The Regulatory Landscape for Data Centre Construction in Kenya

Building a data centre in Kenya is not simply a construction project, it is a multi-regulatory undertaking that involves national government agencies, county governments, statutory bodies, and international standards. Unlike commercial office buildings or residential developments, data centres have unique physical requirements: high power density, specialised cooling systems, raised floors, stringent fire suppression, and reinforced structural loads. Kenya's regulatory framework was not designed with data centres specifically in mind, which means operators must navigate a patchwork of general construction, environmental, electrical, and safety regulations while also meeting international data centre design standards.
This article provides a comprehensive breakdown of every major regulatory layer that governs the physical construction of data centres in Kenya, from county-level building approvals to national environmental assessments, electrical codes, fire safety requirements, and occupational health obligations. It also compares Kenya's framework to international benchmarks and offers practical guidance for data centre developers.
County Government Approvals and Building Plans
Nairobi City County
The Nairobi City County Government is the primary approval authority for data centre construction projects within Nairobi, which remains the dominant market for data centre development in Kenya. The county's approval process includes:
- Change of User: If the land is not already zoned for industrial or commercial use, the developer must apply for a change of user to the appropriate zoning classification. Data centres are typically classified under industrial or institutional use, depending on the ownership and operational model.
- Building Plan Approval: Detailed architectural and structural plans must be submitted to the Nairobi City County's Department of Urban Planning for review and approval. The plans must be prepared by a registered architect and structural engineer.
- County Rates and Land Levies: Data centre operators must pay annual county land rates and may be subject to additional levies for large-scale developments.
- Signage and Wayfinding Approvals: External signage for the data centre facility requires separate county approval.
Mombasa County
Mombasa County governs data centre development in Kenya's second-largest data centre market, which is strategically significant due to its proximity to submarine cable landing stations at the Mombasa Marine Cable Landing Station. The Mombasa County approval process is structurally similar to Nairobi's but may involve additional coastal zone management considerations under the Kenya Maritime Authority and National Environment Management Authority (NEMA) coastal zone regulations.
Other Counties
As data centre development extends beyond Nairobi and Mombasa (to locations such as Kisumu, Nakuru, and Machakos) developers must engage with the respective county governments. Each county may have variations in processing timelines, fee structures, and specific local requirements, though the broad framework is consistent under national legislation.
National Construction Authority (NCA) Registration
The National Construction Authority (NCA), established under the National Construction Authority Act, 2011, is the primary regulator of Kenya's construction industry. Any construction project exceeding a prescribed value threshold must be registered with the NCA.
- Project Registration: Data centre construction projects must be registered with the NCA, with the registration category determined by the project's estimated value. Large-scale data centres (particularly those built by hyperscale operators or major colocation providers) typically fall into Category 1 (projects above KES 500 million) or Category 2 (KES 100 million to KES 500 million).
- Contractor Registration: The contractors engaged on the project, including the main contractor, mechanical and electrical (M&E) contractors, and specialist subcontractors, must be registered with the NCA in the appropriate category and trade.
- Site Supervision: The NCA requires that all registered projects have adequate site supervision by registered professionals, including a project manager, resident engineer, and quantity surveyor as applicable.
- NCA Inspections: The Authority conducts periodic site inspections to verify compliance with approved plans, safety standards, and construction quality. Non-compliance can result in stop-work orders.
For developers conducting due diligence on a data centre project, understanding the NCA registration status of the land, the contractor, and the project itself is essential. Our data centre due diligence guide for Kenya covers this in greater detail.
KEBS Standards Applicable to Data Centres
The Kenya Bureau of Standards (KEBS) develops and enforces national standards across a wide range of products and processes. For data centre construction, several KEBS standards are directly relevant:
- KS ISO/IEC 27001: Information security management systems, adopted from the international standard and applicable to data centre operations.
- KS 2468: Electrical installations for buildings, based on IEC 60364, governing the design, installation, and testing of electrical systems in buildings, including data centres.
- KS 530: Code of practice for electrical wiring in buildings, providing specific requirements for wiring, earthing, and circuit protection.
- KS EN 15232: Energy performance of buildings, relevant to data centre energy efficiency assessments.
- KS ISO 50001: Energy management systems, applicable to data centres seeking to formalise their energy management practices.
