Building a Regulatory Intelligence System for Medical Devices in Kenya

Content verification date: October 30, 2026

1. Key takeaways

• The density of regulatory change in Kenya rose sharply between 2024 and 2026, and single-point memory is no longer reliable. What companies need is not one more list but a six-item compliance ledger: classification, pathways, certificates, retention, vigilance and traceability.
• Tracking sources must be tiered. Tier one is the Kenya Gazette and the Parliament of Kenya website, deciding entry into force of written law and institutional change; tier two is PPB guidelines and forms, deciding operational positions; tier three is public statements by the Ministry of Health and PPB, which are practical estimates and must be labelled.
• Three dates form the tightest current timeline: October 31, 2026 is the onboarding deadline for the three platforms (non-extendable, non-negotiable), January 1, 2027 is both the full serialisation date and the review date of Guideline HPT/PER/HTR/GUD/011, and September 2026 is the WHO Global Benchmarking Tool (GBT) evaluation milestone.
• The ledger must reach certificate and retention continuity: registration certificates are valid for 5 years from the date of issue, and where a renewal application is filed before expiry the certificate remains valid until PPB decides; annual retention must be handled each year on Form 4, with submission opening 60 days before the due date.
• The final link is the vigilance and traceability loop: the six Article 7 obligations and batch-level traceability share one set of distribution records and should not be built twice.

2. Legal basis

3. Expert insights

Insight 1: the six-item ledger is classified by consequence of failure, not by business process

GRZAN splits Kenyan compliance into six items, classified not by process sequence but by the severity of the consequence of failure. Get classification wrong and every pathway is wrong; choose the wrong pathway and fees are lost and time sinks; let the certificate lapse and the product loses market eligibility; miss the retention payment and suspension and revocation follow directly; fail in vigilance and the Form 5 notice of intent procedure begins; fail to onboard for traceability and 2027 practice and premises licences are blocked. Reversibility declines in sequence: the first three can be remedied, the last three usually carry a public record once triggered. The ledger value lies in making the three least reversible items, retention, vigilance and traceability, high-frequency review items.

Insight 2: tiering sources in three levels prevents mistaking statements for law

Kenya’s information environment has one feature: major changes often appear first as conference statements, with formal documents months later. The launch dates of the three platforms are the example: the Ministry of Health stated on June 24, 2026 that operation would start on July 1, while the PPB chair stated on July 30 that the official launch was August 3. GRZAN tiers sources and labels them by force: Gazette and Parliament are tier one, supporting legal conclusions; PPB guidelines and forms are tier two, supporting operational positions; public statements are tier three, always marked as practical estimates, with the date and issuing body recorded for later replacement when a formal document appears. This lets companies locate the point of conflict quickly when a statement and the law diverge.

Insight 3: three overlapping dates create combined pressure, so schedule them together

From late 2026 into early 2027, three events stack up in Kenya: the three-platform onboarding deadline of October 31, 2026, non-extendable; full serialisation effective on January 1, 2027; and the review of Guideline HPT/PER/HTR/GUD/011 on January 1, 2027. GRZAN notes a review date usually means positions may change, and the serialisation switch falls exactly on it, compounding operational uncertainty. Treat Q4 2026 as the transformation window: complete batch master data, packaging coding and entity onboarding by end December, and confine 2027 work to the serialisation switch and responding to the revised guideline.

Insight 4: the continuation effect of renewal is the hidden point of ledger design

Rule 10(2) of LN 100 of 2022 provides that where a renewal application is filed before expiry, the certificate remains valid until PPB decides. This clause favours companies but requires filing before expiry. GRZAN therefore sets the ledger rule: start renewal at least 6 months before certificate expiry, not in the expiry month. Rule 9 requires the renewal dossier to include vigilance and product safety reports, non-clinical and clinical study reports, changes and quality reviews, with retention fees paid in full; these take time to compile. Miss the pre-expiry point and the continuation effect no longer applies, leaving the product without a valid certificate.

4. Practical recommendations

1. Build the six-item ledger with named owners and review frequencies. GRZAN recommends quarterly review of retention, vigilance and traceability, and half-yearly review of classification, pathways and certificates.
2. Assign source subscriptions to named people. Designate staff to track the Kenya Gazette, Parliament of Kenya website and PPB announcements, updating the ledger within 48 hours of receipt.
3. Label statement-type information separately. Add a source-level column to the ledger marking written law, guideline or public statement, noting the issuing body and date.
4. Set rolling reminders for the three dates. For October 31, 2026, December 31, 2026 and January 1, 2027, set dual reminders 90 days and 30 days ahead.
5. Move the renewal start date to 6 months before expiry. Compile retention payment receipts, vigilance and product safety reports and change records in parallel.
6. Use one set of distribution records for everything. Capture the Article 7 distribution records, GSDP batch records and traceability batch data together, avoiding three duplicated ledgers.

5. Verification checklist

• □ Is the six-item ledger (classification, pathways, certificates, retention, vigilance, traceability) built with named owners?
• □ Are retention, vigilance and traceability set as quarterly review items?
• □ Are subscriptions to the Kenya Gazette, the Parliament of Kenya website and PPB announcements assigned to named people?
• □ Does the ledger have a source-level column distinguishing written law, guideline and public statement?
• □ Are dual reminders set for October 31, 2026, December 31, 2026 and January 1, 2027?
• □ Is the renewal start date set 6 months before certificate expiry?
• □ Are distribution records, GSDP batch records and traceability batch data merged into one set?
• □ Does every conclusion carry a verification date, with unlocatable figures marked as practical estimates?

Regulatory information verified as of October 30, 2026.

In African markets, the GRZAN regulatory team focuses on Kenya, Nigeria, South Africa and Egypt and verifies every published regulatory conclusion against official gazettes, competent authority guidelines and public legal databases, with the verification date marked; figures, cycles and amounts not locatable in official sources are marked as practical estimates, not presumed.

GRZAN services cover market access strategy and risk classification; preparation and review of dossiers in CSDT, STED and CTD formats; selection and management of Local Authorized Representatives (LAR); QMS and GMP/GSDP compliance support; post-market vigilance, change management and recall response; import clearance and PVoC coordination; regulatory intelligence subscriptions and compliance ledgers.

For building a Kenya regulatory intelligence system, compliance ledgers and change monitoring, contact the GRZAN regulatory team at info@grzanglobal.com.