CA Data Centre Licensing 2026: Regulatory Framework, Cloud Policy Rules & Infrastructure Standards

Technology
Stephen Thumbi
September 11, 2026
0

Kenya is moving to create a clearer regulatory framework for data centres as demand for cloud computing, artificial intelligence, digital services and enterprise technology infrastructure accelerates.

The proposed changes by the Communications Authority of Kenya (CA) could give data-centre operators a dedicated regulatory category instead of placing certain facilities under broader telecommunications licences.

For cloud providers, colocation companies, technology investors and enterprises planning major digital infrastructure projects, the change could become an important part of Kenya’s evolving digital economy.

The CA has proposed a standalone Data Centre licence category for colocation data-centre operators. The Authority says the approach is intended to provide regulatory clarity, improve visibility of data-centre operations and support investment in digital infrastructure. The proposal is currently subject to stakeholder and public consultation.

That means companies planning new facilities should distinguish between the proposed framework and rules that are already legally in force.

What the Proposed CA Data Centre Licence Means

Under Kenya’s previous regulatory approach, commercial data centres could fall within existing telecommunications licensing categories depending on the services and infrastructure they provided.

The CA’s proposed framework seeks to change that.

The Authority says the proposed standalone licence would cover entities providing colocation data-centre services, including associated supporting services.

The development follows a broader review of Kenya’s telecommunications market structure.

The CA’s 2026 market structure contains 19 licence categories across five broad groups and operates under a technology- and service-neutral Unified Licensing Framework.

The proposed data-centre category would therefore give regulators a more direct way of identifying and supervising facilities whose main business is providing secure physical infrastructure for customers’ servers, connectivity and digital systems.

That is increasingly relevant as Kenya attracts investment in cloud computing and artificial intelligence infrastructure.

The Licensing Framework Is Still Being Developed

Businesses should be careful about treating the proposed data-centre licence as a completed regulatory requirement.

The CA’s open consultation notice explicitly describes the framework as a proposal and invites stakeholders to submit comments.

The Authority’s consultation document explains that data centres can range from fully fledged facilities providing space, power, connectivity, cooling, security and computing infrastructure to colocation facilities where customers install and operate their own servers.

The distinction matters because not every company using servers in Kenya necessarily operates a commercial data centre.

A business may simply lease capacity from an existing facility.

A colocation operator, on the other hand, may own and manage the physical facility that hosts equipment belonging to multiple customers.

The proposed licensing approach is primarily concerned with the latter category.

What Operators Should Watch Before Applying

The CA’s existing licensing procedures provide a useful indication of how communications-sector licensing generally works.

Applications typically involve submission of the required forms, payment of the applicable application fee, consideration by the Communications Licensing Committee and, where applicable, publication in the Kenya Gazette before final approval and issuance of a licence.

However, operators should wait for the final data-centre framework and applicable fee schedule before assuming that the same procedure or fee structure will apply to the new category.

The CA’s licensing pages also provide access to licence application forms and fees, which companies can monitor as the framework develops.

For investors, that distinction is important.

A proposed framework can influence project planning, but the final gazetted requirements will determine the actual compliance obligations.

Data Centres Are Becoming Strategic Infrastructure

The regulatory debate comes as data centres become increasingly important to Kenya’s economy.

Financial institutions, telecommunications companies, cloud providers, government agencies, e-commerce businesses and large enterprises all depend on secure computing infrastructure.

The growth of artificial intelligence is adding another layer.

AI applications require significant computing capacity, while cloud services increasingly depend on facilities that can provide high levels of power availability, cooling, connectivity and physical security.

Kenya is therefore trying to position itself as a regional digital hub.

The recent launch of the NBO2 data centre in Nairobi illustrates this trend. The facility was launched in September 2026 and is designed to serve cloud providers, financial services companies, enterprises and internet service providers. The government said the facility would support AI, cloud computing and regional interconnection.

The regulatory framework will consequently need to keep pace with the infrastructure investment.

Cloud Policy Is Driving Demand

Kenya’s Cloud Policy provides another important part of the regulatory picture.

The policy requires covered public-sector entities to prioritise cloud-based solutions when making ICT investments, subject to security, technical, commercial and data-classification requirements.

The policy is intended to encourage:

Greater adoption of cloud computing
Lower ICT infrastructure costs
Stronger cybersecurity
Interoperability between systems
Data residency and sovereignty
Greater use of green cloud technologies

For data-centre investors, this creates an important potential source of demand.

As government agencies and enterprises move more workloads into cloud environments, demand for secure local infrastructure can increase.

However, cloud adoption does not mean every government system must automatically be hosted by a particular provider.

The Cloud Policy links deployment decisions to data classification, technical standards, cybersecurity and commercial requirements.

100,000 Kilometres of Fibre Changes the Investment Equation

Data centres cannot operate effectively without connectivity.

Kenya’s Digital Superhighway programme therefore forms an important part of the broader infrastructure strategy.

The government is pursuing a rollout of 100,000 kilometres of fibre-optic infrastructure, alongside digital hubs and public Wi-Fi.

The Ministry of Information, Communications and the Digital Economy says the programme is intended to expand digital access and connect institutions across the country.

The draft Kenya National Broadband Strategy 2025–2030 similarly identifies expansion of the national fibre backbone by 100,000 kilometres as a major objective.

For data-centre operators, the significance goes beyond consumer internet.

