Outsourcing Agreement (Kenya)

An Outsourcing Agreement in Kenya sets out the rights, duties and consideration binding the parties to it.

The Law of Contract Act Cap. 23 governs the formation, validity, and enforcement of Outsourcing Agreements in Kenya. For a contract to be binding, Section 2 of Cap. 23 requires offer, acceptance, consideration, capacity of parties, and legality of purpose. Written form is not strictly required by Cap. 23 for general service contracts, but the complexity of outsourcing arrangements and the need to document service level agreements (SLAs), liability caps, and exit provisions make a detailed written agreement essential in practice.

The Data Protection Act No. 24 of 2019, administered by the Office of the Data Protection Commissioner (ODPC), is central to any Outsourcing Agreement involving the processing of personal data. Where the service provider processes personal data on behalf of the client — for example, in a payroll outsourcing or cloud services arrangement — the service provider is a Data Processor and the client is a Data Controller under the Act. Section 43 of the Data Protection Act requires a written Data Processing Agreement between the controller and processor, and the Outsourcing Agreement typically incorporates or annexes such an agreement. The ODPC registers data controllers and processors under the Data Protection (Registration of Data Controllers and Data Processors) Regulations 2021.

The Employment Act No. 11 of 2007 is relevant where outsourcing involves the transfer of employees from the client to the service provider or the use of agency workers. The Labour Relations Act No. 14 of 2007 and the Employment and Labour Relations Court (ELRC) — the dedicated specialist tribunal under Article 162 of the Constitution of Kenya 2010 — have jurisdiction over disputes arising from employee transfers in outsourcing transactions. Section 10 of the Employment Act requires the service provider to issue written employment contracts to any transferred employees.

In the telecommunications and ICT sector, the Communications Authority of Kenya (CA), established under the Kenya Information and Communications Act (Cap. 411A), regulates outsourcing of services that touch on licensed telecommunications activities. The Kenya ICT Authority — established under the ICT Authority Act No. 28 of 2013 — promotes BPO and IT-enabled services (ITES) and maintains a register of approved BPO service providers. Outsourcing Agreements in the financial services sector must comply with the Central Bank of Kenya (CBK) Outsourcing Guidelines issued under the Banking Act Cap. 488, which require prior written CBK approval for material outsourcing by commercial banks.

The Competition Act No. 12 of 2010, administered by the Competition Authority of Kenya (CAK), may apply where an outsourcing arrangement constitutes a merger or acquisition of a business activity. The CAK merger notification thresholds apply where the combined turnover or assets of the parties exceed the prescribed limits under the Regulations made under the Competition Act. An Outsourcing Agreement should be distinguished from a standard service agreement, an independent contractor agreement, and a joint venture agreement — each of which creates a different legal relationship and attracts different regulatory, tax, and employment law consequences in Kenya.

An Outsourcing Agreement in Kenya is required whenever a business delegates a material function or process to an external service provider, and several circumstances make a formal written agreement immediately necessary.

An Outsourcing Agreement is needed when a company contracts a third party to manage its IT infrastructure, software applications, helpdesk, or cybersecurity. The Kenya ICT Authority (ICTA) and the Communications Authority of Kenya (CA) expect ICT outsourcing arrangements to be governed by written contracts documenting service levels, uptime guarantees, and data security standards under the Data Protection Act No. 24 of 2019.

An Outsourcing Agreement is required when a business process — such as payroll administration, accounts payable, customer call centre operations, or human resources management — is transferred to an external provider. The agreement must address employment law obligations under the Employment Act No. 11 of 2007 where transferred employees are involved, and must include a Data Processing Agreement compliant with the Data Protection Act where employee personal data is processed by the provider.

An Outsourcing Agreement is needed when a commercial bank, microfinance institution, or insurance company regulated by the Central Bank of Kenya (CBK) or the Insurance Regulatory Authority (IRA) wishes to outsource a material function. CBK Outsourcing Guidelines require board approval of the outsourcing arrangement, prior written CBK notification for material outsourcing, and a written contract containing specific provisions on audit rights, data security, and business continuity.

An Outsourcing Agreement is required when a public body procures services under the Public Procurement and Asset Disposal Act No. 33 of 2015. The Public Procurement Regulatory Authority (PPRA) requires procuring entities to use written contracts for all procurements above the micro-procurement threshold, and the contract must conform to the standard conditions of contract approved by PPRA.

An Outsourcing Agreement is needed when a business engages a security firm, cleaning company, or facilities management provider, where the employees of the contractor work on the client's premises. The agreement must clearly allocate employer liability under OSHA 2007, WIBA, and the Employment Act to avoid ELRC findings of deemed employment.

