The Records Behind the Cure: How Kenya's $1.6 Billion US Health Deal Reopened a Fight Over Patient Privacy

In a county hospital on the edge of Nairobi, the most sensitive thing in the building is not a machine. It is a metal cabinet. Inside it sit the paper files of patients living with HIV and tuberculosis, each folder a record of a life that the person behind it would rather the world never read. For years, the unwritten rule in Kenyan clinics has been simple: those files do not leave the room. This week, that quiet promise collided with one of the largest health agreements the country has ever signed.

On Monday, Treasury Principal Secretary Chris Kiptoo confirmed that Kenya and the United States would proceed with the Kenya–US Health Cooperation Partnership, a five-year programme valued at roughly 1.6 billion dollars, or about 207 billion shillings. The announcement, made after a meeting in Nairobi with US Chargé d'Affaires Susan Burns, ended months of legal limbo. It also reopened a question that no court ruling has settled: when foreign money rebuilds a health system, who ends up holding the records of the sick?

A deal a decade in the making

The partnership was signed in December 2025 and was meant to be a milestone. On paper, it is ambitious in a way Kenya's overstretched public hospitals have long needed. The agreement funds disease surveillance, outbreak response, laboratory systems, the distribution of medical supplies, the transition of frontline health workers onto sustainable footing, and an expansion of digital health infrastructure. Officials describe it as the scaffolding for a system that can catch the next epidemic before it spreads.

Almost immediately, it ran into the courts. Kenya's High Court suspended implementation in December 2025, citing constitutional concerns raised by petitioners who argued the executive had committed the country to a sweeping international arrangement without enough public participation. In February 2026, Washington paused its side as well, saying it would respect the judicial process. The Court of Appeal lifted the freeze in May, ruling that continued delays could weaken Kenya's ability to respond to public health emergencies. With that, the legal road was clear. The political road was not.

The clause that worries the clinics

The loudest objections concern data. Civil society organisations, including the Consumers Federation of Kenya and the Katiba Institute, have warned that the framework could allow access to sensitive medical information, including HIV and tuberculosis records, in ways that may conflict with Kenya's Data Protection Act. In a country where a diagnosis can still cost someone a job, a marriage, or a place in their community, the stakes of a leaked file are not abstract.

Burns has rejected those fears directly. The United States, she said, does not intend to access Kenyan health data and will comply with privacy requirements in both countries. Any future data-sharing, she added, would involve aggregated information rather than individual records, and the partnership largely formalises cooperation that already exists. Washington's position is that nothing in the deal overrides Kenyan law.

The reassurance has not closed the argument, because the worry is less about stated intentions than about structure. Once a digital health system is built with foreign funding and foreign technical partners, critics ask, where do the safeguards live, who audits them, and what happens years from now when the officials who gave today's assurances are gone? A promise made at a press conference is not the same as a clause a court can enforce.

Immunity, and the question of accountability

That gap between promise and enforcement runs through the second major objection. The health rights organisation KELIN has questioned provisions that grant legal immunity to US personnel and contractors working under the partnership. Such clauses are common in international aid agreements, intended to protect implementers from politically motivated litigation. But KELIN argues they could also limit the ability of Kenyan courts to hold foreign entities accountable if medical information is mishandled.

It is a familiar tension in development deals across the continent: the same immunity that makes a programme workable for the donor can make it harder for the recipient's citizens to seek redress. For a Kenyan whose records were exposed, the practical question is stark — which court could they even turn to, and would it have the power to act? The partnership's defenders say these protections are standard and that domestic law still applies. Its critics say standard is not the same as safe.

What the diaspora hears

For Kenyans abroad, this story lands in a particular way. The diaspora is woven into Kenya's health system more tightly than most of its members get credit for. Tens of thousands of Kenyan nurses, clinical officers, and doctors work in hospitals in the United States, Britain, and the Gulf, many of them trained in the very public facilities this deal is meant to modernise. Others send money home each month that quietly pays for a parent's dialysis or a sibling's surgery, making them silent funders of the system now being reshaped.

There is also a sharper anxiety in the timing. The same week this partnership launched, Kenyan diaspora outlets were tracking a widening US immigration crackdown — new deportation guidance, tougher green-card scrutiny, a denaturalisation drive. For families already nervous about how much American institutions know about them, the idea of a US-linked health-data system, however well-intentioned, touches a raw nerve. The fear is not that anyone has promised to misuse the data. It is that trust, once a system is built, is hard to claw back.

The cost Kenya carries

Lost in the debate over privacy is the price tag Kenya itself is shouldering. Under the agreement, the country is expected to provide an additional 110 billion shillings over five years to support health priorities approved under the partnership. That is a substantial domestic commitment for a treasury already stretched by debt repayments and a restless public weary of new taxes.

Busia Senator Okiya Omtatah, among the deal's most persistent opponents, has argued that the executive approved a major international arrangement without sufficient parliamentary oversight or public participation. His objection is procedural rather than medical, but it speaks to the same underlying unease: a programme this large, this expensive, and this entangled with sensitive data should, critics say, have been built in full view of the people it will touch.

What happens next

Implementation is now set to begin, and the programme will roll out over five years. Supporters insist it will save lives, sharpening Kenya's defences against outbreaks at a moment when the region is watching cholera in Nigeria and an Ebola scare closer to home. Opponents insist the safeguards are not yet strong enough to match the system's reach. Both can be true at once.

What is certain is that the debate will not end with a ribbon-cutting. As laboratories are upgraded and digital records replace the metal cabinets in places like that county hospital outside Nairobi, the question of who can open those files — and who answers if they are opened wrongly — will follow the programme through every year of its life. For a diaspora that helped build Kenya's health system and still helps pay for it, that is a question worth watching from wherever they now call home.