While KEBS does not have a dedicated data centre construction standard, data centre developers typically adopt international standards such as IEC 60364-5-52 (wiring systems for IT equipment), IEC 61850 (communication networks and systems in substations), and TIA-942 (the telecommunications infrastructure standard for data centres), and then ensure compliance with the applicable KEBS standards that overlap with those requirements.

NEMA Environmental Impact Assessment Requirements
The National Environment Management Authority (NEMA), established under the Environmental Management and Coordination Act (EMCA), 1999, requires that certain categories of development projects undergo an Environmental Impact Assessment (EIA) before construction can commence.
When is an EIA Required for a Data Centre?
Under Kenya's EIA and Audit Regulations, 2003, data centre projects fall under the category of industrial and infrastructure developments. The specific triggers include:
- Projects with a built-up area exceeding a prescribed threshold (typically above 5,000 square metres for industrial developments).
- Projects involving significant power infrastructure, including backup generators, transformers, and UPS systems.
- Projects located in or near environmentally sensitive areas, including wetlands, forests, water catchment areas, or coastal zones.
- Projects that may generate noise pollution from cooling systems and backup generators.
- Projects involving the use or storage of hazardous materials, such as diesel fuel for generators and fire suppression chemicals.
The EIA Process
- Appointment of an EIA Expert: The developer engages a registered Environmental Impact Assessor licensed by NEMA's National Environment Management Authority, Practitioners Institute (NEMAPI-KE).
- Scoping Report: The EIA expert prepares a scoping report identifying the key environmental and social issues associated with the project.
- Full EIA Study: A comprehensive study covering air quality, noise, water, soil, biodiversity, socio-economic impacts, and waste management.
- Public Participation: NEMA requires public consultation with affected communities, including neighbours, local administration, and relevant government agencies.
- EIA Report Submission: The completed report is submitted to NEMA for review.
- NEMA Review and Decision: NEMA reviews the report, may request additional information, and issues either an EIA Licence (approval) or a rejection.
- Environmental Audit: After construction, an annual environmental audit is required to verify ongoing compliance.
For data centres, the EIA process typically addresses noise from cooling plants and generators, emissions from diesel backup systems, stormwater management, thermal discharge, and electromagnetic field (EMF) emissions from electrical equipment.
Fire Safety Codes and Requirements
Fire safety is one of the most critical regulatory areas for data centres, given the high density of electrical equipment, the presence of combustible materials (cabling, insulation), and the catastrophic consequences of a fire in a facility housing critical digital infrastructure.
Kenya Fire Brigade Act (Cap 56)
The Kenya Fire Brigade Act provides the national framework for fire prevention and response. While it is a relatively old piece of legislation, it establishes the principle that building owners are responsible for fire safety in their premises and empowers fire authorities to inspect premises and issue compliance notices.
County Fire Safety By-Laws
Each county government has enacted fire safety by-laws that provide more specific requirements. In Nairobi, the Nairobi City County Fire Safety By-Laws require:
- Installation of fire detection and alarm systems throughout the facility.
- Provision of automatic fire suppression systems, for data centres, this typically means clean agent suppression systems (such as FM-200, Novec 1230, or inert gas systems like IG-541) in the server room and electrical rooms, as water-based sprinklers can cause secondary damage to electronic equipment.
- Fire-rated doors and walls separating the data hall from other areas of the building.
- Emergency evacuation routes, illuminated exit signs, and fire assembly points.
- Fire hydrant connections and standpipe systems for fire brigade access.
- Regular fire safety audits conducted by licensed fire safety consultants.
- Provision of fire extinguishers of appropriate types (CO2 for electrical fires, dry chemical for general areas) at specified intervals.
NFPA 75 and NFPA 76, International Benchmarks
While not legally binding in Kenya, NFPA 75 (Standard for the Fire Protection of Information Technology Equipment) and NFPA 76 (Standard for the Fire Protection of Telecommunications Facilities) are widely adopted by Kenyan data centre operators as supplementary standards. These US-based standards provide detailed requirements for:
- Early warning smoke detection systems (such as VESDA, Very Early Smoke Detection Apparatus) in data halls.
- Compartmentation to contain fire within a single zone.
