Duale Dismisses Fears of Data Breach in New Kenya-US Ksh200B Health Deal

Duale Dismisses Fears of Data Breach in New Kenya-US Ksh200B Health Deal

Nairobi, Kenya – Health Cabinet Secretary Aden Duale has dismissed allegations of a potential data breach in Kenya’s newly signed health agreement with the United States, insisting that the country’s health information remains secure under Kenyan law.

The clarification comes after whistleblower Nelson Amenya claimed that the multi-billion-shilling health security deal would grant the U.S. government unrestricted, real-time access to Kenya’s national health databases, including sensitive patient records. Amenya alleged that the agreement could expose personal medical information such as HIV status, tuberculosis treatment history, and vaccination data.

He further argued that a clause subjecting the deal to U.S. federal law would override Kenyan legal protections, including the Data Protection Act, the Health Act, and the Digital Health Act.

Duale’s Response

In a statement issued on Thursday, December 4, CS Duale strongly refuted the claims, describing them as misleading and unfounded. He emphasized that Kenya’s health data is classified as a national strategic asset and cannot be accessed or shared without following established legal procedures.

“Under the new U.S.-Kenya framework: All data sharing follows Kenyan laws, and only de-identified, aggregated data is shared,” Duale stated.

“Approvals must go through the Digital Health Authority (DHA) and the Data Commissioner. The Digital Health Act and the Data Protection Act fully apply,” he added.

Duale reassured Kenyans that the agreement does not compromise patient confidentiality and that all data-sharing arrangements must be vetted by relevant regulatory bodies.

The Health Agreement

The statement came just hours after President William Ruto witnessed the signing of the landmark deal, which will see the U.S. government invest Ksh200 billion in Kenya’s health system over the next five years. The agreement was signed in Nairobi in the presence of Prime Cabinet Secretary Musalia Mudavadi and U.S. Secretary of State Marc Rubio.

Under the arrangement, Kenya and the U.S. will jointly manage investments aimed at eliminating HIV, tuberculosis, and malaria, strengthening outbreak response, and accelerating the transition to a fully self-reliant national health system by 2030.

Officials said the deal represents a significant boost to Kenya’s health sector, which has long struggled with funding gaps and infrastructure challenges.

Broader Implications

The allegations of a potential data breach had sparked public concern, particularly given the sensitivity of health records and Kenya’s ongoing efforts to digitize its health systems. Analysts noted that the controversy highlighted the importance of transparency in international agreements, especially those involving data management.

However, Duale’s firm dismissal of the claims appears aimed at reassuring citizens and stakeholders that Kenya’s sovereignty over its health data remains intact.

“Health data is a national strategic asset. It cannot be accessed or shared without following legal procedures,” Duale reiterated.

Conclusion

As Kenya embarks on the implementation of the Ksh200 billion health deal, the government has sought to assure the public that patient confidentiality and data protection remain paramount. While whistleblower allegations raised questions about the agreement’s safeguards, Duale’s clarification underscores the government’s position that all data-sharing will strictly adhere to Kenyan laws.

The partnership with the U.S. is expected to transform Kenya’s health sector, but the debate over data security highlights the delicate balance between international cooperation and national sovereignty in the digital age.

ALSO READ: U.S. Reviewing Bilateral Relationship with Tanzania Amid Rampant Violation of Human Rights

Duale Dismisses Fears of Data Breach in New Kenya-US Ksh200B Health Deal