The Kenya Revenue Authority (KRA) has pledged to safeguard the personal data of taxpayers as it accelerates its digital transformation agenda. KRA Commissioner General Humphrey Wattanga reaffirmed the Authority’s commitment to data privacy during a session with the Departmental Committee on Finance and Economic Planning.
Wattanga disclosed that KRA is working closely with the Office of the Data Protection Commissioner (ODPC) to implement a Data Minimisation Strategy, a move aimed at reducing exposure to personal data risks while enhancing system integrity.
“We have already put in place immediate measures to swiftly disable loopholes on our portals that could be maliciously exploited to access personal taxpayer data,” said Wattanga. “Our collaboration with the ODPC aims to ensure that we continuously improve the integrity of our systems, especially with regard to access to third-party data.”
This comes shortly after KRA received the prestigious ISO/IEC 27001:2022 certification for its Information Security Management System—an international standard that underscores the Authority’s compliance with global best practices in data security and public accountability.
Wattanga highlighted that these efforts form part of the KRA’s broader Digital Modernisation Strategy under the Authority’s 9th Corporate Plan. The strategy aims to build a fully integrated, seamless, and real-time tax administration ecosystem.
As part of its digitization efforts, KRA has launched an API platform dubbed GAVA Connect, which allows developers and tech innovators to co-create tax solutions that simplify processes and promote voluntary compliance.
In a bold step toward border efficiency, the Authority is also piloting Artificial Intelligence (AI) in managing cargo scanners at border entry points. The AI-driven initiative is expected to enhance inspection and clearance processes, thereby improving trade facilitation and reducing delays.
“Our focus is to leverage digital technologies to streamline revenue collection while ensuring taxpayer data is protected with the highest standards,” added Wattanga.
As KRA moves forward with its digital transformation, data protection, system integrity, and citizen trust remain central pillars of its tax administration reform.