KENYA · GUIDE 0611 · EDITION 4.7
Data transfer service in Kenya: Registration and Activity Checks
Define the activity that authorities need to assess
Transfer customer-authorized files between devices with verification and controlled deletion.
Transfer only customer-authorized data between identified devices, agreeing included folders, exclusions, account access, privacy, backup ownership, and when the source may be altered or retained.
Describe that exact operation when checking requirements. State where the work takes place, whether customers enter the premises, who performs technical tasks and whether you manufacture, resell, deliver or coordinate the service. Requirements can change with these facts; a broad business category is not a complete permit determination.
Sector questions to investigate
- Obtain written authority before reading or copying device data; agree retention and deletion.
- For CCTV, assess privacy obligations and any security-service classification before offering installation.
- Route e-waste through appropriate authorized handlers rather than mixing it with general refuse.
Keep registration separate from permission to operate
A registered business name does not itself establish approval of premises, products or professional work. Use the Business Registration Service to check the appropriate registration route. Ask the relevant county office which premises and trading checks apply to the actual activity. Confirm tax and invoicing obligations with KRA for your circumstances rather than copying another trader's treatment.
Prepare a written enquiry
| Information to provide | Business-specific starting point |
|---|---|
| Proposed output | Transfer customer-authorized files between devices with verification and controlled deletion. |
| Scope and exclusions | Transfer only customer-authorized data between identified devices, agreeing included folders, exclusions, account access, privacy, backup ownership, and when the source may be altered or retained. |
| First operating step | Agree the folders, accounts and file types included in the transfer, checking customer authority and destination capacity before accessing data. |
| Quality and acceptance | Ask the customer to open sampled files and compare folder totals, checking application-specific content separately because copying documents does not necessarily migrate working software or settings. |
Add the county, location, premises arrangement, scale, equipment and responsible person's qualifications. Ask which authority handles an issue if it falls outside the first office's remit. Record the answer, reference link, date checked and any renewal or inspection condition. A guide's reference list is a route to verification, not an approval document.
Decide what must wait
Do not offer a regulated service or make a safety, accreditation or certification claim that you cannot substantiate. Resolve an unanswered prerequisite before accepting work that depends on it. A demand interview can often precede trading; a paid or physical trial still needs the appropriate permissions and safe arrangements.
The job fails when visible documents copy successfully but the customer loses an essential local archive nobody identified, or source data is deleted before verification.
No universal licence package, current fee or exemption is asserted here. The official links below support only their stated scope.
Prepare a precise activity enquiry
Describe this actual operating scope to the relevant authority or competent adviser: Fictional transfer DATA-111 copies one owner's 50GB document/photo folder tree from an accessible Windows PC to a new authorised PC through approved external storage. Output is source/destination manifest, copy/error log and owner acceptance. Installed apps, passwords, locked accounts, forensic recovery and deleting originals are excluded.
Use these operating details to make the enquiry specific:
| Detail to disclose | Why it can affect the answer |
|---|---|
| External drive - Enough usable space and compatible filesystem. | Explain the actual premises, scale, use and who will perform the task. Ask which current rule applies to these facts. |
| Manifest/copy tool - Logs and verification support. | Explain the actual premises, scale, use and who will perform the task. Ask which current rule applies to these facts. |
| Owner access - Private authentication/recovery. | Explain the actual premises, scale, use and who will perform the task. Ask which current rule applies to these facts. |
Keep the reply date, official source, exact activity facts and any conditions together. This is an enquiry preparation method, not a determination that a licence, exemption or fee applies. The earlier source dates do not mean legal requirements were rechecked today. Resolve these outstanding checks before relying on a broad business description:
- Actual devices, files and drive health unverified; no transfer performed.