Legal and Compliance Framework for Public Benefit Organisations in Kenya

Public Benefit Organisations play an essential role in Kenya. They deliver healthcare, education, humanitarian assistance, environmental protection, community development and many other services that improve lives.

However, doing good is not enough. A PBO must also show that it is well governed, financially accountable and compliant with the law.

For donors, development partners and communities, compliance provides confidence that resources are being used for their intended purpose. For the organisation itself, a strong compliance framework reduces legal and financial risk, protects its reputation and creates a solid foundation for sustainable growth.

Kenya’s New Regulatory Era for Public Benefit Organisations

Kenya’s nonprofit sector entered a new regulatory era when the Public Benefits Organisations Act, 2013 came into operation on 14 May 2024.

The Act replaced the former Non-Governmental Organisations Co-ordination Act and introduced a broader framework for the registration, regulation and operation of organisations undertaking public-benefit activities in Kenya.

The PBO Act addresses important areas such as:

• Registration and recognition of PBOs;
• Governance and organisational structures;
• Accountability to members, beneficiaries and donors;
• Financial management and reporting;
• Regulatory oversight;
• Self-regulation within the sector;
• Suspension, cancellation and winding up of organisations; and
• The rights and responsibilities of registered PBOs.

The transition is more than a change of terminology from “NGO” to “PBO.” It requires organisations to reconsider whether their constitutions, governance structures, policies, financial controls and reporting systems satisfy the current legal framework.

What Is a Public Benefit Organisation?

A Public Benefit Organisation is generally a voluntary, non-membership or membership-based organisation that operates independently, is non-partisan and undertakes lawful activities for the benefit of the public or a section of the public.

Its purpose is not to distribute profits to founders, directors or members. Any income or property generated by the organisation should be applied towards its stated public-benefit objectives.

This does not mean that a PBO cannot earn income, charge reasonable fees or undertake income-generating activities. It means that its resources must ultimately support its mission rather than enrich private individuals.

Key Laws Governing PBOs in Kenya

PBO compliance does not begin and end with registration. Depending on its activities, funding, workforce and beneficiaries, an organisation may be subject to several overlapping legal frameworks.

1. The Constitution of Kenya, 2010

The Constitution provides the foundation for freedom of association, equality, human dignity, access to information and public participation.

PBOs must conduct their activities in a manner that respects constitutional rights and values. This is particularly important for organisations working with vulnerable communities, children, persons with disabilities, refugees and marginalised groups.

2. The Public Benefits Organisations Act, 2013

The PBO Act is the principal legislation governing public benefit organisations in Kenya.

It establishes requirements relating to registration, governance, accountability, reporting and regulatory supervision. An organisation should ensure that its constitution, governing body and operations are aligned with the Act.

This includes maintaining a clear public-benefit purpose, defining the powers and responsibilities of the governing body and preventing the improper distribution of the organisation’s income or assets.

3. Tax Laws and KRA Requirements

Registration as a PBO does not automatically exempt an organisation from tax.

Tax exemption is a separate process administered by the Kenya Revenue Authority. Organisations seeking or maintaining income-tax exemption must comply with the Income Tax (Charitable Organisations and Donations Exemption) Rules, 2024.

PBOs should assess their obligations concerning:

• Income tax exemption;
• PAYE for employees;
• Withholding tax;
• Value Added Tax, where applicable;
• Taxation of commercial or unrelated business activities;
• Deductibility of donations;
• Maintenance of proper accounting records;
• Filing of annual tax returns; and
• Electronic tax invoicing requirements, where applicable.

Tax-exempt status should never be treated as permanent or unconditional. An organisation must continue satisfying the applicable legal requirements and demonstrate that its income and assets are being used for charitable or public-benefit purposes.

4. Proceeds of Crime and Anti-Money Laundering Act

Nonprofit organisations can be exposed to money-laundering and terrorism-financing risks, particularly where they receive international funding, operate in high-risk regions, transfer funds across borders or work through multiple implementing partners.

A proportionate Anti-Money Laundering and Countering the Financing of Terrorism framework should include:

• Donor and partner due diligence;
• Verification of beneficiaries and implementing partners;
• Screening against applicable sanctions lists;
• Controls over cash payments and fund transfers;
• Identification and reporting of suspicious transactions;
• Documentation of the source and intended use of funds; and
• Training for employees, directors and volunteers.

Controls should be based on the organisation’s actual risk profile. A small community organisation will not require the same systems as a large international PBO, but every organisation should understand where its vulnerabilities lie.

5. Data Protection Act, 2019

PBOs regularly handle sensitive personal information relating to donors, employees, volunteers and beneficiaries.

The information may include identification documents, photographs, medical records, financial details, children’s information and data about vulnerable persons. Mishandling such information can expose individuals to discrimination, fraud, stigma or physical harm.

PBOs should therefore establish lawful and transparent procedures for:

• Collecting personal data;
• Obtaining valid consent where required;
• Explaining how information will be used;
• Restricting access to sensitive records;
• Retaining information only for as long as necessary;
• Responding to data-subject requests;
• Managing data breaches;
• Sharing data with donors and service providers; and
• Transferring personal data outside Kenya.

Registration with the Office of the Data Protection Commissioner may also be required, depending on the organisation’s activities and the nature of the information it processes.

6. Employment and Labour Laws

PBOs are employers and must comply with Kenya’s employment and labour laws.

This includes having proper employment contracts, maintaining employee records, remitting statutory deductions, observing working-hour and leave requirements, preventing workplace harassment and following fair disciplinary and termination procedures.

Organisations that rely on volunteers, consultants or short-term project staff should clearly document those relationships. Calling an individual a “volunteer” or “consultant” does not necessarily prevent an employment relationship from arising if the practical arrangement resembles employment.

