

AI presents legal questions that cannot be answered solely by traditional regulatory approaches. Who is responsible when an AI system makes a harmful or discriminatory decision? 

What happens when an AI tool processes personal data without the knowledge or consent of the individual? Who owns content generated by artificial intelligence? Can an employer rely entirely on an AI-generated assessment when making recruitment or disciplinary decisions? What safeguards should apply where AI is used in healthcare, financial services, education or law enforcement?

These questions become even more significant because AI systems are capable of processing vast amounts of information, including personal and sensitive data, at extraordinary speed.

Kenya is not starting from a regulatory vacuum. The Constitution of Kenya provides important safeguards relating to privacy, while the Data Protection Act, 2019 provides a framework for the protection of personal data. 

The country also has legislation dealing with areas such as consumer protection, intellectual property, employment, cybercrime and electronic transactions. These laws remain relevant to the deployment of AI.

However, AI challenges us to examine whether these existing laws are sufficiently clear and adaptable to address technologies that can learn, generate content, make predictions and, in some circumstances, influence decisions with limited human intervention.

This is where the conversation about AI regulation in Kenya must become more deliberate.

We must avoid two extremes. 

On one hand, an absence of regulation may expose individuals, businesses and the State to significant risks. 

On the other hand, excessive or poorly designed regulation could discourage investment, experimentation and technological advancement.

Kenya therefore needs a regulatory approach that is pro-innovation, but equally pro-accountability.

The starting point should be the recognition that not every use of AI presents the same level of risk. An AI tool used to generate marketing ideas should not necessarily be regulated in the same manner as an AI system used to determine whether an individual qualifies for credit, employment, healthcare or a public service. 

A risk-based regulatory approach would therefore be more appropriate than a blanket prohibition or an attempt to regulate every application of AI in exactly the same manner. At the centre of this framework must be the human being.

Technology must remain a tool for human advancement and not become a mechanism through which responsibility is outsourced to an algorithm. 

Where an AI system makes or materially influences a decision affecting a person's rights, livelihood, privacy or access to essential services, there must be meaningful human oversight and accountability.

The future of AI regulation in Kenya should consequently not be viewed simply as a question of controlling technology. It is a question of determining the rules under which technology operates within a constitutional democracy.

As AI becomes increasingly embedded in our economy and public institutions, Kenya has an opportunity to develop a regulatory framework that protects fundamental rights while creating an environment in which responsible innovation can thrive.

The law must not necessarily race ahead of technology. But neither can it afford to remain permanently behind it. The age of artificial intelligence has arrived and Kenya's regulatory response must now arrive with it.