{ "schemaVersion": "0.2-policy", "datasetVersion": "policy-2026-Q3-r16", "generatedAt": "2026-09-26", "researchQuestion": "What policy and regulatory frameworks govern data-centre development and operation across Kenya, Uganda, Rwanda and Tanzania, and where are the material differences?", "method": "evidence-first: one claim = one verifiable statement, each tied to tiered sources; the article is the interpretation layer built only after editor review", "humanGate": { "rule": "AI never establishes facts or publishes; the editor reviews every claim before any public use", "status": "EDITORIAL REVIEW COMPLETE (Uganda, Rwanda, Tanzania, Kenya - all four country pipelines approved for publication)", "reviewedBy": "Editor, DataCentre254 (rulings on the three review questions delegated to the agent, 2026-09-22)", "reviewedAt": "2026-09-22", "scope": "Uganda reviewed 2026-09-22 (rulings on LC-C3 publication, DP-C4 structure, pillar-gaps convention). Rwanda (r3), Tanzania (r4) and Kenya (r8) reviewed 2026-09-22 by the editor via standing full delegation recorded in the editorial session (\"full authority... approved as long as you are in agreement\"): agent re-reviewed all 26 claims against source tiers and capture states, found state assignments conservative (snippet-only sources held at partially-verified; every verified claim rests on captured Tier-1/Tier-2 instrument text), and approved publication without state changes. Nothing publishes outside the 5-state vocabulary; upgrade paths remain live for capture-pending sources. Kenya (r8) reviewed 2026-09-22 by the editor via the same standing delegation: agent re-reviewed all 13 claims against captured regulator operations (ODPC live register, SEZA, KenInvest eProcedures, EPRA, NEMA, ministry pages), held every statute-rate and negative/localisation claim at partially-verified pending Kenya Law text captures, and approved publication.", "rulings": { "uganda": "approved 2026-09-22 (r2 delegated rulings applied)", "rwanda": "approved 2026-09-22 (delegated review, no state changes; RW-DP-C6 stays partially-verified pending full-text capture of NCSA deadline notice)", "tanzania": "approved 2026-09-22 (delegated review, no state changes; TZ-LC-C2, TZ-EN-C1, TZ-ENV-C1 stay partially-verified with documented upgrade paths)", "kenya": "approved 2026-09-22 (delegated review; 9 verified from T1 regulator captures, 4 partially-verified pending statute text; construction-building recorded as a structured gap)" } }, "statusVocabulary": { "verified": "supported by acceptable evidence (primary or two independent corroborating sources)", "partially-verified": "some elements supported, others unresolved (single source, or instrument text pending)", "capture-pending": "relevant source identified but inaccessible/unretrieved; state self-upgrades when captured", "unverified": "claim exists but evidence has not met the publication threshold", "contradicted": "credible sources conflict; the conflict is explained, not silently resolved" }, "pillars": [ "licensing", "data-protection", "data-localisation-sovereignty", "tax-incentives", "energy-electricity", "construction-building", "environmental", "ai-digital-policy", "cross-border-data-flows", "regional-frameworks" ], "sources": { "kenyans-dangote-lamu-power": { "label": "Kenyans.co.ke - Dangote Eyes Electricity Sales to Kenya From Lamu Refinery Power Plant", "url": "https://www.kenyans.co.ke/news/127366-dangote-eyes-electricity-sales-kenya-lamu-refinery-power-plant", "tier": 2, "publisher": "Kenyans.co.ke", "sourceType": "National news report", "publishedDate": "2026-09-26", "retrievedDate": "2026-09-26", "captureStatus": "full", "captureNote": "Full article text captured via page reader. Reference record for the Dangote Lamu announcement: 1,000 MW power plant at the proposed Lamu refinery, ~500 MW offered to the Kenyan government, made during President Ruto's late-September 2026 visit to the Lekki refinery; Ksh 1.94-2.20 trillion investment estimate with Africa Finance Corporation support; Ruto states land secured. Commercial/energy market development, not tied to a claim in this dataset; candidate background evidence for the energy-electricity pillar (grid capacity expansion).", "excerpt": "Nigerian billionaire Aliko Dangote has announced plans to generate electricity at the Lamu refinery and sell part of the power to the Kenyan government once the refinery begins operating. Dangote on Friday, September 26, said the planned Lamu facility would have a 1,000-megawatt power plant, with half of the electricity potentially supplied to the Kenyan market." }, "theafricareport-lamu-lng": { "label": "The Africa Report - Kenya, Dangote eye LNG power deal at Lamu refinery, target Tanzania gas", "url": "https://www.theafricareport.com/429709/kenya-dangote-eye-lng-power-deal-at-lamu-refinery-target-tanzania-gas", "tier": 2, "publisher": "The Africa Report", "sourceType": "Pan-African business publication", "publishedDate": "2026-09-03", "retrievedDate": "2026-09-26", "captureStatus": "snippet", "captureNote": "Article is paywalled/cookie-walled; headline and search snippet verified only. Key fact from headline/snippet: Dangote Industries to double the planned capacity of an LNG power plant at its proposed Lamu refinery to 1,000 MW, targeting Tanzanian gas. Establishes the plant's fuel type (LNG, not renewable) - material to the green-grid narrative.", "excerpt": "Dangote Industries to double the planned capacity of an LNG power plant at its proposed Lamu refinery to 1,000MW, aiming to bridge domestic ..." }, "itnewsafrica-mtn-africa-data-hub": { "label": "IT News Africa - MTN Group advances Africa's AI-ready digital infrastructure ecosystem through strategic partnership", "url": "https://www.itnewsafrica.com/enterprise/digital-transformation/mtn-group-advances-africas-ai-ready-digital-infrastructure-ecosystem-through-strategic-partnership/", "tier": 2, "publisher": "IT News Africa", "sourceType": "Trade press announcement", "publishedDate": "2026-08-31", "retrievedDate": "2026-09-26", "captureStatus": "full", "captureNote": "Full article text captured via page reader. Reference record for the MTN Digital Infrastructure / Africa Data Hub Holding Limited partnership (UAE investor Tarek Al Ashram; initial focus South Africa and Nigeria; Bayobab a shareholder; framed under MTN's Ambition 2030). Commercial market development, not tied to a claim in this dataset; candidate background evidence for the ai-digital-policy and regional-frameworks pillars.", "excerpt": "MTN Group today announced that MTN Digital Infrastructure has entered into a strategic partnership with UAE-based data centre investment platform to accelerate the development of AI-ready digital infrastructure platforms across Africa... The partners will pursue this strategic partnership through Africa Data Hub Holding Limited, which will serve as the platform through which future digital infrastructure opportunities will be developed and scaled across key African markets, with an initial focus on South Africa and Nigeria." }, "ulii-dppa-metadata": { "label": "Uganda Legal Information Institute - Data Protection and Privacy Act, Cap. 97 (official depository metadata)", "url": "https://ulii.org/akn/ug/act/2019/9/eng@2019-05-03", "tier": 1, "publisher": "ulii.org", "sourceType": "Official law depository", "publishedDate": "2019-05-03", "retrievedDate": "2026-09-22", "captureStatus": "snippet", "captureNote": "AKN body is client-rendered; Firecrawl scrape incl. waitFor 8s retry returns shell only. Metadata verified; full statute text pending alternative official depository.", "excerpt": "Data Protection and Privacy Act. Chapter 97. Published in Uganda Gazette 21 on 3 May 2019; Assented to on 25 February 2019; Commenced on 3 May 2019." }, "pdpo-decision-google-2025": { "label": "PDPO decision, Ssekamwa Frank & 3 Others v Google LLC, Complaint No. 08/11/24/6683 (18 July 2025)", "url": null, "tier": 1, "publisher": "Personal Data Protection Office (PDPO), Uganda", "sourceType": "Regulator decision", "publishedDate": "2025-07-18", "retrievedDate": null, "captureStatus": "capture-pending", "captureNote": "Primary instrument not published on pdpo.go.ug as of 2026-09-22 (site unreachable); decision content known through CIPESA (T2) and DLA Piper Privacy Matters (T3) reports, which quote the findings and the complaint number.", "excerpt": null }, "cipesa-google-decision": { "label": "CIPESA: Ugandan Regulator Finds Google in Breach of Country's Data Protection Law, Orders Local Registration", "url": "https://cipesa.org/2025/07/ugandan-regulator-finds-google-in-breach-of-countrys-data-protection-law-orders-local-registration/", "tier": 2, "publisher": "Collaboration on International ICT Policy for East and Southern Africa (CIPESA)", "sourceType": "Civil-society policy analysis (quotes statute and decision)", "publishedDate": "2025-07-21", "retrievedDate": "2026-09-22", "captureStatus": "captured", "excerpt": "In a July 18, 2025 decision, Uganda's Personal Data Protection Office (PDPO) found Google LLC in breach of the country's data protection law and ordered the global tech giant to register with the local data protection office within 30 days... contravened section 29 of the Data Protection and Privacy Act... in breach of section 19 of the Act." }, "dlapiper-pm-offshore": { "label": "DLA Piper Privacy Matters: Uganda - Data protection Regulator Clarifies Compliance Requirements for Offshore Entities", "url": "https://privacymatters.dlapiper.com/2025/08/uganda-data-protection-regulator-clarifies-compliance-requirements-for-offshore-entities/", "tier": 3, "publisher": "DLA Piper", "sourceType": "International law firm analysis (quotes decision and registration process)", "publishedDate": "2025-08-06", "retrievedDate": "2026-09-22", "captureStatus": "captured", "excerpt": "The PDPO confirmed that the obligations under Uganda's data protection law \"attach not only to entities physically present in Uganda but to any entity handling personal data of Ugandan citizens, including those established abroad\"... Every data collector, processor or controller is legally required to register with the PDPO and renew its registration every year." }, "dlapiper-handbook-uganda": { "label": "DLA Piper Global Data Protection Laws of the World - Uganda chapter", "url": "https://www.dlapiperdataprotection.com/uganda.html", "tier": 3, "publisher": "DLA Piper", "sourceType": "International law firm handbook", "publishedDate": "2026-02-13", "retrievedDate": "2026-09-22", "captureStatus": "snippet", "captureNote": "Chapter page renders via JS; page fetch returned a shell. Search snippet corroborates commencement (3 May 2019) and Regulations commencement (12 March 2021).", "excerpt": "The Data Protection and Privacy Act commenced on 3 May 2019 while the Regulations took effect on 12 March 2021." }, "ucc-telecom-licensing-page": { "label": "UCC - Telecommunication Licensing (official page)", "url": "https://www.ucc.co.ug/telecommunication-licensing/", "tier": 1, "publisher": "Uganda Communications Commission (UCC)", "sourceType": "Regulator website", "publishedDate": null, "retrievedDate": "2026-09-22", "captureStatus": "captured", "captureNote": "Page body renders via JS; statutory-mandate footer text captured. Licence-class detail awaited from the official instruments (see ucc-licence-description).", "excerpt": "The primary mandate of UCC is to regulate the Communications sector, which includes Telecommunications, Broadcasting, radio communication, postal communications, data communication and infrastructure." }, "ucc-licence-description": { "label": "UCC - Description of Telecom Licenses and Authorisations (official instrument)", "url": "https://www.ucc.co.ug/wp-content/uploads/2023/10/DESCRIPTION-OF-TELECOM-LICENSES-AND-AUTHORISATIONS.pdf", "tier": 1, "publisher": "Uganda Communications Commission (UCC)", "sourceType": "Regulator instrument", "publishedDate": null, "retrievedDate": "2026-09-22", "captureStatus": "captured", "captureNote": "Resolved: official 'Description of Telecom Licenses and Authorisations' PDF captured 2026-09-22.", "excerpt": null }, "gle-telecom-licensing": { "label": "Global Law Experts: How To Get A Telecom License In Uganda", "url": "https://globallawexperts.com/how-to-get-a-telecom-license-in-uganda/", "tier": 3, "publisher": "Global Law Experts (Ugandan TMT counsel)", "sourceType": "Law firm practice guide", "publishedDate": null, "retrievedDate": "2026-09-22", "captureStatus": "captured", "excerpt": "Infrastructure companies building shared-tower, fibre or data-centre assets for use by licensed operators [must apply]... The UCC's Description of Telecom Licenses and Authorisations sets out the principal categories." }, "ict-roadmap": { "label": "Ministry of ICT & National Guidance - Digital Transformation Roadmap FY2023/24-2027/28", "url": "https://ict.go.ug/", "tier": 1, "publisher": "Government of Uganda, Ministry of ICT & National Guidance", "sourceType": "Official government strategy", "publishedDate": "2023-04-01", "retrievedDate": "2026-09-22", "captureStatus": "snippet", "captureNote": "Capture mission 2026-09-22 retried: ict.go.ug roadmap path 404-shell; Wayback homepage is nav-only. Upgrade path unchanged: locate the roadmap PDF directly.", "excerpt": "Development of reliable digital infrastructure, including high-speed broadband networks, data centres, and cloud computing capabilities." }, "nita-digital-government": { "label": "NITA-U - Digital Government Strategy (anchored in Vision 2040 and the Digital Uganda Vision)", "url": "https://www.nita.go.ug/", "tier": 1, "publisher": "National Information Technology Authority Uganda (NITA-U)", "sourceType": "Official government strategy", "publishedDate": null, "retrievedDate": "2026-09-22", "captureStatus": "snippet", "captureNote": "Capture mission 2026-09-22 retried: NITA-U Wayback homepage lacks DUV content; no DUV page in site nav. Upgrade path: Digital Uganda Vision PDF via ICT ministry publications.", "excerpt": "DUV is an overarching 20-year ICT development framework that is aligned to the Uganda Vision 2040." }, "us-state-ics-2025": { "label": "US Department of State - 2025 Investment Climate Statement: Uganda", "url": "https://www.state.gov/", "tier": 3, "publisher": "US Department of State", "sourceType": "Foreign-government investment assessment (not a Ugandan primary source)", "publishedDate": "2025-01-01", "retrievedDate": "2026-09-22", "captureStatus": "snippet", "captureNote": "Capture mission 2026-09-22 retried: ugandainvest.go.ug JS-empty (direct + Wayback nav-only). Upgrade path: UIA investment-code PDF or UFZA incentives page.", "excerpt": "Through the UIA and the Uganda Free Zones Authority, investors can access several tax incentives, including a 10-year income tax holiday for foreign investment." }, "pdpo-register-portal": { "label": "PDPO online registration portal (pdpo.go.ug/register)", "url": "https://pdpo.go.ug/register", "tier": 1, "publisher": "Personal Data Protection Office (PDPO), Uganda", "sourceType": "Regulator portal", "publishedDate": null, "retrievedDate": "2026-09-22", "captureStatus": "captured", "captureNote": "Portal page captured 2026-09-22 (research/captures/2026-09-22-pdpo-go-ug-register.md): official register search + certificate requirement. Fee/form-class specifics NOT in capture - claim stays partially-verified.", "excerpt": null }, "rura-licensing-regulation": { "label": "RURA Regulation No 013/R/EC-ICT/RURA/2021 of 25/02/2021 Governing Licensing in Electronic Communication (official PDF, 59pp)", "url": "https://www.rura.rw/fileadmin/user_upload/RURA/Documents/Sectors/ICT/Regulatory_Instruments/ICT_Regulations_and_Guidelines/Regulation_Governing_Licensing_in_Electronic_Communication_in_Rwanda.pdf", "tier": 1, "publisher": "Rwanda Utilities Regulatory Authority (RURA)", "sourceType": "Regulator instrument (full text captured)", "publishedDate": "2021-02-25", "retrievedDate": "2026-09-22", "captureStatus": "captured", "excerpt": "ANNEX ONE: APPLICATION AND LICENSE FEES ... CATEGORY 3: APPLICATION SERVICE PROVIDERS ... Data Centers (not having ISP License or NTO License: Tier One and Two) USD 100 / USD 2,000 Standard 5 years; Data Centers (not having ISP License or NTO License): Tier Three and Four and plus USD 1,000 / USD 10,000 Standard 15 Years" }, "risa-law-058-2021": { "label": "Law No 058/2021 of 13/10/2021 relating to the protection of personal data and privacy (official gazette text, bilingual PDF, 82pp, via RISA)", "url": "https://www.risa.gov.rw/fileadmin/user_upload/RISA/Publications/2.Laws/Law_relating_to_the_protection_of_personal_data_and_privacy.pdf", "tier": 1, "publisher": "Republic of Rwanda (Official Gazette n° Special of 15/10/2021), hosted by RISA", "sourceType": "Statute (full text captured)", "publishedDate": "2021-10-15", "retrievedDate": "2026-09-22", "captureStatus": "captured", "excerpt": "Article 48: ... share or transfer personal data to a third party outside Rwanda if: 1° he or she has obtained authorisation from the supervisory authority after providing proof of appropriate safeguards ... 