The Kenya Revenue Authority (KRA) has reaffirmed its commitment to protecting taxpayer data as it advances its digital transformation agenda. This assurance was given by KRA Commissioner General, Mr Humphrey Wattanga, during a meeting with the Departmental Committee on Finance and Economic Planning.
Mr Wattanga disclosed that the Authority is working hand in hand with the Office of the Data Protection Commissioner (ODPC) to implement a Data Minimisation Strategy aimed at reducing risks related to the handling of personal taxpayer information.
“This is part of the broader Digital Modernisation Strategy that KRA is pursuing under the 9th Corporate Plan,” said the Commissioner General. “We have already put in place immediate measures to swiftly disable loopholes on our portals that could be maliciously exploited to access personal taxpayer data. Our collaboration with the ODPC aims to ensure that we continuously improve the integrity of our systems, especially with regard to access to third-party data.”
This announcement follows KRA’s recent attainment of the ISO/IEC 27001:2022 certification for Information Security Management System. The certification underscores the Authority’s preparedness to uphold high standards of governance, data protection, and public accountability in the digital era.
KRA is currently implementing the first phase of its Digital Transformation Programme, which aims to overhaul the Authority’s IT infrastructure and establish a fully integrated digital ecosystem to facilitate real-time revenue collection and streamlined tax administration.
According to Mr Wattanga, KRA has also launched an Application Programming Interface (API) platform dubbed GAVA Connect. The platform enables collaboration with software developers and technology innovators to create user-friendly digital solutions that simplify taxation and encourage voluntary compliance.
In a further push for innovation, the Authority has begun piloting the application of Artificial Intelligence (AI) in the management of cargo scanners at border points across the country. This is intended to enhance the inspection and clearance of goods entering Kenya, thereby improving efficiency in trade facilitation.
As digital threats become more sophisticated, KRA’s renewed focus on data security signals a proactive shift towards building public trust in its modernised tax systems while ensuring compliance with national data protection laws.