- Shutdown procedures for HVAC and electrical systems in the event of a fire.
- Cable management practices that reduce flame spread.
Electrical Installation Standards
Data centres are extraordinarily power-intensive facilities, and Kenya's electrical installation standards are directly relevant to their design and construction.
KEBS and IEC Standards
Electrical installations in Kenyan data centres must comply with:
- KS 530 / IEC 60364: The foundational standards for electrical wiring in buildings, covering circuit design, cable sizing, earthing, and protection against electric shock and overcurrent.
- IEC 60364-5-52: Specific requirements for wiring systems in IT and data processing environments.
- KS 2468: Electrical installations for buildings, the Kenyan adoption of general electrical installation standards.
Licensed Electrical Contractors and Engineers
Under the Energy Act, 2019, electrical installation work must be carried out by a licensed electrical contractor and supervised by a registered electrical engineer. Upon completion, the installation must be tested and certified by the contractor, and an electrical installation certificate issued. The Energy and Petroleum Regulatory Authority (EPRA) oversees the licensing of electrical contractors and the enforcement of electrical safety standards.
Power Infrastructure Specific to Data Centres
Data centres in Kenya require:
- Dual utility power feeds from Kenya Power (KPLC), ideally from separate substations for redundancy.
- Backup diesel generators (typically N+1 or 2N redundancy configurations) with adequate fuel storage (subject to NEMA and county fire safety regulations for fuel storage).
- Uninterruptible Power Supply (UPS) systems, battery-based systems that bridge the gap between utility power loss and generator start-up.
- Power Distribution Units (PDUs) and Automatic Transfer Switches (ATS) designed to data centre specifications.
- Earthing and grounding systems designed to handle the high fault currents typical of data centre electrical installations.
Occupational Health and Safety (OSHA, Kenya)

The Occupational Safety and Health Act, 2007 (OSHA, Kenya) and its accompanying regulations establish requirements for workplace safety during both the construction and operational phases of a data centre.
Construction Phase
- Site safety plans must be developed and maintained by the main contractor.
- Personal Protective Equipment (PPE) must be provided to all workers.
- Scaffolding, excavation, and working-at-height safety procedures must be documented and enforced.
- First aid facilities and trained first aiders must be available on site.
- Accident reporting to the Directorate of Occupational Safety and Health Services (DOSHS) is mandatory for any workplace injury or fatality.
Operational Phase
- Data centre operators must conduct regular workplace risk assessments covering electrical hazards, noise exposure (from cooling and generator systems), chemical handling (diesel, fire suppression agents), and ergonomic risks.
- Safety training must be provided to all data centre staff, including emergency response procedures.
- Safety committees are required for workplaces with more than 20 employees.
- Incident reporting to DOSHS is mandatory for workplace injuries, illnesses, and dangerous occurrences.
Kenya Building Code and Zoning Considerations
The Kenya Building Code, based on the British Standard BS 8110 (structural) and other international codes, provides the baseline requirements for building construction in Kenya. For data centres, several elements of the Building Code are particularly relevant:
Zoning
Data centres must be located in zones where industrial or commercial activities are permitted. The key zoning considerations include:
- Industrial zones (typically preferred for data centres) allow for high-power installations, generator operations, and 24-hour activity.
- Commercial zones may also permit data centres but may have restrictions on noise levels, hours of operation, and the size of backup generator installations.
- Residential zones generally do not permit data centre development due to noise, traffic, and power infrastructure concerns.
Setback Requirements
The Kenya Building Code and county by-laws specify setback distances from property boundaries, roads, and neighbouring buildings. For data centres, which often require large footprints, setback requirements can significantly affect the usable land area. Typical setback requirements in Nairobi include:
- Front setback: 6 to 9 metres from the road.
- Side setbacks: 3 to 6 metres from side boundaries.
- Rear setback: 3 to 6 metres from the rear boundary.
Structural Requirements
Data centres impose exceptional floor loads due to the weight of server racks, UPS systems, and transformers. The structural design must accommodate:
- Raised floor loads of 10–15 kN/m² or higher (compared to 2–3 kN/m² for typical office buildings).
- Equipment room floor loads for heavy transformers and generators.