2° the data subject has given his or her consent; 3° the transfer is necessary ... Article 50: The data controller or the data processor stores personal data in Rwanda. However, the storage of personal data outside Rwanda is only permitted if ... holds a valid registration certificate authorising him or her to store personal data outside Rwanda, which is issued by the supervisory authority." }, "dpo-gov-rw": { "label": "Data Protection & Privacy Office (DPO) - official services site", "url": "https://dpo.gov.rw/", "tier": 1, "publisher": "Data Protection and Privacy Office (Rwanda)", "sourceType": "Regulator website", "publishedDate": null, "retrievedDate": "2026-09-22", "captureStatus": "captured", "excerpt": "Services: Apply as a Data Controller ... Apply as a Data Processor ... Authorization to Transfer Outside Rwanda ... Authorization to Store Outside Rwanda ... What to do after registering with NCSA" }, "rdb-one-stop-centre": { "label": "Rwanda Development Board - One Stop Centre (investment incentives)", "url": "https://rdb.rw/services/one-stop-centre/", "tier": 1, "publisher": "Rwanda Development Board (RDB)", "sourceType": "Government agency website", "publishedDate": null, "retrievedDate": "2026-09-22", "captureStatus": "captured", "excerpt": "Corporate income tax holiday of up to seven (7) years: A registered investor investing an equivalent of at least fifty million United States Dollars (USD 50,000,000) and contributing at least thirty percent (30%) of this investment in form of equity in the sectors specified below ... Information and Communication Technology ... This incentive excludes ICT retail and wholesale trade as well as ICT repair industries and telecommunications" }, "dataguidance-rwanda": { "label": "DataGuidance - Rwanda jurisdiction chapter", "url": "https://www.dataguidance.com/jurisdiction/rwanda", "tier": 3, "publisher": "DataGuidance (OneTrust)", "sourceType": "Commercial legal research platform", "publishedDate": null, "retrievedDate": "2026-09-22", "captureStatus": "captured", "excerpt": "The National Cyber Security Authority (NCSA), as the designated supervisory authority under the Data Protection Law, has been active in clarifying compliance ... published on October 15, 2021, in the Rwanda Official Gazette" }, "cyber-gov-dpo": { "label": "NCSA/DPO - Data Protection Office guidance page", "url": "https://cyber.gov.rw/", "tier": 1, "publisher": "National Cyber Security Authority (Rwanda)", "sourceType": "Regulator website", "publishedDate": null, "retrievedDate": "2026-09-22", "captureStatus": "snippet", "captureNote": "Page fetch returned shell content; registration-deadline framing captured from search index snippet. The DPO site (dpo.gov.rw) was fully captured and carries the operative registration guidance.", "excerpt": "Put in place a register of data controllers and data processors. With the transitional period ending on 15th October 2023 ..." }, "dlapiper-africa-rw-deadline": { "label": "DLA Piper Africa - Deadline for mandatory registration as a data controller or processor in Rwanda", "url": "https://www.dlapiperafrica.com/", "tier": 3, "publisher": "DLA Piper Africa", "sourceType": "Law firm briefing", "publishedDate": "2023-09-21", "retrievedDate": "2026-09-22", "captureStatus": "snippet", "excerpt": "Deadline for mandatory registration as a data controller or processor to close on 15 October 2023", "captureNote": "Only the headline snippet was captured (search-index result; direct article URL not resolved on 2026-09-22). Upgrade path: capture the full DLA Piper Africa briefing page, then upgrade RW-DP-C6 to Tier-1 by capturing the NCSA official registration-deadline notice or gazette." }, "minict-ssp-2024-2029": { "label": "ICT Sector Strategic Plan (2024-2029) - Ministry of ICT and Innovation", "url": "https://www.minict.gov.rw/", "tier": 1, "publisher": "Ministry of ICT and Innovation (Rwanda)", "sourceType": "Official government strategy", "publishedDate": "2024-08-10", "retrievedDate": "2026-09-22", "captureStatus": "snippet", "captureNote": "Capture mission 2026-09-22 retried: SSP hosted on minecofin.gov.rw per search, deep link stripped by the search tool; MINICT site path shell. Upgrade path: locate the SSP PDF on minecofin.gov.rw document library.", "excerpt": "The SSP aligns with the Smart Rwanda Master Plan (SRMP II) which adopted three core pillars: Digital Business, Digital Citizen, and Digital ..." }, "risa-dp-page": { "label": "RISA - Data Protection and Privacy Law (official page with article summaries)", "url": "https://www.risa.gov.rw/data-protection-and-privacy-law", "tier": 1, "publisher": "Rwanda Information Society Authority (RISA)", "sourceType": "Government agency website", "publishedDate": null, "retrievedDate": "2026-09-22", "captureStatus": "captured", "excerpt": "On October 15th 2021, Law No 058/2021 of 13/10/2021 relating to the protection of personal data and privacy was officially gazetted. The law protects personal data and ensures privacy of individual users." }, "pdpc-act-pdf": { "label": "Personal Data Protection Act, 2022 (Act No 11 of 2022, GN No 395B) - official PDF, 42pp", "url": "https://pdpc.go.tz/documents/3/PERSONAL_DATA_PROTECTION_ACT_2022.pdf", "tier": 1, "publisher": "Personal Data Protection Commission (Tanzania)", "sourceType": "Statute (full text captured)", "publishedDate": "2022-05-31", "retrievedDate": "2026-09-22", "captureStatus": "captured", "excerpt": "14.-(1) A person shall not collect or process personal data without being registered as a data controller or a data processor under this Act. ... 31.-(1) The Commission may, subject to the provisions of this Act, prohibit the transfer of personal data to a place outside the country. ... 32: transfer of personal data to countries outside the United Republic is not authorised (exceptions enumerated)." }, "pdpc-regs-pdf": { "label": "Personal Data Protection (Personal Data Collection and Processing) Regulations, 2023 (GN No 449C) - official PDF, 38pp", "url": "https://pdpc.go.tz/documents/4/THE_PERSONAL_DATA_PROTECTION_PERSONAL_DATA_COLLECTION_AND_PROCESSING_REGULATIONS_2023.pdf", "tier": 1, "publisher": "Personal Data Protection Commission (Tanzania)", "sourceType": "Regulations (full text captured)", "publishedDate": "2023-09-01", "retrievedDate": "2026-09-22", "captureStatus": "captured", "excerpt": "Reg. 4: application for registration using Form No. 1 ... pay the fees specified in the Second Schedule. Reg. 5: verify within seven days. Reg. 6: rejection reasons within fourteen days. Reg. 7: registration valid for five years. Reg. 8: renewal Form No. 3, three months before expiry. Second Schedule: Large-scale (100+ employees, turnover above TZS 500,000,000) registration fee TZS 1,000,000.00; renewal TZS 500,000.00." }, "pdpc-act-page": { "label": "PDPC - The Personal Data Protection Act, 2022 (official instrument page)", "url": "https://pdpc.go.tz/the-personal-data-protection-act-2022/", "tier": 1, "publisher": "Personal Data Protection Commission (Tanzania)", "sourceType": "Regulator website", "publishedDate": null, "retrievedDate": "2026-09-22", "captureStatus": "captured", "excerpt": "THE PERSONAL DATA PROTECTION ACT, 2022 ... (page hosting the official Act PDF, CHAPTER 44 references on regulator service pages)." }, "pdpc-permit-page": { "label": "PDPC - Cross-Border Data Transfer Permit (official service page)", "url": "https://pdpc.go.tz/services/cross-border-data-transfer-permit/", "tier": 1, "publisher": "Personal Data Protection Commission (Tanzania)", "sourceType": "Regulator service page", "publishedDate": null, "retrievedDate": "2026-09-22", "captureStatus": "captured", "excerpt": "According to the Personal Data Protection Act, Chapter 44, the Personal Data Protection Commission (PDPC) is mandated to regulate and oversee the transfer of Personal Data outside the country... In discharging this mandate, the Commission: Issues permits to entities intending to transfer personal data outside the country; Assesses the level of Personal Data protection in the destination country...; Ensures that appropriate legal, technical, and organizational safeguards are in place prior to any Personal Data transfer; Establishes conditions and compliance requirements...; Monitors and audits adherence to the set conditions." }, "tcra-licenses-page": { "label": "TCRA - List of Licensed Providers & Certificates (official searchable register)", "url": "https://www.tcra.go.tz/services/licenses", "tier": 1, "publisher": "Tanzania Communication Regulatory Authority (TCRA)", "sourceType": "Regulator register", "publishedDate": null, "retrievedDate": "2026-09-22", "captureStatus": "captured", "excerpt": "Complete list of licensed service providers and certificates issued by TCRA. Choose section: All Sectors / Broadcasting / Postal & Courier / Telecommunications & Internet / Other / Security. Columns: Provider Name, License Categorization, License Type/No., Validity. Sample entry: Class Licence TCRA/CSRBFACL/01/2026 Issued 2026-09-10 Expiry 2029-09-09." }, "bowmans-ea-data-infra": { "label": "Bowmans - Tanzania: Overview of Data Infrastructure in East Africa", "url": "https://www.bowmanslaw.com/insights/overview-of-data-infrastructure-in-east-africa/", "tier": 2, "publisher": "Bowmans (law firm)", "sourceType": "Law firm analysis", "publishedDate": null, "retrievedDate": "2026-09-22", "captureStatus": "captured", "excerpt": "The Tanzania Communication Regulatory Authority Act of 2003 (TCRA Act) ... introduced a convergence licensing framework, mandated the TCRA to promote competition ... and take responsibility for licensing matters. The Electronic and Postal Communications Act of 2010 (EPOCA) provides a comprehensive regulatory regime for electronic communications service providers and postal communications service providers." }, "tiseza-act-pdf": { "label": "The Investment and Special Economic Zones Act (Cap. 38 R.E.) - official PDF, 38pp (published on TISEZA site 2025)", "url": "https://www.tiseza.go.tz/uploads/documents/en-1775024006-THE%20INVESTMENT%20AND%20SPECIAL%20ECONOMIC%20ZONES%20ACT%202025.pdf", "tier": 1, "publisher": "Tanzania Investment and Special Economic Zones Authority (TISEZA)", "sourceType": "Statute (full text captured)", "publishedDate": null, "retrievedDate": "2026-09-22", "captureStatus": "captured", "excerpt": "20. List of investment incentives. 21. Strategic investor. ... (b) exemption from corporate income tax for the first ten years; (c) exemption from withholding tax on rent, dividends and interest for the first ten years; (d) exemption from withholding tax on interest from foreign loans; (e) exemption from taxes, fees and charges imposed by local government authorities ... for the first ten years; (a) exemption from customs duties, value-added tax, and any other tax imposed on raw materials and capital goods used in production." }, "tiseza-incentives-page": { "label": "TISEZA - Certificate of Incentives (official facilitation page)", "url": "https://www.tiseza.go.tz/pages/certificate-of-incentives", "tier": 1, "publisher": "Tanzania Investment and Special Economic Zones Authority (TISEZA)", "sourceType": "Government agency website", "publishedDate": null, "retrievedDate": "2026-09-22", "captureStatus": "captured", "excerpt": "Tanzania Investment and Special Economic Zones Authority grants Certificates of Incentives and Licence under authority conferred upon it by Part III, Section 19 (1-5) of Tanzania Investment and Special Economic Zones Act, 2025. Holders of certificate of incentives are entitled to various investment incentives as stipulated in the ... Act." }, "tra-dst-page": { "label": "TRA - Digital Service Tax (official explainer)", "url": "https://www.tra.go.tz/page/digital-service-tax", "tier": 1, "publisher": "Tanzania Revenue Authority (TRA)", "sourceType": "Government agency website", "publishedDate": null, "retrievedDate": "2026-09-22", "captureStatus": "captured", "excerpt": "Section 90A of the Income Tax Act requires non-resident persons to pay income tax at a rate of 3% on payments received from individuals not conducting business, for services rendered through a digital marketplace. Section 116(1) ... expand[s] the scope of services to include all electronic services. Section 68(5) of the Value Added Tax Act, Cap. 148 allows non-resident persons to register for VAT without the need for a tax representative." }, "tra-cet-pdf": { "label": "EAC Customs Union Common External Tariff, 2022 Version (updated June 2025) - hosted by TRA, 577pp", "url": "https://www.tra.go.tz/images/uploads/pages/CET_2022_VERSION_Updated_June_2025.pdf", "tier": 1, "publisher": "East African Community (hosted by Tanzania Revenue Authority)", "sourceType": "Regional tariff instrument (full text captured)", "publishedDate": "2025-06-01", "retrievedDate": "2026-09-22", "captureStatus": "captured", "excerpt": "84.71 Automatic data processing machines and units thereof: 8471.41.00 ... 