7. Sector-Specific Laws

Additional licences and approvals may be required depending on the organisation’s activities.

For example, a PBO working in healthcare, education, children’s services, environmental conservation, microfinance or research may be regulated by other government agencies. Registration as a PBO does not replace sector-specific authorisation.

Eight Essential Areas of PBO Compliance

1. Proper Registration and Organisational Records

The organisation should maintain accurate registration documents, its constitution, governing-body records, licences, tax documents and information on its physical and postal addresses.

Changes affecting officials, the constitution, address or organisational structure should be reported to the relevant regulator as required.

2. Effective Governance

A PBO needs more than prominent names on its board. It requires a governing body that understands the organisation’s mission, finances, risks and legal responsibilities.

Good governance includes:

• Clearly defined board and management roles;
• Regular and properly documented meetings;
• Conflict-of-interest declarations;
• Independent oversight of management;
• Appropriate board committees;
• Succession planning;
• Periodic board evaluation; and
• Decisions that can be supported by reliable evidence.

3. Financial Management and Internal Controls

Public-benefit resources must be protected from misuse, error and fraud.

Important controls include approved budgets, segregation of duties, payment approval limits, bank reconciliations, procurement procedures, asset registers and regular financial reporting to the board.

Financial controls should apply to every part of the organisation, including field offices and externally funded projects.

4. Annual Reporting and Record-Keeping

PBOs should maintain complete and accurate accounting and operational records.

Annual reports should explain not only how much money was received and spent, but also what the organisation achieved, who benefited and how resources contributed to its public-benefit objectives.

Reports submitted to donors, regulators and the board must be consistent. Material differences between different versions of financial or programme information can damage credibility and trigger regulatory scrutiny.

5. Donor and Grant Compliance

Every grant creates obligations.

Before accepting funding, the organisation should review the grant agreement carefully and identify conditions relating to:

• Eligible and ineligible expenditure;
• Procurement;
• Reporting deadlines;
• Audit rights;
• Intellectual property;
• Branding and publicity;
• Safeguarding;
• Data protection;
• Sub-granting;
• Currency conversion;
• Asset ownership; and
• Unspent funds.

The programme, finance and legal or compliance teams should work together throughout the grant cycle.

6. Fraud Prevention and Whistleblowing

PBOs should have safe and confidential channels through which employees, beneficiaries, volunteers and partners can report suspected misconduct.

A whistleblowing framework should explain how reports will be received, investigated and escalated. It should also protect individuals who raise concerns in good faith from retaliation.

7. Safeguarding

Organisations working with children or vulnerable adults must adopt effective safeguarding policies and procedures.

This includes appropriate recruitment checks, codes of conduct, reporting mechanisms, risk assessments and clear procedures for responding to allegations of abuse, exploitation or harassment.

Safeguarding should be embedded in programmes, partnerships and field operations rather than treated as a policy that exists only on paper.

8. Risk Management

Every PBO faces strategic, financial, operational, legal and reputational risks.

The board should receive an updated risk register showing the organisation’s principal risks, existing controls, responsible officers and planned mitigation measures.

Risks requiring particular attention may include:

• Dependence on a single donor;
• Funding restrictions;
• Fraud and corruption;
• Cybersecurity incidents;
• Data breaches;
• Weak implementing partners;
• Employee misconduct;
• Political exposure;
• Inadequate programme monitoring; and
• Failure to demonstrate impact.

A Practical PBO Compliance Checklist

A PBO should be able to answer “yes” to the following questions:

• Is our registration information complete and current?
• Does our constitution comply with the PBO Act?
• Are the responsibilities of the board and management clearly separated?
• Do directors regularly declare conflicts of interest?
• Are board and committee meetings properly documented?
• Do we maintain accurate accounting and programme records?
• Are our tax filings and statutory remittances up to date?
• Have we reviewed our eligibility for income-tax exemption?
• Do we conduct appropriate due diligence on donors and partners?
• Are personal and sensitive data adequately protected?
• Do our employment and consultancy arrangements comply with Kenyan law?
• Are grant conditions monitored throughout each project?
• Do we have functioning safeguarding and whistleblowing systems?
• Does the board regularly review the organisation’s major risks?
• Can we demonstrate how funds have produced measurable public benefit?

Any “no” or “not sure” response should become a documented compliance action.

Compliance Is Part of Organisational Sustainability

Strong compliance should not be viewed as an administrative burden or a once-a-year filing exercise. It is part of how a responsible organisation protects its mission.

A well-governed PBO is better positioned to attract credible donors, build strategic partnerships, retain talented employees and maintain public confidence. It is also more resilient when leadership changes, funding declines or regulatory scrutiny increases.

The most effective organisations create a culture in which compliance is shared across the board, management, finance, human resources and programme teams.

How Capita Registrars Limited Can Help

Capita Registrars Limited supports Public Benefit Organisations with governance, regulatory compliance and organisational strengthening.

Our services include:

• PBO governance and compliance reviews;
• Constitution review and amendment;
• Board and committee charters;
• Governance policy development;
• Board induction and training;
• Compliance calendars and registers;
• Conflict-of-interest frameworks;
• Board and organisational evaluations;
• Risk management frameworks;
• Statutory and annual compliance support; and
• Governance audits and remedial action plans.

If your organisation is transitioning to the PBO framework, preparing for donor due diligence or reviewing its governance systems, a structured compliance assessment can help identify gaps before they become costly problems.

Contact Capita Registrars Limited to arrange a PBO governance and compliance review.

Disclaimer: This article provides general information and does not constitute legal, tax or regulatory advice. Organisations should obtain advice based on their individual structure, activities and circumstances.