Compliance Checklist for New Businesses in Kenya

Updated: 15 June 2026. This page is a practical startup compliance checklist for businesses operating in Kenya. It is intentionally different from our dedicated Tax Compliance Certificate page, which deals only with KRA TCC application requirements and iTax steps.

Use this guide to identify the approvals a new business may need after registration, before opening premises, hiring staff, importing products, manufacturing goods or applying for regulated-sector licences.

Core permitCounty single or unified business permit for the business premises.
Tax setupKRA PIN, obligations, eTIMS/TIMS and return filing where applicable.
Employer setupNSSF, SHA, PAYE and employment compliance if hiring staff.
Sector licencesFood, alcohol, factory, telecoms, tourism, construction, data, environment and product approvals.

Startup Compliance at a Glance

Compliance areaWho normally needs itResponsible authorityRenewal / timing
Business registrationCompanies, business names, LLPs, branches and partnershipsBusiness Registration Service / eCitizenBefore trading; annual returns for companies
Beneficial ownership registerCompanies and LLPsBRS / Registrar of CompaniesMaintain and update when ownership/control changes
KRA PIN and tax obligationsAll registered businesses and many sole proprietorsKenya Revenue AuthorityAfter registration and throughout trading
County single/unified business permitBusinesses operating from premises or within a countyCounty governmentUsually annual
Fire safety certificate / inspectionMost premises, especially public-facing, offices, warehouses, hotels, factories and shopsCounty fire department / relevant county officeUsually annual or as required by county
Public health / food hygiene approvalsRestaurants, hotels, food processors, supermarkets, bars, salons, clinics and food handlersCounty public health officeUsually annual; medical tests may be periodic
Workplace registrationFactories, workshops, construction sites, offices and other workplaces where applicableDOSHS / Ministry of LabourRegistration and renewal as required
Employer registration and payroll complianceBusinesses with employeesNSSF, SHA, KRAMonthly remittances and returns
NEMA environmental approvalProjects with environmental impact, construction, industrial, waste, hospitality expansion and selected land-use projectsNEMABefore commencement; audits where required
KEBS product certificationManufacturers and importers of regulated goodsKenya Bureau of StandardsBefore manufacture/sale/import; renewal depends on scheme
Data protection registrationData controllers/processors meeting legal thresholds or processing sensitive/high-risk personal dataOffice of the Data Protection CommissionerRegistration and ongoing data-protection compliance
Sector-specific licencesTelecoms, tourism, construction, health, education, alcohol, energy, finance, transport and security businessesRelevant regulatorBefore regulated activity begins

Step-by-Step Compliance Setup for a New Business

  1. Register the legal entity. Choose the right structure: private limited company, business name, LLP, branch of a foreign company, partnership or NGO.
  2. Confirm statutory company records. Maintain directors, shareholders, beneficial ownership information, registered office details and company resolutions.
  3. Set up KRA correctly. Obtain the company PIN, activate the correct obligations and keep returns current. For a dedicated TCC guide, use the KRA Tax Compliance Certificate page.
  4. Obtain county business permit. Apply for the single or unified business permit in the county where the premises are located, such as Nairobi, Kisumu, Mombasa or Siaya.
  5. Clear premises compliance. Check zoning/change of user, fire inspection, public health, signage, waste disposal and lease approvals.
  6. Register as an employer if hiring. Set up NSSF, SHA and PAYE where applicable, then implement employment contracts, payroll records and remittance calendars.
  7. Screen for sector licences. Identify whether the business needs product, environmental, food, liquor, construction, telecom, tourism, professional, health, education, financial or transport approvals.
  8. Create a renewal calendar. Track annual permits, monthly tax filings, payroll remittances, licence expiries and statutory filing deadlines.

Launching a business in Kenya? We can prepare a compliance map for your business activity, county, premises, staff and sector licensing requirements.

Request a startup compliance checklist

County Licences and Premises Compliance

Most businesses require a county business permit before operating from a physical premises. The name may vary by county, including Single Business Permit, Unified Business Permit or trade licence. The fee and inspection requirements depend on the county, activity, size of premises, number of employees and business classification.

  • Single or Unified Business Permit: core county trading licence.
  • Fire Safety Certificate: commonly required for shops, offices, hotels, warehouses, schools, factories and public-facing premises.
  • Food Hygiene / Public Health Certificate: required where food, drinks, hospitality, lodging, salons, beauty services or health-sensitive activities are involved.
  • Outdoor Advertising / Signage Permit: required for external signs, billboards and branded premises displays.
  • Liquor Licence: required for bars, restaurants, hotels, clubs, distributors and liquor stores dealing with alcoholic drinks.

Factory, Workplace and Occupational Safety Compliance

Manufacturers, workshops, construction sites, warehouses, laboratories, garages, hotels and other workplaces may need registration with the Directorate of Occupational Safety and Health Services. The modern compliance language is usually workplace registration, plant registration, safety audits and occupational safety obligations, rather than the old generic phrase “factory licence”.