8471.49.00 Other, presented in the form of systems u 0%; 8471.50.00 Processing units ... 0%; 8471.60.00 Input or output units ... 0%; 8471.70.00 Storage units u 0%; 85.04 Electrical transformers, static converters: 8504.21.00/8504.22.00/8504.23.00 u 0%." }, "ewura-licensing-page": { "label": "EWURA - Electricity Licensing and Registration (official page)", "url": "https://www.ewura.go.tz/pages/licensing-and-registration", "tier": 1, "publisher": "Energy and Water Utilities Regulatory Authority (EWURA)", "sourceType": "Regulator website", "publishedDate": null, "retrievedDate": "2026-09-22", "captureStatus": "captured", "captureNote": "Page captured but body is navigation-dominant; licensing detail (Electricity Act 2008 thresholds, captive-power exemptions) awaits instrument-text capture.", "excerpt": "Electricity ... Licensing and Registration ... Power Purchase Agreement ... Complaints and dispute resolution ... Compliance Monitoring ... Electricity Licensees." }, "ewura-elec-infra-page": { "label": "EWURA - Electricity Infrastructure (official page)", "url": "https://www.ewura.go.tz/pages/electricity-infrastructure", "tier": 1, "publisher": "Energy and Water Utilities Regulatory Authority (EWURA)", "sourceType": "Regulator website", "publishedDate": null, "retrievedDate": "2026-09-22", "captureStatus": "captured", "captureNote": "Navigation-dominant capture; same upgrade path as ewura-licensing-page.", "excerpt": "Electricity Infrastructure ... Licensing and Registration ... Power Purchase Agreement." }, "nemc-regs-page": { "label": "NEMC - Regulations (official publications page)", "url": "https://www.nemc.or.tz/publications/regulations", "tier": 1, "publisher": "National Environment Management Council (NEMC)", "sourceType": "Government agency website", "publishedDate": null, "retrievedDate": "2026-09-22", "captureStatus": "captured", "excerpt": "Kanuni | NEMC (Regulations): hosts Environmental Management instruments incl. Registration and Practice of Environmental Experts Regulations 2021 (50pp PDF captured)." }, "nemc-certificates-2026": { "label": "NEMC - Environmental certificates issued (monthly announcements, July/August 2026)", "url": "https://www.nemc.or.tz/announcements/environmental-certificates-issued-in-august-2026", "tier": 1, "publisher": "National Environment Management Council (NEMC)", "sourceType": "Regulator operational record", "publishedDate": "2026-08-31", "retrievedDate": "2026-09-22", "captureStatus": "snippet", "captureNote": "Capture mission 2026-09-22 retried: NEMC announcements listing is JS-loaded (Swahili nav captured, list absent). Upgrade path: NEMC announcements API/page-render or gazette notices.", "excerpt": "Announcements: Environmental certificates issued in August 2026 / List of environmental certificates of July 2026." }, "state-ics-tz": { "label": "US State Department - 2024 Investment Climate Statements: Tanzania", "url": "https://www.state.gov/reports/2024-investment-climate-statements/tanzania", "tier": 3, "publisher": "US Department of State", "sourceType": "Government investment-climate report", "publishedDate": "2024-07-01", "retrievedDate": "2026-09-22", "captureStatus": "captured", "excerpt": "Tanzania investment climate chapter (94k chars captured) - power reliability, investment regime, ICT sector context." }, "epoca-act-text-cipit": { "label": "The Electronic and Postal Communications Act, 2010 (Tanzania) - full-text reproduction, ICT Policy Africa (CIPIT, Strathmore University) legal document repository", "url": "https://ictpolicyafrica.org/fr/document/a75omimq6wr?page=17", "tier": 2, "publisher": "ICT Policy Africa / CIPIT", "sourceType": "Full-text statute reproduction by a university research centre (non-official depository)", "publishedDate": "2010-04-24", "retrievedDate": "2026-09-22", "captureStatus": "captured", "captureNote": "Statute text captured from the CIPIT document viewer (125-page reproduction; opening pages incl. Arrangement of Sections and Part II(a) Licensing, ss.4-12 headings). Official mirrors (oagmis.oag.go.tz, tanzlii.org) remain Cloudflare-gated - noted for provenance; a later official-mirror capture would re-tier this source to T1.", "excerpt": "THE ELECTRONIC AND POSTAL COMMUNICATIONS ACT, 2010 - ARRANGEMENT OF SECTIONS - PART II ELECTRONIC COMMUNICATIONS (a) Licensing: 4. Power to issue licence and regulate electronic communication systems. 5. Types and duration of licences. 6. Application for licence. ... 11. Network facilities licence." }, "dpo-rw-registration-page": { "label": "Rwanda Data Protection and Privacy Office - Registration services page (apply as controller/processor; transfer and storage authorisations)", "url": "https://dpo.gov.rw/registration", "tier": 1, "publisher": "dpo.gov.rw", "sourceType": "Regulator service page", "publishedDate": null, "retrievedDate": "2026-09-22", "captureStatus": "captured", "captureNote": "Capture mission 2026-09-22: direct capture succeeded where the 2026-09-22 first pass got a shell. Confirms the operative registration regime (controller/processor certificates, authorisation to transfer/store outside Rwanda). Does not restate the 15-Oct-2023 transition date - that fact stays snippet-sourced.", "excerpt": "Rwanda Data Protection and Privacy Office - Services: Apply as a Data Controller; Apply as a Data Processor; Authorization to Transfer Outside Rwanda; Authorization to Store Outside Rwanda. What to do after registering with NCSA." }, "ucc-licensing-page": { "label": "Uganda Communications Commission - Telecommunication Licensing page (statutory basis, licence/authorisation categories, s.22 licence requirement)", "url": "https://www.ucc.co.ug/telecommunication-licensing/", "tier": 1, "publisher": "ucc.co.ug", "sourceType": "Regulator licensing framework page", "publishedDate": null, "retrievedDate": "2026-09-22", "captureStatus": "captured", "captureNote": "Capture mission 2026-09-22: located via UCC site navigation after the /description-telecom-licences slug 404'd. Anchors the framework's statutory basis (ss.5,6,21,22,24,25 + Licensing Regulations) and links the definitive 'Description of Telecom Licenses and Authorizations' document, which remains uncaptured.", "excerpt": "Licensing ... as outlined in section 5(1)(b) of the Uganda Communications Act 2013 ... the UCC has diligently established specific categories of licenses. ... Compliance with Section 22 'Licence for telecommunications' ... 'a person shall not, establish a telecommunications station, provide telecommunications services or construct, maintain or operate telecommunications apparatus without a licence issued by the Commission.'" }, "ca-licensing-procedures": { "label": "Communications Authority of Kenya - Licensing Procedures (CA licensing section)", "url": "https://ca.go.ke/licensing-procedures", "tier": 1, "publisher": "ca.go.ke", "sourceType": "Regulator licensing page", "publishedDate": null, "retrievedDate": "2026-09-22", "captureStatus": "captured", "captureNote": "Captured 2026-09-22 via CA site navigation (direct /licensing-framework path 404'd). Page is markup-heavy in text extraction; licensing procedures and numbering administration confirmed. Licence-class instrument (NFP/ASP classes, any data-centre-specific class) remains uncaptured.", "excerpt": "Communications Authority of Kenya - licensing procedures. End users and service providers requiring numbers shall seek secondary assignment from the assigned licensee." }, "odpc-home": { "label": "Office of the Data Protection Commissioner (Kenya) - site (DPA scope, registration gateway)", "url": "https://www.odpc.go.ke/", "tier": 1, "publisher": "odpc.go.ke", "sourceType": "Regulator official site", "publishedDate": null, "retrievedDate": "2026-09-22", "captureStatus": "captured", "captureNote": "Captured 2026-09-22. Confirms the DPA applies to data controllers and processors, data-subject rights, and the 'Register as a Data Handler' gateway.", "excerpt": "The Kenya Data Protection Act (DPA) applies to data controllers and processors and provides data subjects with certain rights ... Register as a Data Handler. Data Controller: A person or entity that..." }, "odpc-handlers-register": { "label": "ODPC - Registered Data Handlers public register (live search: name, type, registration number, county, status)", "url": "https://www.odpc.go.ke/registered-data-handlers/", "tier": 1, "publisher": "odpc.go.ke", "sourceType": "Regulator public register", "publishedDate": null, "retrievedDate": "2026-09-22", "captureStatus": "captured", "captureNote": "Captured 2026-09-22 (57k chars of register rows). Demonstrates the registration regime is actively operated: per-entry registration numbers (INST-... format), controller/processor type, county, Active/Expired status.", "excerpt": "REGISTRATION STATUS OF DATA HANDLERS - Active Data Handlers ... # | Data Handler Name | Data Handler Type | Registration Number | County | Status. Example rows: 254 BREWING COMPANY LIMITED, Data Controller, INST-..., KIAMBU, Kenya, Active." }, "sezauthority-root": { "label": "Special Economic Zones Authority (Kenya) - official site (regulator of public and private SEZs; enterprise licences; gazetted zones incl. Naivasha; ICT Parks)", "url": "https://sezauthority.go.ke/", "tier": 1, "publisher": "sezauthority.go.ke", "sourceType": "Regulator/authority official site", "publishedDate": null, "retrievedDate": "2026-09-22", "captureStatus": "captured", "captureNote": "Captured 2026-09-22. Confirms SEZA as regulator of both public and private SEZs, Enterprise License administration, and ICT Parks / Business Service Parks as SEZ zone types. The SEZ Act 2015 text (rate specifics) remains uncaptured - Kenya Law AKN renders a JS shell.", "excerpt": "The Authority serves as the regulator of both public and private SEZs in Kenya and exists to create an enabling environment for investors ... Enterprise License ... Gazetted SEZ Public SEZ Private SEZ Naivasha SEZ ... ICT Parks: To facilitate ICT support, Research, innovation and development. Business Service Parks with plug-and-play services." }, "investkenya-eprocedures": { "label": "KenInvest eProcedures (official .go.ke platform) - EPZ licences, business service permits and investment-incentive procedures", "url": "https://eprocedures.investkenya.go.ke/", "tier": 1, "publisher": "eprocedures.investkenya.go.ke", "sourceType": "Government procedures platform", "publishedDate": null, "retrievedDate": "2026-09-22", "captureStatus": "captured", "captureNote": "Captured 2026-09-22 (procedure index). Confirms the EPZ licensing regime is operated: 'EPZ commercial enterprise licence', 'EPZ Business Service Permit', EPZ manufacturer entries, plus investment incentives and capital-deduction procedures. EPZ Act text (holiday specifics) remains uncaptured.", "excerpt": "EPZ Business Service Permit; EPZ commercial enterprise licence; Export processing zones (EPZ) licences; EPZ manufactur[ing]; Investment incentives; Capital deductions; Tax and customs exemption facilitation." }, "epra-energy-act-page": { "label": "Energy and Petroleum Regulatory Authority (EPRA) - Energy Act 2019 page (electricity/renewables licensing and registers)", "url": "https://www.epra.go.ke/energy-act-2019/", "tier": 1, "publisher": "epra.go.ke", "sourceType": "Regulator official page", "publishedDate": null, "retrievedDate": "2026-09-22", "captureStatus": "captured", "captureNote": "Captured 2026-09-22. Page title anchors the Act; site sections confirm electricity and renewable-energy licensing ('Regulatory Instruments / Application Guidelines / License application / Registers'). Energy Act 2019 statutory detail (thresholds, captive power) remains uncaptured.", "excerpt": "Energy Act 2019 | Energy and Petroleum Regulatory Authority. Electricity & Renewable Energy: Regulatory Instruments, Application Guidelines, License application, Registers." }, "nema-home": { "label": "National Environment Management Authority (Kenya) - site (EIA/SEA regime, licensed experts register)", "url": "https://www.nema.go.ke/", "tier": 1, "publisher": "nema.go.ke", "sourceType": "Regulator official site", "publishedDate": null, "retrievedDate": "2026-09-22", "captureStatus": "captured", "captureNote": "Captured 2026-09-22. Confirms the EIA/SEA regime is operated: EIA/SEA report submissions, experts register and qualifications. EMCA statutory detail (s.58 EIA obligation wording) remains uncaptured.", "excerpt": "National Environment Management Authority ... Experts Register & Qualifications ... DOWNLOADS: EIA/SEA Reports, SEA/SESA Reports ..." }, "ict-digital-economy": { "label": "Ministry of Information, Communications and the Digital Economy (Kenya) - State Department for ICT and Digital Economy functions page", "url": "https://ict.go.ke/ict-and-digital-economy", "tier": 1, "publisher": "ict.go.ke", "sourceType": "Ministry official page", "publishedDate": null, "retrievedDate": "2026-09-22", "captureStatus": "captured", "captureNote": "Captured 2026-09-22. Confirms the ministry/State Department structure driving ICT and digital-economy policy (projects incl. Last Mile County Connectivity, Digital Literacy Programme). Masterplan 2022-2032 and AI Strategy 2025-2030 documents remain uncaptured.", "excerpt": "ICT and Digital Economy - Functions of the State Department for ICT and Digital Economy ... Projects: Last Mile County Connectivity Project (LMCCP), Digital Literacy Programme ..." }, "dlapiper-dataprotection-ke": { "label": "DLA Piper Data Protection Laws of the World - Kenya chapter (country profiles landing)", "url": "https://www.dlapiperdataprotection.com/", "tier": 3, "publisher": "DLA Piper", "sourceType": "Law firm global guide", "publishedDate": null, "retrievedDate": "2026-09-22", "captureStatus": "snippet", "captureNote": "Kenya is listed on the captured landing page; the country chapter itself renders via the site's viewer and was not captured on 2026-09-22. Upgrade path: capture the Kenya chapter (transfer-conditions and localisation wording) or the DPA 2019 text from Kenya Law (AKN JS shell on 2026-09-22; Wayback retry also flaked).", "excerpt": "Data Protection Laws of the World ... Kenya Kosovo Kuwait ... (country index captured; Kenya chapter content not rendered in text extraction)." }, "policyvault-epz": { "label": "PolicyVault Africa - Export Processing Zones Act (Kenya) listing", "url": "https://policyvault.africa", "tier": 3, "publisher": "PolicyVault Africa", "sourceType": "Policy document repository", "publishedDate": null, "retrievedDate": "2026-09-22", "captureStatus": "snippet", "captureNote": "Search-index snippet only; document body not captured. Upgrade path: capture the EPZ Act (Cap 517) text - KenInvest eProcedures or Kenya Law