English-Language BossBot Guides for Kenya (en-KE)

Do I need to register with the ODPC as a Kenyan SME using WhatsApp for customer communication?

Registration with the Office of the Data Protection Commissioner (ODPC) as a data controller or processor is required under the Kenya Data Protection Act 2019 for entities meeting specified thresholds. The ODPC has published guidance and category-specific registration requirements (mandatory registration applies to entities in certain categories or above certain size). Check odpc.go.ke for current registration guidance. Even without mandatory registration, Kenyan SMEs using WhatsApp for customer data are bound by the Act's substantive obligations: privacy notice, lawful basis, data subject rights response within the statutory timeline, breach notification within 72 hours, cross-border transfer safeguards. Penalties reach KES 5 million or 1% of annual turnover.

How do Kenyan SMEs collect payment for WhatsApp-driven commerce?

M-PESA is the dominant payment rail — Safaricom's M-PESA Business (Paybill or Till Number) is the mainstream method for SME collection. Cards via DPO Group, Pesapal, Flutterwave Kenya (licensed 2020), Cellulant, iPay, Pesaflow, JamboPay. Bank-transfer via PesaLink instant transfer between Kenyan banks. Card-not-present via Stripe (via Stripe partners) or via international gateways for USD-invoicing tourism / export businesses. The dominant WhatsApp-commerce workflow is: customer messages, agent qualifies, payment link (M-PESA Express STK Push, or card link via Pesapal/DPO/Flutterwave), M-PESA receipt confirmation, KRA eTIMS invoice.

What is KRA eTIMS and how does it affect WhatsApp-based invoicing?

eTIMS (electronic Tax Invoice Management System) is Kenya Revenue Authority's mandatory e-invoicing system for VAT-registered businesses. Since 2024 all VAT-registered businesses must issue tax invoices via KRA-approved eTIMS options: eTIMS Client (desktop app), eTIMS Online Portal, eTIMS Mobile App, or eTIMS System-to-System integration for larger businesses. VAT threshold: KES 5 million annual turnover triggers mandatory VAT registration. For a Kenyan SME running WhatsApp commerce: the payment collection can happen via M-PESA or card, but the invoice must be issued via eTIMS with buyer PIN captured for B2B or as walk-in for B2C. Modern accounting SaaS in Kenya (Sage, QuickBooks Kenya, Zoho Books, Wave) integrate with eTIMS.

Is WhatsApp for customer marketing compliant under Kenyan law?

Direct marketing via WhatsApp to Kenyan customers requires: (a) lawful basis under Data Protection Act 2019 — typically consent for marketing to new prospects, legitimate interest with soft opt-in for existing customers; (b) clear opt-out mechanism in every marketing message; (c) respect for the customer's channel preference. The CA of Kenya (CAK) has issued guidance on SMS/USSD marketing which is often applied by analogy to WhatsApp. Meta's own WhatsApp Business Policy prohibits unsolicited marketing to users who have not opted in — violations can result in template rejection or account restriction. Best practice: opt-in at first purchase or engagement, granular consent options for marketing vs service messages, prompt honouring of opt-out.

What Kenyan cities and languages matter for WhatsApp commerce?

Kenya's WhatsApp-commerce activity concentrates in Nairobi (Konza / Silicon Savannah tech cluster, Westlands, CBD, Karen, Kilimani, Lavington), Mombasa (coastal tourism and trade), Kisumu (western lakeside hub), Nakuru (agri and services), Eldoret (agri and university), Thika (industrial adjacent to Nairobi), and Malindi (coastal tourism). Language: English is dominant in customer-facing SME communication; Swahili (Kiswahili) common alongside English particularly in Mombasa and coastal / cross-border trade with Tanzania. Regional languages (Kikuyu, Luo, Kamba, Kalenjin, Kisii, Meru, Luhya) matter for hyperlocal SMEs. Bilingual English + Swahili WhatsApp reply pools are standard for national-reach SMEs.