Key points
- 78.3% of Nairobi City residents aged three and over used a mobile phone at the 2019 census, the highest share of any county.1
- Entities providing patient care must register with the ODPC regardless of turnover or staff numbers.3
- The ODPC's health guidance asks for breach reports within 72 hours and for patient data to be stored and processed in Kenya except in limited cases.2
- The Digital Health Act 2023 calls health data a strategic national asset and limits sharing personal health information outside Kenya to health tourism.4
- wai keeps each Nairobi clinic's records in Kenya, and the doctor signs every note.
Summary
A Nairobi clinic can use AI for notes and patient messages under the Data Protection Act 2019 and the Digital Health Act 2023. Patient care providers register with the ODPC whatever their size, health data stays in Kenya except in limited cases, and with wai a person approves every reply and the doctor signs every note.
Every message from Westlands or Kilimani answered the evening it arrives, and every note signed before the clinic closes. At the 2019 census, 78.3% of Nairobi residents aged three and over used a mobile phone, so the evening message is where the booking starts.1
See it in your clinicThirty minutes on your own patients and doctors.
Request a demoSee a Kiswahili message from a Nairobi family become an approved booking with a deposit in shillings, in fifteen minutes with a clinician who uses wai daily.
| Body or law | Rule | What to ask | How wai meets it |
|---|---|---|---|
| KMPDC | Practitioners and facilities registered and licensed each year | Is every licence current | The licensed doctor edits and signs every note |
| Data Protection Act 2019, registration | Patient care providers register with the ODPC at any size | Is the clinic on the ODPC register | Event log available to the clinic's data protection officer |
| ODPC health guidance | Breach reported within 72 hours, patients told in writing | Who reports, and how fast | Every message, draft and approval logged and exportable |
| ODPC health guidance, localisation | Data stored and processed in Kenya except in limited cases | Which country holds every copy | Records hosted in Kenya, set up with the clinic |
| Digital Health Act 2023, section 47 | Health information shared abroad only for health tourism | Does any record leave Kenya | Records stay in Kenya |
The private care market in Nairobi
Nairobi City County leads Kenya on connectivity. At the 2019 census, 78.3% of residents aged three and over used a mobile phone, 69.2% owned one and 52.5% used the internet, the highest shares of any county.1 28.6% used a computer, tablet or laptop, against 10.7% nationally.1
Nairobi residents also buy online more than anyone else in the country. 14.0% of those aged 15 and over had bought goods or services online, against 4.3% across Kenya.1
The rules a clinic in Nairobi works under
The Kenya Medical Practitioners and Dentists Council registers and licenses every medical and dental practitioner and every health facility in the country, and its registers show whether a doctor or facility is licensed for the current year.5
The Data Protection Act 2019 is overseen by the Office of the Data Protection Commissioner.6 Its registration rules require entities processing personal data for health administration and patient care to register whatever their turnover or headcount.3 The ODPC's health guidance asks for retention schedules, regular data protection impact assessments and breach reports within 72 hours, with affected patients told in writing.2
The same guidance says personal data is to be stored and processed in Kenya except in limited circumstances, such as the patient's explicit consent or adequate protection in the receiving country.2 The Digital Health Act 2023 calls health data a strategic national asset and allows personal health information to be shared outside Kenya only for health tourism.4
wai hosts each clinic's records in its own country, under that country's rules. We set this up with your clinic. wai is compliant with these rules and built for clinics in Nairobi. Each draft, approval and signature lands in an exportable event log, ready for a breach review.7
The languages Nairobi patients write in
Kiswahili is Kenya's national language, Kiswahili and English are its official languages, and the State is bound to promote the country's indigenous languages.8
wai works in any language. A patient in Eastlands can answer intake questions by voice in Kiswahili or Dholuo, and the doctor reads the answers in English before the visit.9
What a demo shows in Nairobi
A WhatsApp message in Kiswahili arrives at 22:10 from a father in Kasarani asking whether his son's asthma review can happen on Saturday morning. wai keeps it in the family's thread, reads the doctor's busy times from Google Calendar, Outlook or Apple Calendar, and drafts a Kiswahili reply with the two earliest open times. Reception approves it at 7:30.
The booking link takes a deposit in shillings by card through the clinic's own Stripe account, and the family receives a confirmation, a receipt and an intake questionnaire.10 At the visit wai drafts the note, the doctor edits and signs it, and the claim for the family's insurer is prepared from the signed note for the team to check.
For health systems, government and insurers in Nairobi
County health services, hospital groups and insurers in Nairobi can commission a system built on wai for one pathway, such as asthma or diabetes follow-up, with records hosted in Kenya and data, configuration and model rights agreed in the contract, as the organisations page sets out. The Digital Health Agency's duty under the Act to build shareable, portable personal health records sets the standards that work follows.4
Where to start
First, confirm the clinic's registration with the ODPC, which applies to every patient care provider.3 Second, check every doctor and the facility itself on the KMPDC registers for the current year.5
Third, write a retention schedule and a 72-hour breach routine from the ODPC health guidance.2 Fourth, count last month's WhatsApp messages and missed calls by hour, then book a Nairobi demo and bring that count. One inbox for clinic messages shows how the threads come together.
Send us a week of Nairobi messages by language and hour, and see the drafts your reception would approve before 8:00.
Frequently asked questions
Must a small Nairobi clinic register with the ODPC?
Yes. Entities processing personal data for health administration and patient care must register regardless of turnover or staff numbers.3
Can patient data leave Kenya?
What does the Digital Health Act mean for a private clinic?
It treats health data as a strategic national asset and sets up a Digital Health Agency to run the national health information system and portable personal health records.4
Who licenses doctors and clinics in Nairobi?
The Kenya Medical Practitioners and Dentists Council registers and licenses practitioners and health facilities.5
How fast must a breach be reported?
Within 72 hours of becoming aware of it, with affected patients informed in writing.2
Does wai reply to patients in Kiswahili on its own?
wai works in any language and drafts the reply in Kiswahili, and a person at the clinic approves it before it sends.9
Sources
- 1Kenya National Bureau of Statistics, 20192019 Kenya Population and Housing Census, Atlas, Information and Communication TechnologyRead 15 October 2026Read source
- 2Office of the Data Protection Commissioner, 2024Guidance Note on the Processing of Health DataRead 15 October 2026Read source
- 3Office of the Data Protection Commissioner, 2022Guidance Note on Registration of Data Controllers and Data ProcessorsRead 15 October 2026Read source
- 4Kenya Law, 2023Digital Health Act, Act No. 15 of 2023Read 15 October 2026Read source
- 5KMPDC, 2026Kenya Medical Practitioners and Dentists Council, home pageRead 15 October 2026Read source
- 6ODPC, 2026Office of the Data Protection Commissioner, home pageRead 15 October 2026Read source
- 7wai, 2026Security at waiRead 15 October 2026Read source
- 8Kenya Law, 2010Constitution of Kenya 2010, Article 7Read 15 October 2026Read source
- 9wai, 2026wai changelog, intake answered by voice in any languageRead 15 October 2026Read source
- 10Stripe, 2026Stripe global availability, supported countriesRead 15 October 2026Read source
Every Nairobi family answered the evening they write, every note signed before closing.
Fifteen minutes with a clinician who uses wai daily, on your own messages and diary. We reply within one working day.
Partner with us
See it on your own patients, then build it with us
Thirty minutes on your own patients, doctors and rules, in your market. We reply within one working day, and the clinics that partner with us early shape what we build next.
See what wai does between the visits