  • Workplace registration through DOSHS where applicable.
  • Plant and equipment inspection for lifts, boilers, pressure vessels or other regulated plant.
  • Annual safety audits and fire drills where required.
  • Accident reporting, first-aid, PPE, signage and safety training records.

Tax, eTIMS and Payroll Compliance

Tax compliance is one part of startup compliance, but it should not dominate this page. New businesses should confirm KRA PIN activation, correct tax obligations, return filing calendar, eTIMS/TIMS setup where applicable, VAT or turnover tax assessment, PAYE where employees exist and retention of invoices and accounting records.

For the actual TCC process, requirements, validity and rejection reasons, use the dedicated page: Tax Compliance Certificate Application in Kenya.

Sector-Specific Compliance Examples

Business typePossible extra complianceNotes
Restaurant, cafe, hotel or barCounty permit, public health, food handler certificates, fire certificate, liquor licence where applicable, tourism approvals for classified hotelsPremises inspections and renewals are usually critical.
Manufacturer or food processorDOSHS workplace registration, KEBS standardization mark, public health, NEMA approval, waste disposal, fire certificateProduct and premises approvals should be mapped before production starts.
Importer or distributorKRA customs, KEBS/PVoC or product registration, sector import permits, warehousing and tax complianceSome goods require regulator approval before importation.
Telecoms, ICT equipment or ISP businessCA Kenya licensing, type approval, local representative, customs and product complianceDevices and regulated services need Communications Authority review.
Construction or contractor businessNCA registration, county construction approvals, NEMA where applicable, DOSHS construction-site registration, professional licencesProject-level approvals are separate from company registration.
Health, education or childcareSector regulator approval, professional staff licences, county health/fire approvals and data protection complianceDo not open before sector approval where required.
Online platform, HR, fintech, clinic or schoolODPC registration or data-protection compliance assessment, privacy notices, processor contracts, breach processesRegistration depends on role, turnover, employees and data processed.

Documents Commonly Needed for Compliance Applications

  • Certificate of incorporation, business registration certificate or branch certificate.
  • Company KRA PIN certificate and directors' PINs where requested.
  • CR12 or company search, beneficial ownership details and company resolutions.
  • Lease agreement, landlord consent, title details or proof of premises.
  • Premises layout, floor plan, signage details or photos where requested.
  • Director/shareholder IDs, passports, work permits or foreigner certificates where applicable.
  • Fire equipment receipts, public health inspection reports, food handler certificates or waste contracts where relevant.
  • Product labels, technical files, test reports, manuals, invoices and import documents for regulated goods.

Compliance Pitfalls for New Businesses in Kenya

  • Registering a company but starting operations before county and sector approvals are issued.
  • Using a generic business permit while carrying out a specialised activity such as food, liquor, manufacturing or telecoms.
  • Forgetting beneficial ownership filing and statutory annual returns after incorporation.
  • Hiring staff without NSSF, SHA, PAYE, employment contracts and payroll records.
  • Ignoring eTIMS/TIMS until a tender, licence or TCC application is blocked.
  • Importing regulated products before confirming KEBS, CA Kenya, pharmacy, agriculture, energy or other regulator requirements.
  • Signing a lease before confirming zoning, change of user, fire, public health and environmental restrictions.

Our Business Compliance Services

  • New-business compliance mapping by county, sector and premises.
  • County single/unified business permit support in Nairobi, Kisumu and other counties.
  • Public health, fire, signage, food hygiene and hospitality compliance coordination.
  • KRA setup, TCC readiness checks and tax compliance coordination.
  • Employer compliance setup: NSSF, SHA, PAYE and employment records.
  • DOSHS, NEMA, KEBS, ODPC and sector-regulator compliance support through appropriate specialists where required.
  • Foreign investor market-entry compliance and local representative coordination.

Business Startup Compliance FAQs

Is company registration enough to start trading in Kenya?

No. Registration creates the legal entity, but trading usually requires county permits, tax setup and any sector-specific approvals that apply to your business activity and premises.

Do online businesses need compliance?

Yes. Online businesses still need business registration, tax compliance, consumer-facing documentation and, where personal data is processed, data-protection compliance assessment or ODPC registration where applicable.

Do all businesses need NEMA approval?

No. NEMA approval depends on the nature, location and environmental risk of the project. Construction, industrial, waste, hospitality expansion and major land-use projects should be screened before commencement.

What should a foreign investor do first?

Start with a compliance map covering entity registration, KRA setup, local licences, immigration status, bank account documentation, sector approvals and premises risks before committing capital or signing long leases.

Official reference links: Business Registration Service, Invest Kenya Single Business Permit procedures, DOSHS workplace registration, NEMA EIA services, KEBS Marks of Quality, ODPC Data Protection Compliance, NSSF Employer Registration.

Business compliance is our specialty. Business startup is our passion. We are in the Business of Business.

Business startup compliance assistance

Need compliance help?

We assist individuals, companies, foreign investors and startups with practical registration and regulatory compliance support across Kenya.

Request a quote