Kenya Premises Licensing and GSDP: Risk-Based Inspection and Traceability

Content verified on: October 30, 2026

1. Key takeaways

• On October 30, 2025, PPB adopted a risk-based inspection framework anchored on WHO standards, applying equally to wholesalers, community pharmacies and hospital pharmacies (this framework information comes from public reporting and is a practical estimate).
• Kenya fully implements Good Storage and Distribution Practice (GSDP); warehousing and distribution operations must build and maintain a system under this practice.
• PPB is pursuing WHO Maturity Level 3 (ML3) and preparing for a WHO Global Benchmarking Tool (GBT) evaluation in September 2026.
• Enforcement intensity is rising: intelligence-led operations have arrested more than 95 illegal operators, and regulatory and disciplinary measures have been taken against 22 wholesale businesses suspected of supplying illegal outlets; legacy unregistered products have been removed from the formal register (the above figures come from public reporting and are a practical estimate).
• Traceability connection: the National Authentication and Traceability System together with Practice360 and Facility360 went live on August 3, 2026, with an onboarding deadline of October 31, 2026; those who fail to onboard will not be issued 2027 practising and premises licences.

2. Legal basis

3. Expert insights

Insight 1: Risk-based inspection shifts inspection resources from uniform effort to risk weighting

A risk-based inspection framework anchored on WHO standards means that inspection frequency and depth will be linked to the risk class of the products a business handles and to its compliance history. GRZAN judges that wholesalers carrying Class C/D devices such as orthopaedic implants or cardiovascular intervention devices will face noticeably deeper sampling than entities handling only Class A consumables. Businesses should recalibrate their self-inspection frequency accordingly rather than keeping a uniform annual self-check rhythm across the whole portfolio.

Insight 2: The GSDP review focus is shifting from having documents to having data

The quality manuals, procedures and declarations required by the guideline system are static evidence; once risk-based inspection combines with GSDP, the review focus moves to dynamic data — continuous temperature and humidity monitoring records, closed-loop handling of deviations and excursions, batch-level receipt-and-issue ledgers, and transport validation and excursion records. GRZAN recommends organising warehouse data as an evidence chain searchable by batch number, because once the traceability system is live, batch-level data becomes the direct handle inspectors pull.

Insight 3: Enforcement data show compliance responsibility extending upstream along the supply chain

Measures against 22 wholesale businesses suspected of supplying illegal outlets, together with the arrest of more than 95 illegal operators, point not at the end outlets but at their upstream suppliers. GRZAN notes that wholesalers must therefore substantively verify and document the qualifications of their downstream customers; claiming ignorance is not a defence. At the same time, legacy unregistered products have been removed from the register, leaving no room for supply arrangements that rely on historical legacy certificates.

Insight 4: Premises licensing and traceability onboarding are now hard-linked

The onboarding deadline is October 31, 2026, expressly non-extendable and non-negotiable, and those who fail to onboard will not be issued 2027 practising and premises licences. GRZAN judges that for establishments, the priority of traceability onboarding should now equal that of premises licence renewal itself, because the two have been bound together procedurally. The detailed onboarding requirements and interface specifications must follow PPB’s subsequent formal notices (a practical estimate).

4. Practical recommendations

1. Run a risk self-assessment. GRZAN recommends self-assessing the premises against the A/B/C/D classes of the products handled, and setting self-inspection frequency and sampling ratios from that result.
2. Upgrade temperature and humidity monitoring. Establish continuous monitoring with excursion alarms; every excursion needs a record, an assessment and a disposition conclusion, closing the loop.
3. Keep batch-level ledgers. Refine receipt-and-issue ledgers to batch number so that forward and backward traceability by batch works live during an inspection.
4. Verify downstream qualifications. Build a customer-qualification verification checklist with documented evidence, and stop supplying unlicensed outlets without exception.
5. Complete traceability onboarding. Finish system onboarding before October 31, 2026 and keep the onboarding confirmation.
6. Align with WHO standards. Bring internal inspection checklists toward the relevant WHO standards, leaving headroom for the inspection upgrades expected after PPB’s push to ML3 and the September 2026 GBT evaluation.

5. Verification checklist

• □ Has a premises risk self-assessment been completed against the risk classes of the products handled?
• □ Is warehouse temperature and humidity continuously monitored, with closed-loop excursion records retained?
• □ Are receipt-and-issue ledgers refined to batch number and capable of two-way traceability?
• □ Is a downstream customer-qualification checklist with documented evidence in place?
• □ Was traceability system onboarding completed before October 31, 2026 with a confirmation obtained?
• □ Has a GSDP item-by-item compliance self-check of the premises been completed?
• □ Are separate reminders set for the expiry dates of the establishment registration certificate and the premises licence?
• □ Is a remediation window reserved for stricter inspections after WHO ML3 and the September 2026 GBT evaluation?

Regulatory information verified as of October 30, 2026.

In African markets, the GRZAN regulatory team focuses on jurisdictions such as Kenya, Nigeria, South Africa and Egypt and runs a verification mechanism built on primary regulatory sources: every regulatory conclusion it publishes relies solely on official gazettes, the original texts of regulator guidelines and public legal databases, each marked with a verification date. Any figure, timeline or amount that cannot be located in an official source is flagged as a practical estimate rather than an assumption.

GRZAN services cover: market access strategy and risk-classification assessment; preparation and review of registration dossiers (CSDT, STED and CTD formats); selection and management of Local Authorized Representatives (LAR); quality management system and GMP/GSDP compliance coaching; post-market vigilance, change management and recall response; import customs clearance and PVoC coordination; regulatory intelligence subscriptions and corporate compliance ledgers.

For a Kenya market access plan tailored to a specific product, contact the GRZAN regulatory team at info@grzanglobal.com.