More fibre means greater potential for:

Lower-latency cloud services
Enterprise connectivity
Financial technology infrastructure
Government digital services
AI applications
Content delivery
Disaster recovery
Regional data traffic

The challenge will be ensuring that fibre expansion connects effectively with major data-centre clusters and business centres.

Public Wi-Fi and Digital Hubs Expand the Market

The government’s connectivity strategy is not limited to fibre.

Kenya is also establishing public Wi-Fi hotspots and digital innovation hubs as part of the Digital Superhighway programme.

The Ministry says the national programme includes 25,000 public Wi-Fi hotspots and 1,450 digital innovation hubs.

These projects can increase demand for digital services by bringing more Kenyans online.

More connectivity can mean more demand for online payments, streaming, e-commerce, cloud applications, education platforms, digital government services and remote work.

For technology companies, that creates a larger addressable market.

For data-centre operators, it creates additional demand for the infrastructure sitting behind those services.

The 30% Local Shareholding Rule Is No Longer in Place

One of the most important developments for foreign ICT investors occurred before 2026.

Kenya removed the 30% local shareholding requirement for ICT companies in August 2023.

The change removed a requirement that had previously required licensed ICT companies to maintain substantive Kenyan ownership. The government’s decision was aimed at improving Kenya’s attractiveness as a destination for international ICT investment.

The Kenya investment procedures platform currently states that foreign investors can register and obtain ICT licences without the former 30% local-shareholding requirement.

For cloud and data-centre investors, that is significant.

Building a hyperscale data centre or regional cloud facility requires enormous amounts of capital.

Removing the mandatory local-equity requirement can make it easier for international companies to structure projects according to their global investment models.

That does not mean foreign investors operate outside Kenyan law.

They still need to comply with applicable licensing, tax, data-protection, environmental, construction, employment and other regulatory requirements.

What the Change Means for Cloud Investment

The removal of the ownership requirement could make Kenya more attractive to international cloud providers and infrastructure investors.

A company can establish a Kenyan presence without automatically having to surrender a defined percentage of equity to a local shareholder solely because it is operating in the ICT sector.

That can simplify investment structures.

It can also make large projects easier to finance because parent companies and international investors have greater control over capital deployment.

The policy therefore complements Kenya’s wider ambition to become a regional technology hub.

But ownership flexibility alone will not determine investment decisions.

Companies will still consider electricity costs, reliability, fibre connectivity, land, taxation, data-protection requirements, environmental approvals, security and the speed of regulatory processes.

Power Could Become the Next Major Constraint

Kenya’s digital ambitions are increasingly tied to its ability to provide reliable electricity.

A large data centre can consume significant amounts of power, particularly where high-performance computing and AI workloads are involved.

This means investors will examine not just the availability of electricity but also its reliability, cost and ability to scale as computing requirements increase.

Kenya’s renewable-energy profile gives it an important advantage.

However, the country will need to ensure that major digital infrastructure projects can obtain sufficient capacity without undermining electricity availability for other users.

The data-centre licensing framework therefore sits within a much bigger infrastructure question.

Regulation can determine who is allowed to operate.

Power and fibre will determine whether those operators can compete effectively.

Other Approvals Will Still Matter

A standalone CA licence would not necessarily replace all other approvals required for a data-centre project.

Developers may still have to deal with planning, construction, environmental, electricity, land, county and other regulatory requirements depending on the project.

The CA’s own sector guidelines include Environmental and Social Impact Assessment Guidelines for ICT Projects, illustrating the broader regulatory environment surrounding major ICT infrastructure.

Investors should therefore treat the CA licence as one component of a wider compliance process.

The most efficient project strategy will be to map those approvals before construction begins rather than discover additional requirements after capital has already been committed.

What IT Professionals and Cloud Operators Should Monitor

For companies planning data-centre or cloud investments in Kenya, several developments deserve close attention.

First, the final standalone licence.

The CA will need to conclude its consultation process and publish the final regulatory framework.

Second, licence fees and conditions.

Operators will want clarity on application fees, annual operating charges, licence duration and renewal requirements.

Third, technical standards.

Data centres depend on connectivity, equipment, cybersecurity, physical security, power and environmental controls. The final framework could determine the standards operators are expected to meet.

Fourth, data governance.

Kenya’s evolving data-protection, cybersecurity, cloud and AI policies will increasingly affect how information is stored and processed.

Fifth, infrastructure access.

Fibre and electricity availability will remain fundamental to the commercial viability of new facilities.

What the 2026 Framework Could Mean for Kenya’s Digital Economy

Kenya’s proposed data-centre licensing framework arrives at a crucial moment.

The country wants more cloud computing, artificial intelligence, digital government services and international technology investment.

At the same time, regulators need better visibility over infrastructure that has become central to the economy.

A dedicated licence could therefore provide greater clarity for both sides.

For regulators, it creates a specific mechanism for supervising commercial data-centre operators.

For investors, it could provide clearer rules about what is expected before entering the market.

But the success of the framework will depend on implementation.

If licensing becomes another layer of slow approvals, it could discourage investment.

If it creates a transparent, predictable and proportionate system, it could strengthen Kenya’s position as a regional digital infrastructure hub.

The same principle applies to the country’s fibre and cloud strategies.

The planned 100,000-kilometre fibre expansion, 25,000 public Wi-Fi hotspots and growing data-centre ecosystem could significantly expand Kenya’s digital capacity.

The removal of the former 30% ICT local-shareholding requirement has already made the market more accessible to international investors.

The next step is ensuring that regulation, infrastructure and investment incentives move in the same direction.