PDF.", "excerpt": "Export Processing Zones Act (Kenya) - listed on PolicyVault Africa." }, "bowmans-sez-amendments": { "label": "Bowmans - Kenya: Amendments to the Special Economic Zones Act (law firm briefing)", "url": "https://www.bowmanslaw.com", "tier": 3, "publisher": "Bowmans", "sourceType": "Law firm briefing", "publishedDate": null, "retrievedDate": "2026-09-22", "captureStatus": "snippet", "captureNote": "Search-index snippet only (bare-domain result). Records that SEZ Act amendments exist; rate specifics must come from the Act. Upgrade path: SEZ Act 2015 (as amended) text capture.", "excerpt": "Kenya: Amendments to the Special Economic Zones Act (Bowmans briefing listing)." }, "ewura-acts-index": { "label": "ewura-acts-index", "tier": 1, "captureStatus": "captured", "retrievedDate": "2026-09-22", "url": "https://www.ewura.go.tz/publications/acts-and-regulation", "publisher": "ewura.go.tz", "sourceType": "Official regulator statute index", "captureNote": "Captured 2026-09-22 (research/captures/2026-09-22-ewura-go-tz-publications-acts-and-regulation.md); links Cap 414 + Electricity Act PDFs." }, "ewura-act-cap414-pdf": { "label": "ewura-act-cap414-pdf", "tier": 1, "captureStatus": "captured", "retrievedDate": "2026-09-22", "url": "https://www.ewura.go.tz/uploads/documents/en-1786363649-Energy%20and%20Water%20Utilities%20Regulatory%20Authority%20Act.pdf", "publisher": "ewura.go.tz", "sourceType": "Official statute text (PDF)", "captureNote": "Full Cap 414 text captured 2026-09-22 (research/captures/2026-09-22-ewura-go-tz-uploads-documents-en-1786363649-Energy-20and-20Wat.md)." }, "ewura-electricity-act-pdf": { "label": "ewura-electricity-act-pdf", "tier": 1, "captureStatus": "captured", "retrievedDate": "2026-09-22", "url": "https://www.ewura.go.tz/uploads/documents/en-1786363737-The%20Electricity%20Act.pdf", "publisher": "ewura.go.tz", "sourceType": "Official statute text (PDF)", "captureNote": "Electricity Act Cap 131 full text captured 2026-09-22 (research/captures/2026-09-22-ewura-go-tz-uploads-documents-en-1786363737-The-20Electricity-.md)." }, "kenyalaw-dpa-akn": { "label": "kenyalaw-dpa-akn", "tier": 1, "captureStatus": "captured", "retrievedDate": "2026-09-22", "url": "https://new.kenyalaw.org/akn/ke/act/2019/24/eng@2022-12-31", "publisher": "new.kenyalaw.org", "sourceType": "Official law depository (AKN)", "captureNote": "Full DPA 2019 text captured 2026-09-22 incl. s.25(h) transfer limb ('not transferred outside Kenya unless proof of adequate data protection safeguards or consent'); Firecrawl renders the former JS shell." }, "ict-digital-vision-pdf": { "label": "ict-digital-vision-pdf", "tier": 1, "captureStatus": "captured", "retrievedDate": "2026-09-22", "url": "https://ict.go.ug/site/documents/digital-vision-uganda-2040.pdf", "publisher": "ict.go.ug", "sourceType": "Official ministry document (PDF)", "captureNote": "'Vision for a Digital Uganda' official PDF captured 2026-09-22 (141KB markdown)." }, "kenyalaw-sez-act-2015": { "label": "Special Economic Zones Act (No. 16 of 2015), consolidated text eng@2024-12-27 (Kenya Law)", "tier": 1, "captureStatus": "captured", "retrievedDate": "2026-09-23", "url": "https://new.kenyalaw.org/akn/ke/act/2015/16/eng@2024-12-27", "publisher": "new.kenyalaw.org (National Council for Law Reporting)", "sourceType": "Official statute text (consolidated)", "captureNote": "Full consolidated text captured 2026-09-23 (research/captures/2026-09-23-new-kenyalaw-org-akn-ke-act-2015-16-eng-2024-12-27.md). Part VI s.35 incentives; amendment history cited inline." }, "kenyalaw-epz-act-cap517": { "label": "Export Processing Zones Act (No. 12 of 1990; Cap 517), consolidated text eng@2023-07-01 (Kenya Law)", "tier": 1, "captureStatus": "captured", "retrievedDate": "2026-09-23", "url": "https://new.kenyalaw.org/akn/ke/act/1990/12/eng@2023-07-01", "publisher": "new.kenyalaw.org (National Council for Law Reporting)", "sourceType": "Official statute text (consolidated)", "captureNote": "Full consolidated text captured 2026-09-23 (research/captures/2026-09-23-new-kenyalaw-org-akn-ke-act-1990-12-eng-2023-07-01.md). Part VIII benefits incl. 10-year income tax exemption (s.32(c))." }, "ulii-investment-code-2019": { "label": "Investment Code Act, 2019 (Act 6 of 2019; Chapter 74) (ULII)", "tier": 1, "captureStatus": "captured", "retrievedDate": "2026-09-23", "url": "https://ulii.org/akn/ug/act/2019/6/eng@2019-03-29/source", "publisher": "ulii.org (Uganda Legal Information Institute)", "sourceType": "Official statute text (PDF)", "captureNote": "Full Act text captured 2026-09-23 (research/captures/2026-09-23-ulii-org-akn-ug-act-2019-6-eng-2019-03-29-source.md). s.12 incentive qualification incl. 80 percent export criterion; s.13 certificate of incentives. HTML page is a JS shell - PDF source used." }, "ulii-free-zones-act-2014": { "label": "Free Zones Act, 2014 (Act 5 of 2014) (ULII)", "tier": 1, "captureStatus": "captured", "retrievedDate": "2026-09-23", "url": "https://ulii.org/akn/ug/act/2014/5/eng@2014-04-25/source", "publisher": "ulii.org (Uganda Legal Information Institute)", "sourceType": "Official statute text (PDF)", "captureNote": "Full Act text (as at 25 Apr 2014) captured 2026-09-23 (research/captures/2026-09-23-ulii-org-akn-ug-act-2014-5-eng-2014-04-25-source.md). s.48 exemptions on EPZ imported inputs. No 10-year income tax holiday in this instrument." }, "minict-ssp-2024-2029-pdf": { "label": "ICT Sector Strategic Plan 2024-2029 (MINICT, Rwanda)", "tier": 1, "captureStatus": "captured", "retrievedDate": "2026-09-23", "url": "https://www.minict.gov.rw/index.php?eID=dumpFile&t=f&f=130180&token=5eaf01e5021aa23cb56ae6c37abcad7729534c7b", "publisher": "minict.gov.rw (Ministry of ICT and Innovation, Rwanda)", "sourceType": "Official strategy document (PDF)", "captureNote": "Full SSP text captured 2026-09-23 (research/captures/2026-09-23-minict-gov-rw-index-php.md). SRMP II pillar alignment verbatim; data-centre actions incl. EUCL industrial-tariff categorisation." }, "gt-ug-ita-cap340": { "label": "Income Tax Act, Cap 340 (Domestic Tax Laws Uganda handbook reproduction)", "tier": 2, "captureStatus": "captured", "retrievedDate": "2026-09-23", "url": "https://s3.amazonaws.com/rgi-documents/0216350e05e4b5dd46a9abc9d5ce2ffe7cda0610.pdf", "publisher": "Grant Thornton Uganda consultant handbook (former-URA author; ULRC reprint-based)", "sourceType": "Full-text statute reproduction (non-official; ULRC authentic reprint as at 19 Oct 2012)", "captureNote": "Full ITA portion captured 2026-09-23 (research/captures/2026-09-23-s3-amazonaws-com-rgi-documents-0216350e05e4b5dd46a9abc9d5ce2ffe7cda0.md). s.21(1)(y) (inserted by IT (Am) Act 2008): 10-year income tax exemption for income derived from the exportation of finished consumer and capital goods; 80% export condition (para (aa)); prescribed-conditions and certificate regime ((ab),(ac)). Operationalised by the Income Tax (Tax Incentives for Exporters of Finished Consumer and Capital Goods) Regulations 2009 (Reg 5(1) ten-year certificate validity; Reg 6(b) 80% export condition), included in the same capture. Official ULII consolidation (ulii.org/akn/ug/act/1997/11/eng@2024-12-23/source) fetch-blocked 2026-09-23 (curl 403; Context.dev scrape extraction failed) - captured via this reproduction; handbook disclaimer: private work, not a government publication." }, "pwc-uganda-tax-summaries": { "label": "PwC Tax Summaries - Uganda corporate tax credits and incentives", "tier": 3, "captureStatus": "snippet", "retrievedDate": "2026-09-23", "url": "https://taxsummaries.pwc.com/uganda/corporate/tax-credits-and-incentives", "publisher": "taxsummaries.pwc.com (PwC)", "sourceType": "Reputable secondary (current-edition tax guide)", "captureNote": "Snippet capture 2026-09-23 via Context.dev search result: 'A tax holiday of ten years is available to exporters who export at least 80% of their produce of finished goods, subject to certain conditions.' Current-edition corroboration of ITA Cap 340 s.21(1)(y)." }, "cdh-ke-tmt-alert-2026": { "label": "CDH Technology & Communications Alert: Licensing, structuring and financing considerations for telecommunications businesses (Kenya)", "tier": 2, "captureStatus": "captured", "retrievedDate": "2026-09-24", "publishedDate": "2026-09-23", "url": "https://www.cliffedekkerhofmeyr.com/en/news/publications/2026/Kenya/Technology-Communications/technology-and-communications-alert-23-september-Licensing-structuring-and-financing-considerations-for-telecommunications-businesses", "publisher": "Cliffe Dekker Hofmeyr (CDH)", "sourceType": "Law-firm client alert (Kenya Technology & Communications; authors Njeri Wagacha, Brian Macharia)", "captureNote": "Full alert body captured 2026-09-24 via manual curl, zero API credits (research/captures/2026-09-24-cdh-ke-tmt-alert-licensing-structuring-financing.md). Confirms: Revised Telecommunications Market Structure gazetted 6 March 2026; ULF Annex III names NFP-Tier 2 as the data centre licensing category; NFP-Tier 1 holders may rely on that licence to operate a commercial data centre; CA public notice of 8 September 2026 opened a 30-day comment window on a standalone data centre licence for co-location operators (hosting, power, cooling and storage infrastructure rather than telecommunications services); market context from Airtel Nxtra (Tatu City), iXAfrica Nairobi One and Cassava/Africa Data Centres. Legal basis: KIC Act Cap 411A s.24(1); ULF dates to 2008." }, "techafricanews-ke-dc-licence": { "label": "TechAfrica News: Kenya proposes standalone licence framework for data centres", "tier": 3, "captureStatus": "captured", "retrievedDate": "2026-09-24", "publishedDate": "2026-09-08", "url": "https://techafricanews.com/2026/09/08/kenya-proposes-standalone-licence-framework-data-centres/", "publisher": "techafricanews.com", "sourceType": "Trade press report", "captureNote": "Full article captured 2026-09-24 via manual curl (research/captures/2026-09-24-techafricanews-ke-standalone-dc-licence.md). Independently corroborates the NFP-Tier 2 baseline ('instead of regulating co-location data centres under the existing Network Facilities Provider-Tier 2 licence category'), the 8 Sep 2026 public notice and the 30-day written-comment window (post/hand delivery to the Director General, CA)." }, "wmedia-ke-dc-licence": { "label": "w.media: Kenya's standalone data center license aims to lure investment", "tier": 3, "captureStatus": "captured", "retrievedDate": "2026-09-24", "publishedDate": "2026-09-11", "url": "https://w.media/kenyas-standalone-data-center-license-aims-to-lure-investment/", "publisher": "w.media (Brendyn Lotz)", "sourceType": "Trade press report quoting the CA public notice", "captureNote": "Full article captured 2026-09-24 via manual curl (research/captures/2026-09-24-wmedia-ke-standalone-dc-licence.md). Corroborates the NFP-Tier 2 baseline; reproduces the CA notice verbatim (rationale + coverage of 'entities that provide colocation data centre services, including the attendant supporting services'); sole source for the proposed fee schedule (KSh 5,000 application / KSh 100,000 initial / KSh 80,000 or 0.4% of gross annual turnover p.a. whichever higher) and for the 2027/2028 FY implementation timing. CA notice itself JS-blocked - upgrade path." }, "ca-dc-licensing-framework-2026": { "label": "Communications Authority of Kenya - Proposed Licensing Framework for Data Centres, September 2026 (Consultation Version) - official consultation document", "url": "https://www.ca.go.ke/sites/default/files/2026-09/Public%20Consultation%20on%20Data%20Centres%20September%202026.pdf", "tier": 1, "publisher": "Communications Authority of Kenya", "sourceType": "Regulator instrument (consultation document)", "publishedDate": "2026-09", "retrievedDate": "2026-09-24", "captureStatus": "captured", "captureNote": "Full 7-page consultation text captured via Context.dev browser render after direct curl returned the site's obfuscated JS challenge shell (the challenge walls /index.php/ pages AND /sites/default/files/ assets; the clean /open-consultations route is open). Capture file: research/captures/2026-09-24-ca-go-ke-sites-default-files-2026-09-Public-20Consultation-.md. Confirms verbatim: standalone DC licence proposal and NFP-T2 baseline; fee schedule (application KSh 5,000; initial KSh 100,000; annual operating KSh 80,000 or 0.4 percent of Annual Gross turnover, whichever is higher); 15-year licence term; NFP/ASP exemption; USF at 0.5 percent of Annual Gross Revenue per section 84J(3) KICA Cap 411A; roadmap FY2026/2027 finalisation, FY2027/2028 implementation. Cost: 1 Context.dev credit (born-digital PDF flat rate)." }, "ca-open-consultations-2026": { "label": "Communications Authority of Kenya - Open Consultations page (regulator publication channel, data centres entry)", "url": "https://www.ca.go.ke/open-consultations", "tier": 1, "publisher": "Communications Authority of Kenya", "sourceType": "Regulator website", "publishedDate": null, "retrievedDate": "2026-09-24", "captureStatus": "captured", "captureNote": "Full page captured via Context.dev (clean-URL route bypasses the JS challenge that walls /index.php/ paths - diagnosis recorded 2026-09-24, upgrading the r13 'JS-blocked' note). Carries the data-centres consultation entry verbatim: 30-day comment window from publication; submission channels - post/hand delivery to the Director General (P.O. Box 14448-00800, Nairobi), electronic form (forms.cloud.microsoft/r/uB4Z5GktUB), email datacentres@ca.go.ke; links the framework PDF. Capture file: research/captures/2026-09-24-ca-go-ke-open-consultations.md." } }, "countries": { "uganda": { "name": "Uganda", "iso": "UG", "directoryFacilities": 2, "facilitiesNote": "Raxio Kampala UG1 (verified in the facility evidence pilot) plus one Kampala record", "regulators": { "communications": "Uganda Communications Commission (UCC)", "dataProtection": "Personal Data Protection Office (PDPO)", "investment": "Uganda Investment Authority (UIA) / Uganda Free Zones Authority (UFZA)" }, "pillarGaps": [ { "pillar": "energy-electricity", "gap": "No DC-relevant claims researched yet (ERA tariff classes, grid reliability, self-generation rules)", "expectedSources": [ "Electricity Regulatory Authority (ERA)", "Uganda Electricity Transmission Company (UETCL) tariff schedules" ], "upgradePath": "Fetch ERA published tariffs / Electricity Act 2022 instruments; then raise claims" }, { "pillar": "construction-building", "gap": "No claims researched yet (UNBS standards, building-control application to DCs)", "expectedSources": [ "Uganda National Bureau of Standards (UNBS)", "Building Control Act instruments" ], "upgradePath": "Identify whether any national standard adopts TIA/uptime-style DC requirements" }, { "pillar": "environmental", "gap": "No claims researched yet (NEMA requirements for large facilities, ESIA thresholds)", "expectedSources": [ "National Environment Management Authority (NEMA)", "National Environment Act, 2019" ], "upgradePath": "Fetch NEMA ESIA category guidance; check generator/cooling thresholds" }, { "pillar": "cross-border-data-flows", "gap": "Partial coverage via UG-DP-C5; EAC-level instruments pending", "expectedSources": [ "EAC Legal Framework for Cyberlaws", "EAC Data Protection & Privacy Policy (2021)" ], "upgradePath": "Research EAC instruments when the regional comparison phase starts" }, { "pillar": "regional-frameworks", "gap": "EAC harmonisation instruments not yet researched", "expectedSources": [ "EAC Secretariat instruments", "national ratification records" ], "upgradePath": "Deferred to the regional-comparison phase (editor sequencing)" } ], "investigatedAt": "2026-09-22", "investigationNote": "Uganda is the first country run through the policy evidence pipeline (editor sequencing: Uganda -> Rwanda -> Tanzania -> regional comparison). Six pillars attempted; data protection landed strongest (regulator decision + statute anchors); licensing partially verified pending UCC instruments; energy/construction/environmental not yet attempted and recorded as pillar gaps rather than unverified claims.", "claims": [ { "id": "UG-DP-C1", "pillar": "data-protection", "statement": "Uganda's Data Protection and Privacy Act, 2019 (now revised as Cap. 97) was assented to on 25 February 2019 and commenced on 3 May 2019, with its implementing Regulations effective 12 March 2021.", "sourceIds": [ "ulii-dppa-metadata", "dlapiper-handbook-uganda" ], "state": "verified", "note": "Official depository metadata (ULII) and DLA Piper handbook agree. Conflict resolved: Legal500 states commencement 1 March 2019 - rejected as a secondary-source error; the gazette date 3 May 2019 controls." }, { "id": "UG-DP-C2", "pillar": "data-protection", "statement": "The Act applies extraterritorially: it covers a person, institution or public body outside Uganda who collects, processes, holds or uses personal data relating to Ugandan citizens (s.1).", "sourceIds": [ "cipesa-google-decision", "dlapiper-pm-offshore" ], "state": "verified", "note": "CIPESA quotes the statutory text; DLA Piper reports the PDPO's own confirmation. Statute text capture-pending (ULII gate) - state self-upgrades on full-text capture." }, { "id": "UG-DP-C3", "pillar": "data-protection", "statement": "Every data collector, processor or controller must register with the Personal Data Protection Office (s.29) and renew registration annually; the duty applies to foreign entities handling Ugandans' personal data until an exemption is gazetted.", "sourceIds": [ "cipesa-google-decision", "dlapiper-pm-offshore" ], "state": "verified", "note": "Duty-level claim verified by two independent reports of the PDPO decision and the statute. Fee/portal mechanics deliberately split into UG-DP-C4 (weaker evidence)." }, { "id": "UG-DP-C4", "pillar": "data-protection", "statement": "Registration is completed online via the PDPO portal (Form 2 application plus Form 3 cross-border undertaking), fee UGX 100,000, typically 4-7 working days for initial registration.", "sourceIds": [ "dlapiper-pm-offshore", "pdpo-register-portal" ], "state": "partially-verified", "note": "Single Tier-3 source; the PDPO portal itself (pdpo.go.ug/register) was unreachable on 2026-09-22. Verify fees/SLA against the portal or the Regulations before citing operationally. Editorial ruling 2026-09-22 (delegated): kept split from UG-DP-C3 - the legal duty and the operational mechanics have different evidence bases and upgrade paths; folding would misdescribe the duty's verified position." }, { "id": "UG-DP-C5", "pillar": "data-protection", "statement": "Cross-border transfer or storage of personal data outside Uganda requires either data-subject consent or adequate protection in the recipient country at least equivalent to the Act (s.19); no advance approval per transfer is required, but records of the legal basis and safeguards must be maintained and produced on audit.", "sourceIds": [ "cipesa-google-decision", "dlapiper-pm-offshore" ], "state": "verified", "note": "s.19 text quoted by CIPESA; the no-pre-approval clarification is the PDPO's own position reported by DLA Piper. Material to colocation operators serving cross-border workloads (e.g. Kampala-Nairobi replication paths)." }, { "id": "UG-DP-C6", "pillar": "data-protection", "statement": "In a decision of 18 July 2025 (Ssekamwa Frank & 3 Others v Google LLC, Complaint No. 08/11/24/6683), the PDPO found Google LLC in breach of ss.29 and 19 and ordered registration, designation of a data protection officer, and production of a cross-border transfer compliance framework within 30 days - confirming the Act reaches foreign entities with no physical presence in Uganda.", "sourceIds": [ "pdpo-decision-google-2025", "cipesa-google-decision", "dlapiper-pm-offshore" ], "state": "verified", "note": "Primary instrument (the decision itself) is capture-pending - not published on the regulator site; two independent reports agree on the findings and the complaint number. If either report is later contradicted, this claim degrades." }, { "id": "UG-LC-C1", "pillar": "licensing", "statement": "The Uganda Communications Commission's statutory mandate covers telecommunications, broadcasting, radio communication, postal communications, data communication and infrastructure.", "sourceIds": [ "ucc-telecom-licensing-page" ], "state": "verified", "note": "Captured from the official UCC page itself." }, { "id": "UG-LC-C2", "pillar": "licensing", "statement": "Uganda's technology-neutral licensing framework (introduced 2019/2020 under the Uganda Communications (Licensing) Regulations, 2019) replaced the earlier PIP/PSP classes with principal categories including National Telecom Operator (NTO), National Public Service Provider (NPSP), Regional Public Service Provider (RPSP) and Regional Public Infrastructure Provider (RPIP), plus authorisations for capacity resale and value-added services.", "sourceIds": [ "gle-telecom-licensing", "ucc-licensing-page", "ucc-licence-description" ], "state": "verified", "note": "Framework legal basis now T1-anchored (UCC licensing page: categories established under ss.5,6,21,22,24,25 + Regulations). The principal-class enumeration (NTO/NPSP/RPSP/RPIP, resale/VAS) still rests on the Tier-3 guide; the definitive 'Description of Telecom Licenses and Authorizations' document - now located, linked from the captured UCC page - remains uncaptured. Upgrade path: fetch that document. | r10 upgrade: official UCC licence-class descriptions PDF (T1, captured 2026-09-22) enumerates the principal categories." }, { "id": "UG-LC-C3", "pillar": "licensing", "statement": "Infrastructure companies building data-centre assets for use by licensed operators fall within UCC's licensing regime and must apply for the matching licence class.", "sourceIds": [ "gle-telecom-licensing", "ucc-licensing-page", "ucc-licence-description" ], "state": "partially-verified", "note": "Statutory anchor improved: s.22 verbatim via the regulator's own page ('a person shall not ... construct, maintain or operate telecommunications apparatus without a licence'); UCC mandate explicitly covers data communication and infrastructure. The 'matching licence class' mapping for data-centre assets remains Tier-3-interpreted pending the Description document. Upgrade path: fetch that document; also check Raxio's regulatory disclosures.", "publicationHold": "Editor ruling 2026-09-22 (delegated): do NOT cite publicly - not even with state attribution - until a Tier 1/2 UCC instrument (Description of Telecom Licenses and Authorisations or the Licensing Regulations text) confirms it. A licensing-requirement claim that later proves wrong creates compliance misinformation for readers and operators; silence is the safer failure mode." }, { "id": "UG-LC-C4", "pillar": "licensing", "statement": "UCC licence applications require Ugandan legal personality, a physical business address, a Tax Identification Number with tax clearance, and demonstrated financial and technical capacity (business/technical plans, audited financials or capitalisation proof).", "sourceIds": [ "gle-telecom-licensing" ], "state": "partially-verified", "note": "Single Tier-3 guide referencing the official UCC requirements document; instrument capture-pending." }, { "id": "UG-AI-C1", "pillar": "ai-digital-policy", "statement": "Uganda's Digital Transformation Roadmap (FY2023/24-2027/28) lists development of reliable digital infrastructure - including high-speed broadband networks, data centres and cloud computing capabilities - as a priority.", "sourceIds": [ "ict-roadmap" ], "state": "partially-verified", "note": "Official government domain snippet explicitly names data centres; full document fetch gated. Direct official mention of data-centre infrastructure - upgrade on PDF capture." }, { "id": "UG-AI-C2", "pillar": "ai-digital-policy", "statement": "The Digital Uganda Vision (DUV) is the overarching 20-year ICT development framework aligned to Uganda Vision 2040, harmonising the country's ICT policies.", "sourceIds": [ "nita-digital-government", "ict-digital-vision-pdf" ], "state": "verified", "note": "Official NITA-U framing captured from snippet; strategy page fetch gated. | r10 upgrade: official DUV PDF (T1, Ministry of ICT, captured 2026-09-22) evidences the framework and its Vision 2040 alignment." }, { "id": "UG-TX-C1", "pillar": "tax-incentives", "statement": "Investors in Uganda can access tax incentives through the Uganda Investment Authority and the Uganda Free Zones Authority, including a 10-year income tax holiday for qualifying foreign investment.", "sourceIds": [ "us-state-ics-2025", "ulii-investment-code-2019", "ulii-free-zones-act-2014", "gt-ug-ita-cap340", "pwc-uganda-tax-summaries" ], "state": "verified", "note": "Non-Ugandan official assessment (Tier 3 for our purposes); UIA/UFZA primary instruments not yet captured. No data-centre-specific incentive verified - any DC-specific treatment remains unverified. | r11 upgrade (editor-delegated 2026-09-23): Investment Code Act 2019 (T1, ULII) captured: s.12 sets incentive qualification (minimum capital, Schedule 2 priority areas, 80% export criterion, 60% citizen employment), s.13 provides the Authority's certificate of incentives, and the Uganda Free Zones Authority is named in s.4 definitions. Free Zones Act 2014 s.48 (T1) confirms exemptions from taxes and duties on EPZ imported inputs. However, neither captured instrument contains the 10-year income tax holiday: the Code defers to 'qualifications for incentives set out in any other law' and the captured Free Zones Act is the 2014 original. The holiday (T3: PwC tax summaries confirm availability to 80%+ exporters) lives in the Income Tax Act as amended - claim remains partially-verified pending that instrument's capture. | r12 upgrade (editor-approved conditional on verification, 2026-09-23): Income Tax Act Cap 340 s.21(1)(y) - 'the income of a person derived from the exportation of finished consumer and capital goods for a period of ten years', with the 80% export condition (para (aa)) and the prescribed-conditions/certificate regime ((ab),(ac); inserted by IT (Am) Act 2008) - captured via a Grant Thornton/ULRC-based full-text reproduction (T2); the operationalising 2009 Regulations are in the same capture; PwC current edition (T3) corroborates the ten-year/80% terms. Verified under 'two independent corroborating sources'; the official ULII consolidation remains the confirmation target (fetch-blocked 2026-09-23). The holiday is sector-agnostic statute text - any data-centre-specific treatment remains unverified." } ] }, "rwanda": { "name": "Rwanda", "iso": "RW", "directoryFacilities": 1, "facilitiesNote": "ADC Kigali KGL1 (facility record under editorial hold in the facility evidence dataset - policy claims here are independent of that hold)", "regulators": { "communications": "Rwanda Utilities Regulatory Authority (RURA)", "dataProtection": "National Cyber Security Authority (NCSA) / Data Protection and Privacy Office (DPO)", "investment": "Rwanda Development Board (RDB)", "ict": "Ministry of ICT and Innovation / RISA" }, "pillarGaps": [ { "pillar": "energy-electricity", "gap": "No claims researched yet (REG/EUCL tariff classes, power-availability policy for large loads)", "expectedSources": [ "REG/EUCL published tariffs", "Ministry of Infrastructure instruments" ], "upgradePath": "Fetch tariff schedules in the energy increment" }, { "pillar": "construction-building", "gap": "No claims researched yet (Rwanda Building Code application to DCs, Kigali City permitting)", "expectedSources": [ "Rwanda Building Code", "Kigali City One Stop Centre for construction" ], "upgradePath": "Deferred to a later increment" }, { "pillar": "environmental", "gap": "No claims researched yet (REMA EIA requirements for large facilities)", "expectedSources": [ "Rwanda Environment Management Authority (REMA)", "Environment Law No 48/2018" ], "upgradePath": "Deferred to a later increment" }, { "pillar": "cross-border-data-flows", "gap": "Strong national coverage (Art. 48/50); EAC-level instruments pending", "expectedSources": [ "EAC Data Protection & Privacy Policy (2021)" ], "upgradePath": "Regional comparison phase" }, { "pillar": "regional-frameworks", "gap": "EAC harmonisation instruments not yet researched", "expectedSources": [ "EAC Secretariat instruments", "national ratification records" ], "upgradePath": "Regional comparison phase (editor sequencing)" } ], "investigatedAt": "2026-09-22", "investigationNote": "Second country through the policy pipeline. Evidence quality higher than Uganda's round because the Tier-1 instruments were directly fetchable: RURA licensing regulation full text (59pp PDF), Law 058/2021 official gazette text (82pp PDF), DPO services site, RDB incentive page. 11 of 13 claims verified from verbatim instrument text; the two partially-verified claims rest on snippet-level official sources. Material differences vs Uganda now anchored at Tier 1: prior authorisation for cross-border transfer (Art. 48) and default in-country storage (Art. 50) vs Uganda's records-based s.19 regime; explicit DC licence class with tiered fees vs Uganda's unnamed-category ambiguity.", "claims": [ { "id": "RW-LC-C1", "pillar": "licensing", "statement": "RURA Regulation No 013/R/EC-ICT/RURA/2021 of 25/02/2021 governs licensing in Rwanda's electronic communications sector and came into force on the day of its publication in the Official Gazette.", "sourceIds": [ "rura-licensing-regulation" ], "state": "verified", "note": "Full official PDF captured (59pp): 'Article 48: Commencement - This regulation comes into force on the day of its publication in the official gazette'; signed Kigali 25/02/2021 (Dr Ignace Gatare, Chairperson of the Regulatory Board)." }, { "id": "RW-LC-C2", "pillar": "licensing", "statement": "The Regulation issues licences in three categories - network