- Seismic considerations, particularly for facilities in Nairobi, which lies in a moderate seismic zone.
Approval Timeline: What to Expect

The total timeline for obtaining all necessary approvals to build a data centre in Kenya typically ranges from 6 to 18 months, depending on:
| Approval Stage | Typical Duration | Key Authority |
|---|---|---|
| Land search and due diligence | 2–4 weeks | Ministry of Lands |
| Change of user (if required) | 2–6 months | County Government |
| Building plan approval | 2–4 months | County Government |
| NCA project registration | 2–4 weeks | NCA |
| NEMA EIA process | 3–6 months | NEMA |
| Fire safety clearance | 1–2 months | County Fire Brigade |
| Electrical installation approval | Ongoing (during construction) | EPRA |
| Occupancy certificate | 2–4 weeks | County Government |
Developers should plan for parallel processing where possible, for example, initiating the NEMA EIA process concurrently with building plan submissions. However, the NEMA EIA licence and the county building plan approval are typically both required before construction can commence.
Our Kenya data centre licensing framework article provides additional detail on the broader licensing landscape beyond physical construction approvals.
Comparison with International Standards
Uptime Institute Tier Requirements
The Uptime Institute's Tier Classification System (Tier I through Tier IV) is the global benchmark for data centre reliability and redundancy. Kenya's building codes do not directly reference Tier classifications, but most commercial data centre operators in Kenya design to at least Tier III standards (concurrently maintainable infrastructure). Achieving Uptime Institute certification requires meeting specific requirements for:
- Redundant power and cooling distribution paths.
- Concurrent maintainability, the ability to remove any single component for maintenance without disrupting operations.
- Fault tolerance (Tier IV), the ability to withstand any single failure without impact to IT operations.
Kenyan building codes ensure structural safety and basic fire protection, but they do not address the specific redundancy, cooling, and electrical distribution requirements that define Tier classifications. Data centre operators must therefore self-impose these international standards and ensure their designs are compatible with local code requirements.
Our data centre tier ratings explained article provides a full breakdown of each tier level.
NFPA 75/76 (US Fire Codes)
As discussed in the fire safety section, NFPA 75 and NFPA 76 provide detailed fire protection requirements specific to IT and telecommunications facilities. Kenya's fire safety codes are less specific and do not address data centre fire scenarios in detail. Kenyan data centre operators that adopt NFPA standards must ensure that their clean agent suppression systems, VESDA detection, and fire-rated compartmentation also satisfy the requirements of the Kenya Fire Brigade Act and county by-laws, which may include additional provisions not covered by NFPA.
EU Code of Conduct on Data Centre Energy Efficiency
The EU Code of Conduct on Data Centre Energy Efficiency is a voluntary framework that sets best-practice guidelines for energy-efficient data centre design and operation. While developed for the European market, its principles, including Power Usage Effectiveness (PUE) targets, airflow management, free cooling utilisation, and waste heat recovery, are increasingly relevant to Kenyan data centres. Kenya's building codes do not prescribe specific energy efficiency targets for data centres, but the Kenya Bureau of Standards (KEBS) has adopted energy management standards (KS ISO 50001) that data centres can leverage to formalise their energy efficiency programmes.

Practical Recommendations for Data Centre Developers
For organisations planning to build or expand data centre capacity in Kenya, the following practical recommendations can streamline the regulatory process:
- Engage early with county authorities: Initiate pre-application consultations with the relevant county planning department before submitting formal applications. This can identify potential issues before they become costly delays.
- Hire locally registered professionals: Ensure your architect, structural engineer, electrical engineer, and EIA expert are all registered with their respective Kenyan professional bodies (Architectural Association of Kenya, Engineers Board of Kenya, NEMAPI-KE).
- Adopt international standards proactively: Designing to Uptime Institute Tier, TIA-942, and NFPA standards from the outset (and documenting compliance) will make the local approval process smoother and build credibility with clients.
- Parallel the NEMA EIA process: Start the EIA early, even before building plans are finalised, to avoid it becoming a bottleneck.
- Budget for compliance costs: Regulatory compliance (including NCA fees, NEMA EIA fees, county approval charges, fire safety consulting, and electrical testing) can add 2–5% to total project cost.