Parties in Kenya should prepare a Outsourcing Agreement (Kenya) proactively rather than waiting for a dispute to arise. Courts interpret agreements based on the written terms rather than oral representations. Under the Companies Act No. 17 of 2015, the Registrar of Companies at the Office of the Attorney General maintains the register of Kenyan companies. Section 3 of the Law of Contract Act (Cap. 23) governs contractual obligations. The Competition Authority of Kenya (CAK) enforces the Competition Act No. 12 of 2010. The Kenya Revenue Authority (KRA) administers corporate tax under the Income Tax Act (Cap. 470). The High Court of Kenya has unlimited original jurisdiction under Article 165 of the Constitution of Kenya 2010. Where the transaction involves regulated activities, prior approval from the relevant authority may be required before execution.

A valid and enforceable Outsourcing Agreement in Kenya under the Law of Contract Act Cap. 23 must include the following essential elements.

Parties and Recitals: Full legal names and registration details of the client and service provider, their Business Registration Service (BRS) registration numbers, registered addresses, and a brief description of the commercial purpose of the outsourcing arrangement. Both parties should be legal persons capable of contracting under Section 11 of the Law of Contract Act Cap. 23.

Scope of Services: A precise description of the business functions, processes, or services to be provided, including deliverables, service locations, and any exclusions. The scope should reference any Service Schedule or Statement of Work annexed to the agreement. Scope creep — the informal expansion of services beyond the agreed scope — is a common cause of disputes before the Nairobi Centre for International Arbitration (NCIA) and the courts of Kenya.

Service Level Agreement (SLA): Measurable performance standards for each service, including uptime targets, response times, error rates, and reporting obligations. The SLA should specify the consequences of service level failures — typically service credits, step-in rights, or termination rights — and the procedure for measuring and reporting performance.

Pricing and Payment: The fees payable for the services, whether fixed, variable, or consumption-based; the currency (Kenya Shillings, KES); payment intervals; and the process for raising and disputing invoices. VAT obligations under the Value Added Tax Act No. 35 of 2013 and withholding tax obligations under the Income Tax Act (Cap. 470) as administered by the Kenya Revenue Authority (KRA) should be addressed.

Intellectual Property: Ownership of pre-existing intellectual property brought by each party to the arrangement, and ownership of new intellectual property created by the service provider in performing the services. In the absence of express agreement, the Industrial Property Act No. 3 of 2001 and the Copyright Act Cap. 130 will determine ownership. The agreement should confirm whether the service provider receives a licence to use the client's IP for service delivery purposes.

Data Protection and Confidentiality: Where personal data is processed, the agreement must include a Data Processing Agreement compliant with the Data Protection Act No. 24 of 2019 and the Data Protection (General) Regulations 2021, both administered by the ODPC. The agreement must specify the nature, purpose, and duration of processing; the categories of data subjects and personal data; the technical and organisational security measures; and the procedure for handling data subject requests and data breaches. Confidential information of both parties must be protected by appropriate non-disclosure obligations.

Employee and Labour Matters: Where employees are transferred to the service provider, the agreement must address compliance with the Employment Act No. 11 of 2007 and the Labour Relations Act No. 14 of 2007. The agreement should confirm whether transferred employees are offered equivalent terms and conditions, and the procedure for handling ELRC claims arising from the transfer.

Liability and Indemnity: A cap on each party's aggregate liability under the agreement, typically expressed as a multiple of the fees paid in the preceding 12 months. Carve-outs from the cap — for gross negligence, wilful misconduct, data protection breaches, and IP infringement — should be expressly stated.

Termination: The grounds for termination by each party, including termination for breach following a cure period, termination for insolvency, and termination for convenience with an agreed notice period. The exit assistance obligations of the service provider — including data return, knowledge transfer, and cooperation with a replacement provider — are critical provisions often overlooked until a dispute arises.

Dispute Resolution and Governing Law: The agreement should be governed by Kenyan law, with disputes referred first to senior management negotiation, then to mediation or arbitration under the Nairobi Centre for International Arbitration (NCIA) Rules 2015, or to the High Court of Kenya under the Civil Procedure Act Cap. 21.

Forms-legal.com provides this Kenya Outsourcing Agreement template as a starting point for businesses structuring compliant outsourcing arrangements. Complex outsourcing transactions, particularly in the financial services and public procurement sectors, should be reviewed by an advocate admitted to the Roll of Advocates maintained by the Law Society of Kenya (LSK).