**Kenyan Court Halts $1.6 Billion U.S.-Kenya Health Deal Over Data Breach Concerns**
A Kenyan High Court has suspended the implementation of a $1.6 billion health cooperation agreement between Kenya and the United States, citing risks of medical data breaches. The five-year framework, signed on December 4, 2024, aimed to support Kenya’s push for universal health coverage but faced criticism over potential unauthorized transfer of sensitive health data abroad.
On December 11, Justice Bahati Mwamuye issued a conservatory order blocking the Kenyan government and its agents from sharing or disseminating medical, epidemiological, or personal health data under the agreement. The ruling followed a legal challenge by the Consumer Federation of Kenya (COFEK), which argued that the deal lacked public participation and exposed citizens to irreversible privacy violations.
COFEK’s petition warned that once data is transferred, Kenyan regulators would have no authority to oversee or recall it, raising concerns about misuse, stigma, and long-term privacy risks. The court’s decision halts the agreement pending further review.
Source: https://english.news.cn/20251212/b171eed2fb504efab83ae1b0cdb848e9/c.html
TPRM report: https://www.rankiteo.com/company/moh-kenya
"id": "moh1765541477",
"linkid": "moh-kenya",
"type": "Breach",
"date": "12/2025",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"{'affected_entities': [{'customers_affected': 'Kenyan citizens',
'industry': 'Healthcare',
'location': 'Nairobi, Kenya',
'name': 'Government of Kenya',
'type': 'Government'},
{'industry': 'Healthcare/International Cooperation',
'location': 'United States',
'name': 'Government of the United States',
'type': 'Government'}],
'data_breach': {'personally_identifiable_information': 'Yes',
'sensitivity_of_data': 'High (personally identifiable health '
'information)',
'type_of_data_compromised': 'Medical, epidemiological, and '
'sensitive personal health data'},
'date_publicly_disclosed': '2024-12-12',
'description': 'A Kenyan court has suspended the implementation of a '
'1.6-billion-U.S.-dollar health agreement between Kenya and '
'the United States due to concerns over potential medical data '
"breaches. The agreement, aimed at supporting Kenya's "
'universal health coverage, was challenged by the Consumer '
'Federation of Kenya (COFEK) for lack of public participation '
'and risks of irreversible privacy violations.',
'impact': {'brand_reputation_impact': 'Potential reputational damage to '
'Kenyan government and U.S. partners',
'data_compromised': 'Medical, epidemiological, and sensitive '
'personal health data',
'identity_theft_risk': 'Potential misuse of personal health data',
'legal_liabilities': 'Potential legal actions due to privacy '
'violations',
'operational_impact': 'Suspension of health cooperation framework '
'implementation'},
'investigation_status': 'Ongoing (court order issued)',
'motivation': 'Privacy Violation Concerns',
'post_incident_analysis': {'root_causes': 'Lack of public participation in '
'the agreement; absence of '
'oversight for data sharing; '
'potential irreversible privacy '
'violations.'},
'recommendations': 'Ensure public participation and data protection '
'safeguards in international agreements; implement '
'oversight mechanisms for data sharing.',
'references': [{'date_accessed': '2024-12-12', 'source': 'Xinhua'}],
'regulatory_compliance': {'legal_actions': 'Court challenge by Consumer '
'Federation of Kenya (COFEK)',
'regulations_violated': 'Potential violation of '
'data privacy regulations '
'(unspecified)'},
'response': {'containment_measures': 'Court-issued conservatory order '
'suspending data transfer, sharing, or '
'dissemination'},
'title': 'Suspension of Kenya-U.S. Health Agreement Over Medical Data Breach '
'Concerns',
'type': 'Data Breach Concern'}