Data Privacy

Kenya's National Data Marketplace and the Future of Data Monetisation in Africa

By Charles Kariuki

For more than a decade, conversations about data governance in Africa have majorly centred on protection of personal information. Today, a different conversation is increasingly emerging.

How can governments unlock economic value from the vast amounts of data they collect every day?

That question sits at the heart of Kenya's proposed National Data Marketplace, an ambitious digital governance initiative. Through the Draft Final National Data Governance Policy, the Kenyan government proposes to commercialise certain categories of anonymised and aggregated public-sector data generated through platforms such as eCitizen and other government systems.

The proposal has generated intense public debate. Supporters view it as an innovative mechanism for driving economic growth and funding public digital infrastructure. Critics, however, warn that it raises difficult questions about privacy, undermining digital sovereignty, ownership, consent, and the commodification of citizen-generated information. Beyond Kenya, the proposal signals a growing continental shift from data protection to data assetization.

Why Kenya is pursuing a Data Marketplace

The government's proposal did not emerge in isolation. Over the last decade, Kenya has invested heavily in digitising public services. Through eCitizen and other digital government platforms, millions of transactions are now conducted electronically, generating vast quantities of information relating to business registrations, land transactions, vehicle registrations, demographic trends, public service usage, transport flows and economic activity. Traditionally, such information has been viewed primarily as an administrative resource. The Draft National Data Governance Policy adopts a different perspective treating non-personal public-sector data as a strategic national asset capable of generating economic value when responsibly shared with businesses, researchers, innovators, and policymakers.

Under the proposal, the government seeks to establish a structured marketplace through which approved users can access anonymised datasets under licensing arrangements. The policy expressly prohibits the sale of personally identifiable information such as names, national identification numbers, telephone numbers, biometric identifiers, and other personal data protected under the Data Protection Act, 2019. The objective is to transform public data into a productive economic resource while maintaining privacy protections.

From Data Protection to Data Assetization

Kenya's proposal reflects a broader evolution in African data governance. Between 2010 and 2020, most African countries focused primarily on privacy regulation. Laws such as the Data Protection Act, 2019 in Kenya, the Protection of Personal Information Act (POPIA) in South Africa, and the Nigeria Data Protection Regulation were designed to protect citizens from misuse of personal information, regulate cross-border transfers, and establish accountability frameworks for data controllers.

This period can be described as the era of defensive data governance. Data was largely viewed as a legal risk requiring protection from abuse.

A new policy narrative is now emerging.

Governments increasingly recognise that data is not merely something to be protected but an economic resource capable of generating revenue, supporting AI development, improving public services, and strengthening digital competitiveness. This shift, often described as data assetization, focuses on creating value from aggregated, anonymised, and non-personal datasets while preserving individual privacy rights.

The change is being driven by three interconnected realities. First, governments are searching for new sources of non-tax revenue in increasingly constrained fiscal environments. Second, emerging technologies such as AI require large volumes of high-quality data to function effectively. Countries seeking to develop local innovation ecosystems must ensure domestic firms have access to relevant datasets. Third, policymakers are becoming increasingly concerned about digital sovereignty. African data is often collected, processed and monetised by foreign technology companies, with much of the resulting economic value leaving the continent. Governments are therefore exploring mechanisms to retain a greater share of that value within local economies.

Is Kenya alone?

While Kenya's proposed marketplace appears to be among the continent's most explicit attempts to commercialise public-sector datasets, several African countries are pursuing related strategies aimed at deriving economic value from data.

In South Africa, the National Policy on Data and Cloud recognises data as a strategic national resource and promotes the development of data-based goods and services. The country has also piloted MzansiXchange, a secure framework for inter-governmental data sharing designed to improve interoperability and unlock value from public information systems.

Nigeria's National Data Strategy similarly treats data as a foundational component of the digital economy, focusing on data sovereignty, usability, and value creation within domestic markets.

Ghana has modernised its open-data infrastructure to encourage economic reuse of public information through developer-friendly platforms and APIs.

Elsewhere, countries such as Rwanda, Botswana, and Côte d'Ivoire are investing in data-sharing ecosystems, regulatory sandboxes, interoperable government platforms, and sector-specific data hubs designed to support innovation and economic growth.

What distinguishes Kenya is the explicit proposal to create a formal marketplace through which that value may be realised.

What this could mean for the Kenyan economy

If implemented effectively, the economic implications could be significant. Access to high-quality public datasets can lower barriers to innovation for startups, researchers, and local technology companies. Instead of spending substantial resources collecting information independently, businesses can build products and services using reliable government-generated data.

AI development could particularly benefit. Local developers often struggle to access datasets that accurately reflect African realities. Structured access to anonymised public information could help build more relevant AI models for agriculture, healthcare, transport, financial services, and urban planning.

The proposal may also stimulate investment in data-driven industries, improve evidence-based policymaking, and create opportunities for new public-private partnerships centred on digital innovation. More broadly, the initiative aligns with global recognition that data has become a critical economic input comparable to infrastructure, capital, and natural resources.

The privacy question

The economic opportunity is only one side of the story. The proposal's success will ultimately depend on public trust. The government's position is that only anonymised and aggregated data will be made available. Once personal identifiers are removed, the information can be used without compromising individual privacy.

Privacy advocates remain unconvinced. Advances in machine learning and data analytics have demonstrated that seemingly anonymous datasets can sometimes be re-identified when combined with other information sources. A dataset that appears harmless in isolation may reveal individual identities when cross-referenced with publicly available records.

This raises difficult legal questions including, Who bears responsibility if a commercialised dataset is later re-identified? What standards of anonymisation should be applied? How can regulators ensure that private entities do not misuse publicly obtained information? These concerns become even more significant given the increasing sophistication of AI systems capable of identifying patterns that were previously impossible to detect.

Data Sovereignty and the New Digital Economy

Perhaps the most important debate is not about privacy alone but about ownership and sovereignty. Who should benefit from the value generated by public data?

Supporters argue that public-sector data is a national resource that should contribute to economic development. If managed responsibly, monetisation could create new revenue streams, strengthen local innovation ecosystems, and reduce dependence on foreign technology platforms. Critics counter that much of this information originates from citizens themselves through interactions with government systems. They question whether the state should be permitted to commercialise citizen-generated information without more explicit mechanisms for public participation, transparency, or benefit-sharing.

The issue becomes even more complex in the context of the African Union's vision for a continental Digital Single Market (DSM). As countries increasingly view data as a strategic economic asset, tensions may emerge between national data sovereignty objectives and the goal of seamless cross-border data flows.

A Defining Moment for African Data Governance

Kenya's proposed National Data Marketplace represents one of the clearest examples of a broader shift taking place across Africa, from viewing data solely as an object of regulation to recognising it as a strategic economic asset. Whether the initiative succeeds will depend on the government's ability to strike a delicate balance between innovation and protection, economic value and individual rights, national sovereignty and public trust.

The debate ultimately raises a fundamental question that governments across the continent will increasingly have to answer: In the digital economy, who owns the value created by data, and who should benefit from it?

Kenya may be among the first African countries attempting to answer that question. It is unlikely to be the last.