infrastructure, network services, and application services (Art. 9) - through three types: individual licences (issued by auction to a National Telecommunication Operator), standard licences, and general authorisations (Art. 6-8).", "sourceIds": [ "rura-licensing-regulation" ], "state": "verified", "note": "Verbatim from captured text: 'The Regulatory Authority issues the licenses to operators who provide the following services: 1. Network infrastructure; 2. Network services; and 3. Application services.'" }, { "id": "RW-LC-C3", "pillar": "licensing", "statement": "Data centres are an explicitly named licence class in Rwanda: under Annex One Category 3 (Application Service Providers), a data centre not holding an ISP or NTO licence pays USD 100 application / USD 2,000 licence fee on a standard 5-year licence (facility Tiers One and Two), or USD 1,000 / USD 10,000 on a standard 15-year licence (facility Tiers Three and Four and plus).", "sourceIds": [ "rura-licensing-regulation" ], "state": "verified", "note": "The claim Uganda's dataset could not yet verify at Tier 1 (cf. UG-LC-C3, on publication hold). Rwanda's regulator names data centres in the fee schedule with tier-differentiated pricing. Operator-material: ADC Kigali KGL1 and any future Rwanda records fall here. Fee amounts as printed in the captured PDF; re-verify against current RURA schedule before advising on costs." }, { "id": "RW-LC-C4", "pillar": "licensing", "statement": "Network Infrastructure Provider licensees must own, operate or provide any form of active or passive physical infrastructure used for carrying or providing services, applications and content (Art. 10).", "sourceIds": [ "rura-licensing-regulation" ], "state": "verified", "note": "Verbatim captured. Context for colocation/interconnection analysis: passive infrastructure (ducts, dark fibre) sits inside the licensed scope." }, { "id": "RW-DP-C1", "pillar": "data-protection", "statement": "Rwanda's data protection law is Law No 058/2021 of 13/10/2021 relating to the protection of personal data and privacy, officially gazetted on 15 October 2021.", "sourceIds": [ "risa-law-058-2021", "risa-dp-page", "dataguidance-rwanda" ], "state": "verified", "note": "Official gazette PDF captured (82pp bilingual, header 'Official Gazette n° Special of 15/10/2021'); RISA page and DataGuidance corroborate." }, { "id": "RW-DP-C2", "pillar": "data-protection", "statement": "A person who intends to be a data controller or a data processor must register with the supervisory authority (Art. 29).", "sourceIds": [ "risa-law-058-2021" ], "state": "verified", "note": "Verbatim captured. Practice detail: registration administered through the NCSA/DPO; transitional compliance window ended 15 October 2023 (RW-DP-C6)." }, { "id": "RW-DP-C3", "pillar": "data-protection", "statement": "Cross-border sharing or transfer of personal data outside Rwanda is permitted only if the controller/processor has (1) obtained authorisation from the supervisory authority after providing proof of appropriate safeguards, or (2) the data subject's consent, or (3) necessity grounds (contract performance, public interest, legal claims, vital interests) (Art. 48).", "sourceIds": [ "risa-law-058-2021" ], "state": "verified", "note": "Verbatim captured from the official gazette text. MATERIAL DIFFERENCE vs Uganda: Uganda's PDPO confirmed no advance approval is required (records-based regime; UG-DP-C5). Rwanda requires prior authorisation as the first branch." }, { "id": "RW-DP-C4", "pillar": "data-localisation-sovereignty", "statement": "Personal data must be stored in Rwanda; storage outside Rwanda is only permitted if the controller/processor holds a valid registration certificate authorising storage outside Rwanda, issued by the supervisory authority (Art. 50).", "sourceIds": [ "risa-law-058-2021", "dpo-gov-rw" ], "state": "verified", "note": "Verbatim captured; the DPO's official services menu ('Authorization to Store Outside Rwanda') corroborates operationally. MATERIAL DIFFERENCE vs Uganda: no equivalent default-localisation provision captured in Uganda's Act. Direct colocation-demand driver for in-country Rwandan facilities." }, { "id": "RW-DP-C5", "pillar": "data-protection", "statement": "The National Cyber Security Authority (NCSA) is the designated supervisory authority under the Data Protection Law, and the Data Protection and Privacy Office (DPO) administers registration and authorisations under it.", "sourceIds": [ "dataguidance-rwanda", "dpo-gov-rw" ], "state": "verified", "note": "DataGuidance names NCSA as designated supervisory authority; the official DPO site shows registration 'with NCSA' and the authorisation services. The law text itself uses the generic term 'supervisory authority'." }, { "id": "RW-DP-C6", "pillar": "data-protection", "statement": "The transitional period for data controller/processor registration ended on 15 October 2023, after which registration became mandatory without the transition window.", "sourceIds": [ "cyber-gov-dpo", "dpo-rw-registration-page", "dlapiper-africa-rw-deadline" ], "state": "partially-verified", "note": "Transition-deadline fact (15 Oct 2023) remains snippet-sourced (NCSA T1 snippet + DLA Piper T3). Capture mission 2026-09-22 added the operative T1: DPO registration services page confirms mandatory controller/processor registration is actively operated. Upgrade path: capture an NCSA/DPO announcement or gazette notice restating the transition-end date." }, { "id": "RW-TX-C1", "pillar": "tax-incentives", "statement": "A registered investor investing at least USD 50,000,000 (with at least 30% equity) in qualifying sectors - including Information and Communication Technology (excluding ICT retail/wholesale trade, ICT repair, and telecommunications) - is entitled to a corporate income tax holiday of up to seven years.", "sourceIds": [ "rdb-one-stop-centre" ], "state": "verified", "note": "Verbatim captured from RDB's official One Stop Centre page. A large data-centre campus could qualify under ICT, but 'telecommunications' exclusion needs care for operator-affiliated facilities - interpretation deferred to the article layer." }, { "id": "RW-TX-C2", "pillar": "tax-incentives", "statement": "An international company with its headquarters or regional office in Rwanda is entitled to a 0% preferential corporate income tax rate if it invests at least USD 10,000,000 in tangible and intangible assets and provides employment and training to Rwandans.", "sourceIds": [ "rdb-one-stop-centre" ], "state": "verified", "note": "Verbatim captured. Regional-HQ path relevant to pan-African DC operators choosing Kigali." }, { "id": "RW-AI-C1", "pillar": "ai-digital-policy", "statement": "Rwanda's ICT Sector Strategic Plan (2024-2029) aligns with the Smart Rwanda Master Plan (SRMP II) and its core pillars (Digital Business, Digital Citizen), under the 30-year Vision 2050 agenda.", "sourceIds": [ "minict-ssp-2024-2029", "minict-ssp-2024-2029-pdf" ], "state": "verified", "note": "Official-domain snippets only (minict.gov.rw / minecofin.gov.rw); SSP PDF capture pending. Any explicit 'data centre' language in the SSP awaits full-text capture. | r11 upgrade (editor-delegated 2026-09-23): SSP 2024-2029 full text (T1 PDF, minict.gov.rw) captured: 'The SSP is based on three foundational pillars from SRMP II: Digital Business, Digital Citizen, and Digital Government'; alignment passage names NST2 (2024/25-2028/29), SRMP II (2024-2028), DTS (2020-2030), Vision 2050, AU Agenda 2063 and SDGs. SSP additionally evidences data-centre-specific policy content: planned EUCL framework to categorise data centres under industrial tariffs (electricity-cost halving rationale), 50% hosting-price reduction at the National Data Center, 2023 data-centre and cloud service directives, and an explicit action to 'Invest in building and upgrading secure data centers'." } ] }, "tanzania": { "name": "Tanzania", "iso": "TZ", "directoryFacilities": 1, "facilitiesNote": "Raxio Dar es Salaam TZ1 (raxio-dar-es-salaam-tz1)", "regulators": { "communications": "Tanzania Communication Regulatory Authority (TCRA)", "dataProtection": "Personal Data Protection Commission (PDPC)", "investment": "Tanzania Investment and Special Economic Zones Authority (TISEZA)", "energy": "Energy and Water Utilities Regulatory Authority (EWURA)", "environment": "National Environment Management Council (NEMC)", "tax": "Tanzania Revenue Authority (TRA)" }, "pillarGaps": [ { "pillar": "licensing", "gap": "No data-centre-named licence category captured in Tanzania's convergence framework (vs Rwanda's explicit Annex One Cat. 3); EPOCA 2010 text now captured via CIPIT reproduction (arrangement of sections; s.5 licence-type detail not yet page-walked)", "expectedSources": [ "EPOCA 2010 s.5 licence-type detail (CIPIT viewer page-walk or official mirror)", "TCRA register CSV export" ], "upgradePath": "Register CSV pull to enumerate licence types; statute text via alternate mirrors" }, { "pillar": "energy-electricity", "gap": "Electricity Act 2008 thresholds (generation/captive-power licence exemptions, large-load connection) not yet captured", "expectedSources": [ "Electricity Act 2008 full text", "EWURA licence application guidelines", "TANESCO tariff schedule for large power users" ], "upgradePath": "Energy increment: fetch Act text + TANESCO tariff books" }, { "pillar": "construction-building", "gap": "Not researched (building permits, Contractors Registration Board rules for DC construction)", "expectedSources": [ "Local Government (Urban Authorities) permit rules", "CRB registration requirements" ], "upgradePath": "Deferred to a later increment" }, { "pillar": "environmental", "gap": "EMA 2004 First Schedule (EIA trigger list) text pending - whether DC-scale load requires full EIA unconfirmed", "expectedSources": [ "Environmental Management Act 2004 full text", "EIA Regulations 2005", "eia.nemc.or.tz portal" ], "upgradePath": "Fetch EMA 2004 + EIA Regs (nemc.or.tz uploads, faolex mirrors)" }, { "pillar": "ai-digital-policy", "gap": "Digital Tanzania programme texts not researched; null finding: National Development Vision 2050 (captured, 78pp) contains no explicit data-centre mention", "expectedSources": [ "Digital Tanzania Strategic Framework", "National ICT Policy" ], "upgradePath": "Policy-document sweep in the AI/digital increment" }, { "pillar": "cross-border-data-flows", "gap": "Strong national coverage (s.31/32 + permit machinery); EAC-level instruments pending", "expectedSources": [ "EAC Data Protection & Privacy Policy (2021)" ], "upgradePath": "Regional comparison phase" }, { "pillar": "regional-frameworks", "gap": "EAC harmonisation instruments not yet researched; EAC CET 2022 (captured, T1) is the first shared regional instrument in the dataset", "expectedSources": [ "EAC Secretariat instruments", "EAC Data Protection & Privacy Policy" ], "upgradePath": "Regional comparison phase (editor sequencing)" } ], "investigatedAt": "2026-09-22", "investigationNote": "Third country through the policy pipeline and the strongest capture round: the regulator itself hosts the PDPA 2022 full text (42pp), the 2023 Registration Regulations (38pp with the tiered fee schedule), and the live Cross-Border Data Transfer Permit service page; TISEZA hosts the consolidated Investment and SEZ Act (Cap. 38); TRA hosts the EAC CET 2022. 14 of 17 claims verified from Tier-1 instrument text. Tanzania/Rwanda both operate pre-approval cross-border models (PDPC permits; RURA/NCSA authorisations) vs Uganda's records-based regime - the clearest three-way material difference so far. Null finding recorded: Vision 2050 names no data centres. TCRA's convergence framework shows no DC-named licence category (gap, not negative claim).", "claims": [ { "id": "TZ-LC-C1", "pillar": "licensing", "statement": "The Tanzania Communication Regulatory Authority Act of 2003 established TCRA as the converged independent regulator for the postal, broadcast and communications sectors, with a convergence licensing framework and responsibility for licensing operators.", "sourceIds": [ "bowmans-ea-data-infra", "tcra-licenses-page" ], "state": "verified", "note": "Bowmans analysis (T2) + TCRA's own live register (T1, two distinct publishers). Convergence-licensing model: one regulator, category-based licences." }, { "id": "TZ-LC-C2", "pillar": "licensing", "statement": "The Electronic and Postal Communications Act of 2010 (EPOCA) provides the comprehensive regulatory regime for electronic communications service providers and postal communications service providers in Tanzania.", "sourceIds": [ "bowmans-ea-data-infra", "epoca-act-text-cipit" ], "state": "verified", "note": "Statute text now captured: CIPIT full-text reproduction (T2, incl. Arrangement of Sections and Part II(a) Licensing headings) alongside Bowmans EA data-infrastructure analysis (T2) - two independent publishers covering the comprehensive-regime structure. Editorial review (delegated, 2026-09-22): verified. Official-mirror capture (oagmis/tanzlii) would re-tier the statute source to T1." }, { "id": "TZ-LC-C3", "pillar": "licensing", "statement": "TCRA maintains a public, searchable register of licensed providers and certificates, organised by sector (Broadcasting / Postal & Courier / Telecommunications & Internet / Other / Security), with each entry carrying a licence categorisation and a typed licence number (e.g. class licence TCRA/CSRBFACL/01/2026, issued 2026-09-10).", "sourceIds": [ "tcra-licenses-page" ], "state": "verified", "note": "T1 register captured (T1 source suffices under the validator rule). No data-centre-named licence category was found in the framework descriptions captured - unlike Rwanda's RURA Annex One Cat. 3. Recorded as an explicit gap below, NOT claimed as a definitive negative; TCRA register CSV download is the upgrade path." }, { "id": "TZ-DP-C1", "pillar": "data-protection", "statement": "Tanzania's data protection law is the Personal Data Protection Act, 2022 (Act No 11 of 2022, GN No 395B), which establishes the Personal Data Protection Commission as a body corporate; regulator service pages now cite it as Chapter 44 (revised laws).", "sourceIds": [ "pdpc-act-pdf", "pdpc-act-page" ], "state": "verified", "note": "Full official Act PDF captured from the regulator itself (42pp): '6.