The Kenya Revenue Authority (KRA) has reaffirmed its commitment to safeguarding taxpayers’ personal data as it advances its ambitious digital transformation agenda.
Speaking during a session with the Departmental Committee on Finance and Economic Planning, KRA Commissioner General Humphrey Wattanga underscored the Authority’s dedication to enhancing data privacy and system integrity.
Wattanga revealed that KRA is actively working with the Office of the Data Protection Commissioner (ODPC) to roll out a Data Minimisation Strategy. The strategy is designed to reduce exposure to personal data risks while reinforcing the robustness of KRA’s digital infrastructure.“We have already put in place immediate measures to swiftly disable loopholes on our portals that could be maliciously exploited to access personal taxpayer data,”Wattanga said. “Our collaboration with the ODPC aims to ensure that we continuously improve the integrity of our systems, especially with regard to access to third-party data.”
This renewed commitment comes in the wake of KRA receiving the ISO/IEC 27001:2022 certification—an internationally recognized standard for information security management systems.
The certification reflects KRA’s adherence to global best practices in data security and public accountability.The data protection initiative is part of KRA’s broader Digital Modernisation Strategy, outlined in its 9th Corporate Plan. The strategy envisions a fully integrated, seamless, and real-time tax administration system.
In line with its digitization drive, KRA has introduced GAVA Connect, an open API platform that enables developers and tech innovators to co-create tax solutions. The platform is aimed at simplifying tax processes and encouraging voluntary compliance.
Additionally, the Authority is piloting the use of Artificial Intelligence (AI) to operate cargo scanners at border entry points—a move expected to enhance inspection efficiency, expedite clearance processes, and improve trade facilitation.“Our focus is to leverage digital technologies to streamline revenue collection while ensuring taxpayer data is protected with the highest standards,” Wattanga added.