- Plan for ongoing compliance: Post-construction obligations include annual environmental audits, fire safety inspections, electrical installation renewals, and OSHA workplace safety compliance.
Conclusion
Kenya's regulatory framework for data centre construction is multi-layered, involving county governments, the National Construction Authority, NEMA, KEBS, fire authorities, and occupational safety bodies. While the framework was not designed specifically for data centres (and this creates some friction) it provides a comprehensive baseline of safety, environmental, and quality assurance requirements. Successful data centre developers in Kenya are those who combine international design standards (Uptime Institute, TIA-942, NFPA) with diligent local regulatory compliance, engaging early and consistently with the relevant authorities throughout the project lifecycle.
As Kenya's data centre market continues to grow, there is increasing advocacy for a more data-centre-specific regulatory framework that would streamline approvals, provide clearer technical standards, and reduce the current reliance on general construction codes. Until such a framework emerges, operators must navigate the existing system with thorough preparation and expert guidance.
Frequently Asked Questions
What approvals are required to build a data centre in Nairobi?
Building a data centre in Nairobi requires multiple approvals: a change of user and building plan approval from Nairobi City County, registration of the project with the National Construction Authority (NCA), an Environmental Impact Assessment (EIA) licence from NEMA, fire safety clearance from the Nairobi County Fire Brigade, electrical installation certification from a licensed electrical engineer under KEBS standards, and occupational health and safety registration with the Directorate of Occupational Safety and Health Services (DOSHS). The process typically takes 6 to 18 months depending on project scale and location.
Does Kenya have specific building codes for data centres?
Kenya does not have a dedicated building code exclusively for data centres. Instead, data centre construction is governed by the general Kenya Building Code, county government by-laws, and applicable Kenyan standards from KEBS. However, data centre operators typically design and build to international standards such as the Uptime Institute's Tier I–IV classifications, TIA-942 (Telecommunications Infrastructure Standard for Data Centres), and NFPA 75/76 (US fire protection standards for IT equipment), and then ensure compliance with Kenyan requirements on top of those international benchmarks.
What fire safety regulations apply to data centres in Kenya?
Data centres in Kenya must comply with the Kenya Fire Brigade Act (Cap 56), county government fire safety by-laws, and the Kenya Building Code's fire safety provisions. Key requirements include fire detection and alarm systems, automatic suppression systems (such as clean agent systems using FM-200 or Novec 1230, which are safe for electronic equipment), fire-rated structural elements, emergency evacuation routes, fire hydrant connections, and regular fire safety audits. For data centres pursuing international certification, NFPA 75 (Standard for the Fire Protection of Information Technology Equipment) and NFPA 76 (Standard for the Fire Protection of Telecommunications Facilities) are commonly adopted as supplementary standards.
How long does the NEMA EIA process take for a data centre project?
The NEMA Environmental Impact Assessment process for a data centre typically takes 3 to 6 months, though the timeline can vary based on project complexity, location sensitivity, and the completeness of the EIA report. The process involves engaging a registered Environmental Impact Assessor (EIA/EA expert), conducting environmental and social impact studies, preparing the EIA report, submitting it to NEMA for review, addressing any comments or requests for additional information, and attending a public hearing if required. For data centres located in sensitive zones (such as near water bodies, protected areas, or residential neighbourhoods) the review process may be extended. NEMA charges EIA review fees based on project capital cost, and data centres, given their significant power and cooling requirements, are generally classified as medium to high-impact projects.
How do Kenya's building regulations compare to international data centre standards?
Kenya's building regulations provide a baseline of structural safety, fire protection, electrical safety, and environmental compliance, but they do not address the specific operational requirements of data centres, such as redundant power, cooling capacity, raised access flooring, seismic resilience of server racks, or concurrent maintainability. International standards such as the Uptime Institute's Tier Classification System (Tier I through Tier IV), TIA-942, and the EU Code of Conduct on Data Centre Energy Efficiency provide the specialised technical framework that data centre operators actually design to. In practice, Kenyan data centre developers adopt these international standards and then layer on local regulatory compliance. The challenge is that Kenya's building code and approval processes were not designed with data centres in mind, which can create friction, for example, building inspectors may not be familiar with raised-floor ventilation requirements or clean agent fire suppression systems.