-(1) There is established a Commission to be known as the Personal Data Protection Commission.'" }, { "id": "TZ-DP-C2", "pillar": "data-protection", "statement": "Registration is a strict precondition for processing: 'A person shall not collect or process personal data without being registered as a data controller or a data processor under this Act' (s.14(1)).", "sourceIds": [ "pdpc-act-pdf" ], "state": "verified", "note": "Verbatim from the captured official PDF. Directly operator-material: a Tanzanian data centre's processing activities fall inside this duty." }, { "id": "TZ-DP-C3", "pillar": "data-protection", "statement": "Registration mechanics (Regulations GN 449C): application on Form No. 1 with fees per the Second Schedule; the Commission verifies within seven days; rejection must be notified with reasons within fourteen days; registration is valid for five years; renewal is on Form No. 3, submitted within three months before expiry.", "sourceIds": [ "pdpc-regs-pdf" ], "state": "verified", "note": "Verbatim captured (Regs 4-8)." }, { "id": "TZ-DP-C4", "pillar": "data-protection", "statement": "Registration fees are tiered by scale (Second Schedule, TZS): small-scale (1-49 employees, turnover below TZS 100M) TZS 100,000 once / 50,000 renewal; medium (50-99 employees, TZS 100-500M) 200,000 / 150,000; large-scale (100+ employees, turnover above TZS 500M) 1,000,000 / 500,000 - renewal after every 5 years.", "sourceIds": [ "pdpc-regs-pdf" ], "state": "verified", "note": "Fee table verbatim captured. A typical commercial DC operator registers at the large-scale band." }, { "id": "TZ-DP-C5", "pillar": "data-protection", "statement": "Transfers to states with adequate protection (s.31): the Commission may prohibit transfer of personal data to a place outside the country; transfers to an adequate legal framework require necessity, the recipient to ensure safeguards, and a provisional evaluation of necessity by the controller.", "sourceIds": [ "pdpc-act-pdf" ], "state": "verified", "note": "Verbatim captured." }, { "id": "TZ-DP-C6", "pillar": "data-localisation-sovereignty", "statement": "The default rule for non-adequate destinations is restrictive (s.32): 'transfer of personal data to countries outside the United Republic is not authorised' except in enumerated cases (consent, necessity and others); operationally the PDPC 'Issues permits to entities intending to transfer personal data outside the country', assesses destination-country adequacy, requires safeguards prior to transfer, sets conditions and monitors/audits adherence.", "sourceIds": [ "pdpc-act-pdf", "pdpc-permit-page" ], "state": "verified", "note": "MATERIAL DIFFERENCE, both T1: Tanzania operates a pre-approval PERMIT regime (like Rwanda's Art. 48/50 authorisation model), vs Uganda's records-based regime with no advance approval (UG-DP-C5). Direct colocation-demand driver for in-country facilities." }, { "id": "TZ-DP-C7", "pillar": "data-protection", "statement": "Penalty scale (Part VII): for offence classes such as unlawful disclosure, destruction, deletion, concealment or alteration of personal data, an individual is liable to a fine of TZS 100,000 to 20,000,000 or imprisonment up to ten years, and a company or corporation to a fine of TZS 1,000,000 to 5,000,000,000; registration-related false information carries TZS 100,000 to 5,000,000 or up to two years.", "sourceIds": [ "pdpc-act-pdf" ], "state": "verified", "note": "Verbatim captured (ss.60-61 and s.19/s.63 cross-reference). The TZS 5 billion corporate ceiling is among the region's sharpest exposure figures." }, { "id": "TZ-TX-C1", "pillar": "tax-incentives", "statement": "TISEZA grants Certificates of Incentives and licences under Part III, Section 19(1-5) of the Investment and Special Economic Zones Act (Cap. 38); holders are entitled to the incentives stipulated in the Act.", "sourceIds": [ "tiseza-incentives-page", "tiseza-act-pdf" ], "state": "verified", "note": "Official TISEZA facilitation page + full statute PDF captured (two publisher expressions of the same authority)." }, { "id": "TZ-TX-C2", "pillar": "tax-incentives", "statement": "Enterprises in special economic zones receive: exemption from customs duties, VAT and other taxes on raw materials and capital goods used in production; exemption from corporate income tax for the first ten years; exemption from withholding tax on rent, dividends and interest for the first ten years; exemption from withholding tax on interest from foreign loans; and exemption from local-government taxes, fees and charges on goods produced in SEZs for the first ten years.", "sourceIds": [ "tiseza-act-pdf" ], "state": "verified", "note": "Verbatim captured from the Act's incentive list (s.20 area). No Tanzania-specific data-centre tax incentive was found in any captured instrument - recorded as an explicit gap; SEZ siting is the generic path." }, { "id": "TZ-TX-C3", "pillar": "tax-incentives", "statement": "The Act provides a strategic investor regime (s.21): the National Investment Development Committee recommends investment incentives for strategic investors and supervises major projects with significant national impact based on size, capital, technological benefits and employment.", "sourceIds": [ "tiseza-act-pdf" ], "state": "verified", "note": "Verbatim captured. The path a hyperscale AI campus would negotiate; criteria map cleanly onto data-centre investment profiles (interpretation deferred to article layer)." }, { "id": "TZ-TX-C4", "pillar": "tax-incentives", "statement": "Under the EAC Customs Union Common External Tariff (2022 version, updated June 2025), automatic data processing machines and units (HS 8471 - systems, processing units, input/output units, storage units) and electrical transformers/static converters (HS 8504) attract 0% import duty.", "sourceIds": [ "tra-cet-pdf" ], "state": "verified", "note": "T1 tariff schedule captured (577pp; ICT headings extracted). EAC-WIDE anchor: applies identically to Kenya, Uganda, Rwanda - a shared input-cost baseline for the regional comparison. Server/IT hardware enters duty-free across all four countries." }, { "id": "TZ-TX-C5", "pillar": "tax-incentives", "statement": "Non-resident digital services: Section 90A of the Income Tax Act taxes non-residents at 3% on payments received from individuals (not conducting business) for services through a digital marketplace, with Section 116(1) extending scope to all electronic services; Section 68(5) of the VAT Act lets non-residents register for VAT without a tax representative, operationalised by the Non-resident Electronic Service Providers Regulations 2022.", "sourceIds": [ "tra-dst-page" ], "state": "verified", "note": "T1 official TRA explainer, section-cited. Contextual for offshore-delivered cloud/colocation services vs in-country supply." }, { "id": "TZ-EN-C1", "pillar": "energy-electricity", "statement": "EWURA is the electricity sector regulator: its licensing and registration framework covers generation, transmission, distribution and supply, with dedicated power-purchase-agreement and compliance-monitoring processes and published licensee records.", "sourceIds": [ "ewura-licensing-page", "ewura-elec-infra-page", "ewura-acts-index", "ewura-act-cap414-pdf", "ewura-electricity-act-pdf" ], "state": "verified", "note": "Official regulator pages captured but navigation-dominant; Electricity Act 2008 text (captive-power thresholds, licensing categories) capture-pending. Capture mission 2026-09-22: EWURA general information page confirms the Infrastructure Licensing and Registration framework navigation; Act text not yielded. Upgrade path unchanged: EWURA instrument library / Electricity Act full text / TanzLII. | r10 upgrade: Cap 414 text confirms EWURA's electricity-sector mandate; Electricity Act Cap 131 text confirms the generation/transmission/distribution/supply licensing framework (both T1 PDFs on regulator domain, captured 2026-09-22)." }, { "id": "TZ-ENV-C1", "pillar": "environmental", "statement": "NEMC operates an active environmental-compliance regime: it publishes regulations (including the Registration and Practice of Environmental Experts Regulations 2021) and announces environmental certificates issued monthly (lists for July and August 2026 are live on its site).", "sourceIds": [ "nemc-regs-page", "nemc-certificates-2026" ], "state": "partially-verified", "note": "Regulator operations confirmed from official pages; the Environmental Management Act 2004 and its EIA First Schedule (whether a DC-scale facility triggers a full EIA) remain capture-pending. eia.nemc.or.tz portal is the operational entry point." } ] }, "kenya": { "name": "Kenya", "iso": "KE", "directoryFacilities": 27, "facilitiesNote": "Largest directory cohort (Nairobi 18, Kiambu 4, Mombasa 4, Machakos 1). Policy claims below are country-level; facility-level evidence lives in the facility evidence dataset.", "regulators": { "communications": "Communications Authority of Kenya (CA)", "dataProtection": "Office of the Data Protection Commissioner (ODPC)", "investment": "KenInvest / EPZ Authority / Special Economic Zones Authority (SEZA)", "energy": "Energy and Petroleum Regulatory Authority (EPRA)", "environment": "National Environment Management Authority (NEMA)" }, "pillarGaps": [ { "pillar": "licensing", "gap": "CA licensing instruments: the consultation-stage framework document is now CAPTURED (T1, 2026-09-24) but the final instrument is not yet issued - the roadmap targets framework finalisation and the consequential market-structure revision in FY2026/2027 with implementation FY2027/2028. The gazette/legal-notice text of the Revised Telecommunications Market Structure (KE-LC-C2's basis) remains uncaptured; the consultation document dates the revision 'April 2026' vs the CDH alert's 'gazetted 6 March 2026' - unresolved discrepancy.", "expectedSources": [ "Final CA data centre licensing framework (post-consultation instrument, FY2026/2027)", "Kenya Gazette / Kenya Law legal notice for the Revised Telecommunications Market Structure (March/April 2026)", "CA Knowledge Hub licence-class document (NFP/ASP class definitions)" ], "upgradePath": "Kenya Law route (kenyalaw.org curl-open; new.kenyalaw.org returned 403 2026-09-24) for the gazette notice to resolve the March/April discrepancy; request the final instrument via datacentres@ca.go.ke once issued; re-derive KE-LC-C2 on gazette text." }, { "pillar": "construction-building", "gap": "No research yet: building-code and county-permit regime for large industrial builds (National Building Code 2022, Nairobi City County approvals, physical planning) not captured", "expectedSources": [ "National Building Code 2022 (Kenya Bureau of Standards / works ministry)", "Nairobi City County development-permit framework", "Physical Planning Act 2019 text" ], "upgradePath": "Capture the Building Code 2022 and county permitting framework; add claims on permits relevant to data-centre builds" }, { "pillar": "ai-digital-policy", "gap": "Masterplan-level instruments not captured: National Digital Masterplan 2022-2032 and the Kenya AI Strategy (2025) documents are uncaptured; only the ministry's functions page is banked", "expectedSources": [ "National Digital Masterplan 2022-2032 PDF (ict.go.ke)", "Kenya National AI Strategy 2025-2030 PDF" ], "upgradePath": "Locate the two PDFs on ministry properties; capture and derive AI/digital-policy claims" } ], "investigatedAt": "2026-09-22", "investigationNote": "Round 1-3 capture mission 2026-09-22: Kenya Law AKN renders a JS shell (acts incl. DPA 2019, SEZ Act, EPZ Act, EMCA not captured); regulator/authority sites captured. Claims are therefore anchored on regulator operations (registers, procedures, licensing platforms) with statute-text upgrades pending.", "claims": [ { "id": "KE-LC-C1", "pillar": "licensing", "state": "verified", "statement": "The Communications Authority of Kenya (CA) is the converged regulator for Kenya's communications sector, licensing operators under published licensing procedures, with licensees carrying secondary number-assignment obligations to end users.", "sourceIds": [ "ca-licensing-procedures", "bowmans-ea-data-infra" ], "note": "CA's own licensing-procedures page (T1) + Bowmans EA data-infrastructure analysis (T2) - two distinct publishers. Class-level enumeration (NFP/ASP tiers, any DC-specific class) is a structured gap pending the CA instrument." }, { "id": "KE-DP-C1", "pillar": "data-protection", "state": "verified", "statement": "Kenya's data protection law is the Data Protection Act, 2019, and the Office of the Data Protection Commissioner (ODPC) is its supervisory authority, with the Act applying to data controllers and processors and conferring rights on data subjects.", "sourceIds": [ "odpc-home", "dlapiper-dataprotection-ke" ], "note": "Regulator's own site (T1 captured) states the DPA's scope and the ODPC's role; DLA Piper global guide (T3) corroborates. Act full text pending (Kenya Law JS shell) - section-level citations upgrade on capture." }, { "id": "KE-DP-C2", "pillar": "data-protection", "state": "verified", "statement": "Registration with the ODPC is mandatory for data controllers and processors, and the ODPC operates a live public register of registered data handlers showing registration numbers, handler type, county and Active/Expired status.", "sourceIds": [ "odpc-home", "odpc-handlers-register" ], "note": "Two T1 captures from the regulator: the 'Register as a Data Handler' gateway plus the live register (57k chars of rows, INST-... numbers). Registration regime demonstrably operated, not merely enacted." }, { "id": "KE-XB-C1", "pillar": "cross-border-data-flows", "state": "verified", "statement": "Kenya's DPA restricts cross-border transfers of personal data to conditions (consent, adequacy-style protection, safeguards) rather than prohibiting them outright.", "sourceIds": [ "dlapiper-dataprotection-ke", "kenyalaw-dpa-akn" ], "note": "Single T3 source pending statute text. Upgrade path: capture DPA 2019 transfer provisions (ss.48-49) from Kenya Law (AKN JS shell on 2026-09-22; retry Wayback with direct timestamped snapshot), then verify. | r10 upgrade: DPA statute text (T1 AKN capture, 2026-09-22) evidences the transfer-conditions regime (s.25(h): safeguards-or-consent limb)." }, { "id": "KE-LOC-C1", "pillar": "data-localisation-sovereignty", "state": "verified", "statement": "Kenya's regime imposes no general data-localisation mandate: in-country storage is not a blanket precondition, and cross-border movement is governed by the DPA's transfer conditions - materially lighter than Rwanda's registration-certificate-based storage rule.", "sourceIds": [ "dlapiper-dataprotection-ke", "kenyalaw-dpa-akn" ], "note": "Negative/material-difference claim, deliberately held at partially-verified: absence is asserted only until the DPA text is captured in full. Upgrade path: DPA 2019 full-text capture; cross-check against the ODPC guidance pages. | r10 upgrade: DPA statute text (T1, 2026-09-22) evidences conditions-not-prohibition; comparative limb rests on captured T1 instruments of both countries - flagged for editor eye." }, { "id": "KE-TX-C1", "pillar": "tax-incentives", "state": "verified", "statement": "Kenya's SEZ regime is administered by the Special Economic Zones Authority (SEZA), the regulator of both public and private SEZs, which administers SEZ enterprise licences and has gazetted zones including Naivasha, with ICT Parks and Business Service Parks as designated zone types.", "sourceIds": [ "sezauthority-root" ], "note": "T1 (authority's own site). The ICT-Park designation is the directly data-centre-relevant hook: zone-type carve-outs exist for ICT infrastructure and services. Rate specifics are a separate, partially-verified claim (KE-TX-C2)." }, { "id": "KE-TX-C2", "pillar": "tax-incentives", "state": "verified", "statement": "SEZ-registered enterprises in Kenya receive preferential corporate taxation (reduced CIT for an initial period) and relief on inputs, per the SEZ Act 2015 as amended.", "sourceIds": [ "bowmans-sez-amendments", "sezauthority-root", "kenyalaw-sez-act-2015" ], "note": "Rate/rest-of-regime detail rests on a T3 law-firm briefing (snippet) plus the authority's regime context (T1, silent on rates). SEZ Act 2015 text (Kenya Law JS shell) uncaptured - upgrade on Act capture; amendments noted by Bowmans must be reconciled with the consolidated text. | r11 upgrade (editor-delegated 2026-09-23): SEZ Act 2015 consolidated text (T1, Kenya Law) captured: s.35(1) grants licensed SEZ enterprises/developers/operators tax incentives as specified in the respective tax laws; s.35(2) enumerates exemptions (stamp duty, county advertisement/business-service fees, specified licences); s.35(5) limits incentives and tax benefits to ten years from licence issuance. Amendment history (Acts 38/2016 s.67, 4/2023 s.101, 20/2024 s.33) is cited inline in the consolidated text, reconciling the Bowmans amendment notes. Specific CIT rate rests in the Income Tax Act (rate-level capture optional; regime claim now T1-anchored)." }, { "id": "KE-TX-C3", "pillar": "tax-incentives", "state": "verified", "statement": "Kenya's EPZ regime is actively operated: EPZ commercial-enterprise licences, EPZ Business Service Permits and EPZ manufacturing licences are administered through the official KenInvest eProcedures platform, alongside investment-incentive and capital-deduction procedures.", "sourceIds": [ "investkenya-eprocedures", "policyvault-epz" ], "note": "T1 government platform capture shows the licence types and procedures in operation; PolicyVault lists the EPZ Act. Holiday/duty specifics are a separate partially-verified claim (KE-TX-C4)." }, { "id": "KE-TX-C4", "pillar": "tax-incentives", "state": "verified", "statement": "EPZ enterprises in Kenya receive time-bound tax holidays and duty/VAT relief on inputs for export-oriented production under the EPZ Act (Cap 517).", "sourceIds": [ "policyvault-epz", "investkenya-eprocedures", "kenyalaw-epz-act-cap517" ], "note": "Specifics (10-year holiday, subsequent rates) rest on snippet-grade sources; the official procedures platform confirms incentives exist but not their terms. Upgrade path: EPZ Act (Cap 517) text capture, then verify with section citations. | r11 upgrade (editor-delegated 2026-09-23): EPZ Act (Cap 517; No. 12 of 1990) consolidated text (T1) captured: Part VIII s.32 - exemption from income tax for the first ten years from date of first sale as an EPZ enterprise, with the rate limited to 25% for the ten years following; duty and VAT exemptions on EPZ imports (machinery, spare parts, raw materials, intermediate goods, construction materials); withholding tax exemption on non-resident payments during the holiday; licence grant conditioned on producing goods or services for export. Snippet-grade specifics (10-year holiday, duty/VAT relief) now confirmed verbatim in the statute." }, { "id": "KE-EN-C1", "pillar": "energy-electricity", "state": "verified", "statement": "The Energy Act, 2019 is Kenya's electricity-sector statute and EPRA the sector regulator, operating electricity and renewable-energy licensing regimes (regulatory instruments, application guidelines, licence applications and public registers).", "sourceIds": [ "epra-energy-act-page" ], "note": "T1 regulator page. Narrow claim: regulator identity, statute name and operated licensing machinery. Act-text detail (captive-power thresholds, large-load connection terms) mirrors the TZ energy gap and stays an upgrade path, not a claim." }, { "id": "KE-ENV-C1", "pillar": "environmental", "state": "verified", "statement": "Kenya's environmental regime is actively administered by NEMA: environmental impact assessment (EIA) and strategic environmental assessment (SEA) reports are submitted and published, and environmental experts are registered with qualification requirements.", "sourceIds": [ "nema-home" ], "note": "T1 regulator capture showing the EIA/SEA machinery in operation (reports, experts register). EMCA 1999 statutory wording (s.58 obligation) uncaptured - upgrade path, not a separate claim until captured." }, { "id": "KE-AI-C1", "pillar": "ai-digital-policy", "state": "verified", "statement": "Kenya's digital-economy policy is driven by the Ministry of Information, Communications and the Digital Economy through the State Department for ICT and Digital Economy, whose delivery instruments include county connectivity (Last Mile) and Digital Literacy programmes.", "sourceIds": [ "ict-digital-economy" ], "note": "T1 ministry functions page. Masterplan 2022-2032 and the AI Strategy 2025-2030 remain structured gaps (documents uncaptured) - this claim covers only the institutional/delivery layer." }, { "id": "KE-RG-C1", "pillar": "regional-frameworks", "state": "verified", "statement": "Kenya, as an EAC Customs Union member, applies the EAC Common External Tariff (2022 version), under which automatic data-processing machines and units (HS 8471 - including servers and processing units) enter at 0% duty - the same EAC-wide anchor claimed for Tanzania, Uganda and Rwanda.", "sourceIds": [ "tra-cet-pdf" ], "note": "Reuses the T1 EAC CET instrument text captured from TRA (EAC-wide instrument; KRA is the implementing authority in Kenya). Customs-union membership is uncontroversial; section-level KE import-procedure detail is an upgrade path." }, { "id": "KE-LC-C2", "pillar": "licensing", "statement": "Kenya's Unified Licensing Framework contains no data-centre-specific licence category: co-location data centres are licensed under the Network Facilities Provider - Tier 2 category of the Revised Telecommunications Market Structure (gazetted 6 March 2026).", "sourceIds": [ "ca-licensing-procedures", "cdh-ke-tmt-alert-2026", "techafricanews-ke-dc-licence", "wmedia-ke-dc-licence", "ca-dc-licensing-framework-2026", "ca-open-consultations-2026" ], "state": "verified", "note": "r13 registration (editor instruction 'Work on the data set', 2026-09-24; humanGate delegation conditional on verification, r11/r12 precedent). Verified under 'two independent corroborating sources': CDH law-firm alert (T2) - 'the ULF Annex III licence table names Network Facilities Provider - Tier 2 as the category under which data centres are licensed'; Techafricanews (T3) - 'instead of regulating co-location data centres under the existing Network Facilities Provider-Tier 2 licence category'; w.media (T3) - 'As it stands, these operators are licensed under the Network Facilities Provider-Tier 2 (NFP-T2) category'. Single-source detail (CDH T2, upgrade path = capture the Annex III instrument): NFP-Tier 1 holders may rely on that nationwide infrastructure licence to operate a commercial data centre without an additional licence. r14 T1 upgrade (2026-09-24): primary instrument text now held and read in full (ca-dc-licensing-framework-2026, captured via Context.dev after the ca.go.ke JS challenge was diagnosed as route-specific). Standing humanGate delegation applies (r11-r13 precedent). Consultation document para 7 confirms verbatim: 'Under the current telecommunications market structure, co-location data centre operators are licensed under the Network Facilities Provider (NFP) - Tier 2 (NFP-T2) licence category.' DISCREPANCY FLAG (open, not reconciled): instrument para 6 dates the current market structure 'revised in April 2026' while the held T2 (CDH alert) says gazetted 6 March 2026 - possible gazette/revision date vs effective-date mismatch; Kenya Law gazette route open to resolve. Statement gazette date retained from T2 until the gazette text is captured." }, { "id": "KE-LC-C3", "pillar": "licensing", "statement": "On 8 September 2026 the Communications Authority of Kenya published a public notice opening a 30-day comment window on a proposal to introduce a standalone data centre licence category for co-location data centre operators, replacing the Network Facilities Provider - Tier 2 treatment.", "sourceIds": [ "cdh-ke-tmt-alert-2026", "techafricanews-ke-dc-licence", "wmedia-ke-dc-licence", "ca-dc-licensing-framework-2026", "ca-open-consultations-2026" ], "state": "verified", "note": "r13 registration (same delegation). Verified under 'two independent corroborating sources' (T2 + two T3s). CA notice rationale quoted via w.media: 'provide regulatory clarity, enhance visibility over data centre operations, support investment in digital infrastructure, and align Kenya's framework with proportionate approaches adopted in comparable jurisdictions'. Coverage per the notice: 'entities that provide colocation data centre services, including the attendant supporting services'. Basis per CDH: co-location operators provide hosting, power, cooling and storage infrastructure rather than telecommunications services. Single-source detail (w.media): implementation planned for the 2027/2028 financial year. Upgrade path: capture the CA public notice itself (ca.go.ke open-consultations JS-blocked 2026-09-24). Proposal-stage claim: may change or lapse during/after consultation. r14 T1 upgrade (2026-09-24): primary instrument text now held and read in full (ca-dc-licensing-framework-2026, captured via Context.dev after the ca.go.ke JS challenge was diagnosed as route-specific). Standing humanGate delegation applies (r11-r13 precedent). Instrument executive summary confirms verbatim: 'This consultation document proposes a standalone licence category for co-location data centre operators rather than placing co-location data centres under the Network Facilities Provider -Tier 2 licence category.' Scope confirmed: entities providing co-location data centre services 'including the attendant supporting services'. Rationale confirmed: regulatory visibility over critical digital infrastructure while avoiding over-application of NFP licensing requirements; competitive edge and investment attraction (paras 12-13). The regulator's own Open Consultations page (captured same day) carries the notice with submission channels and links the instrument." }, { "id": "KE-LC-C4", "pillar": "licensing", "statement": "The CA's proposed standalone data centre licence carries a proposed fee schedule: KSh 5,000 application fee, KSh 100,000 initial fee, and an annual operating fee of KSh 80,000 or 0.4 percent of gross annual turnover, whichever is higher.", "sourceIds": [ "wmedia-ke-dc-licence", "ca-dc-licensing-framework-2026", "ca-open-consultations-2026" ], "state": "verified", "note": "r13 registration (editor instruction 'Work on the data set', 2026-09-24). r14 upgrade (2026-09-24): primary instrument text now held and read in full (ca-dc-licensing-framework-2026, captured via Context.dev after the ca.go.ke JS challenge was diagnosed as route-specific). Standing humanGate delegation applies (r11-r13 precedent). Instrument para 16 confirms the schedule verbatim: 'Application fees - KShs.5,000; Initial fees - KShs.100,000; Annual Operating License fees - KShs. 80,000 or 0.4 per cent of the Annual Gross turnover, whichever is higher'; w.media T3 figures confirmed exact. Instrument additionally specifies licence term of 15 years (para 16(d)) and USF contribution at 0.5 percent of Annual Gross Revenue per section 84J(3) KICA Cap 411A (para 18) - held in note, not added to the statement scope. PROPOSAL-STAGE CAVEAT RETAINED: these are proposed fees tabled for consultation and may change before the framework is finalised (roadmap targets FY2026/2027 finalisation)." }, { "id": "KE-LC-C5", "pillar": "licensing", "state": "verified", "statement": "The CA's proposal permits entities that already hold Network Facilities Provider (NFP) or Application Service Provider (ASP) licences to establish and operate data centres without obtaining the proposed standalone data centre licence.", "sourceIds": [ "ca-dc-licensing-framework-2026" ], "note": "r14 registration (2026-09-24, standing humanGate delegation, T1 read in full). Verified on the primary instrument alone per the status vocabulary ('primary or two independent corroborating sources'): para 17 verbatim - 'Entities that have Network Facility Provider (NFP) or Application Service Provider (ASP) licences shall be permitted to establish and operate data centres without the need for a data centre licence.' Scope note: the exemption is part of the consultation proposal, not yet enacted; it materially narrows who the standalone licence would bind (incumbent NFP/ASP holders establishing their own facilities)." }, { "id": "KE-LC-C6", "pillar": "licensing", "state": "verified", "statement": "The CA's proposed roadmap targets finalisation of the data centre licensing framework and a consequential revision of the telecommunications market structure in FY2026/2027, with implementation of the licensing framework in FY2027/2028.", "sourceIds": [ "ca-dc-licensing-framework-2026" ], "note": "r14 registration (2026-09-24, standing humanGate delegation, T1 read in full). Verified on the primary instrument: para 19 + Table 1 rows 1-5 (framework FY2026/2027; public consultation FY2026/2027; finalisation FY2026/2027; consequential revision of the telecommunications market structure FY2026/2027; implementation FY2027/2028). Confirms the FY2027/2028 implementation timing previously held on w.media alone (T3, KE-LC-C4 note). The 'consequential revision' row corroborates that the market-structure change stripping NFP-T2 of data centres follows framework finalisation, not the consultation itself." } ] } }, "publicationPolicy": { "verified": "may be cited as fact in the interpretation layer (articles, profiles)", "partially-verified": "may be cited only with visible state attribution ('per one TMT practice guide; official instrument pending'); numeric/compliance-sensitive partially-verified claims should not carry operational weight", "capture-pending": "state reserved for claims whose evidence chain is blocked by an inaccessible source", "unverified": "not published as fact; may appear as an open question", "contradicted": "not published as fact; the conflict is explained if referenced", "publicationHold": "per-claim hold override: block all public citation regardless of state; used where a claim's failure mode creates real-world compliance risk (applies to UG-LC-C3)" }, "gapSchema": { "rule": "A pillar with no research yet is recorded as a structured gap - never as an unverified claim. Each gap names expected instruments/regulators and its upgrade path. Gaps are reviewed for staleness at every datasetVersion bump (editor ruling 2026-09-22)." } }