Your Rights as a Borrower in Kenya: What the Law Protects You Against

Most Kenyans who borrow through mobile loan apps have no clear idea of the legal protections available to them. They accept terms without reading them, pay rates without questioning them, and tolerate collection practices that may actually violate the law. This is not ignorance — it is the result of an industry that, for years, operated without meaningful regulation and trained borrowers to accept whatever terms were offered.

That has changed significantly since 2022. The CBK's licensing regime for digital credit providers, combined with the Data Protection Act 2019 and existing consumer protection frameworks, gives Kenyan borrowers real rights. Knowing what they are is the first step to enforcing them.

Your Right to Full, Transparent Pricing Before You Borrow

Under the CBK's Digital Credit Provider regulations, licensed lenders are required to disclose the complete cost of credit before a borrower accepts a loan. This means you are legally entitled to know, before signing:

• The exact interest rate (expressed as an annual percentage rate where possible)
• All processing fees, service fees, and any other charges
• The total repayment amount
• The repayment schedule and due date
• The consequences of late payment or default

If a lender approves your loan and only reveals the fees after you have already accepted — or structures the process so that the full cost is buried in fine print at the end of a long application — this is a violation of your right to informed consent. You have the right to full disclosure upfront.

What to do: Never accept a loan until you have seen and understood the complete fee and repayment schedule. A legitimate lender will provide this without hesitation. If a lender is evasive about costs before disbursement, do not proceed.

Your Right to Fair Debt Collection Practices

Before 2022, many Kenyan loan apps used a deeply harmful collection tactic: accessing the borrower's contact list and messaging or calling their family members, employers, and friends to announce the debt. This practice was abusive, humiliating, and entirely unregulated at the time.

Under the CBK's conduct rules for licensed DCPs, this practice is now prohibited. Licensed lenders must direct collection efforts at the borrower — not at third parties in the borrower's network. Specifically, you have the right to protection from:

• Lenders contacting your phone contacts about your debt
• Harassment, threats, or abusive language from collection agents
• Collection calls at unreasonable hours
• False statements about the consequences of default (e.g., claiming you will be arrested when that is not the legal consequence)

If a licensed lender contacts your family, employer, or any third party about your debt without your consent, this is a violation you can report to the CBK.

Your Rights Under the Data Protection Act 2019

Kenya's Data Protection Act 2019, enforced by the Office of the Data Protection Commissioner (ODPC), gives you significant rights over your personal data. When you use a loan app, the lender collects personal information about you — your ID details, phone number, M-Pesa transaction history, contacts, and sometimes much more. Under the Act, you are entitled to:

The Right to Know What Data Is Collected

A lender must tell you what personal data they collect, why they collect it, how long they retain it, and who they share it with. This must be disclosed in a privacy policy that is accessible before you apply.

The Right to Consent

Collection of your data requires your explicit, informed consent. Pre-ticked consent boxes or buried consent clauses in long terms-and-conditions documents do not meet this standard under Kenyan law.

The Right of Access

You can request a copy of all personal data a lender holds about you. The lender must provide this within a reasonable timeframe.

The Right to Correction

If a lender holds inaccurate data about you — including incorrect loan records or wrongly reported defaults — you can request correction.

The Right to Object

You can object to certain uses of your data, including its use for marketing purposes.

Your Rights Regarding CRB Listings

The Credit Reference Bureau Regulations in Kenya give borrowers specific procedural rights when it comes to CRB listings. If a lender intends to list you as a defaulter with a CRB, they are required to:

1. Notify you in writing (usually by SMS or email) that they intend to list you
2. Give you a reasonable opportunity to settle the debt or dispute the listing before it is submitted
3. Submit only accurate information to the CRB

Once listed, you have the right to:

• Access your CRB report — one free report per year from each bureau (Metropol, TransUnion, Creditinfo)
• Dispute inaccurate listings through the CRB's formal dispute process
• Have accurate but outdated listings removed after the applicable retention period (typically five years for negative information)

If a lender lists you incorrectly on CRB — for a debt you have repaid, for an amount you do not owe, or without proper notification — you can dispute this directly with the CRB and, if unresolved, escalate to the CBK.

Your Right to Lodge a Complaint

When a licensed lender violates your rights, you have formal avenues for redress:

Directly with the Lender

Every CBK-licensed digital credit provider is required to have a functioning complaint handling process. Start here. Document your complaint in writing (email is best) and request a written response. The lender is required to respond within a reasonable period.

With the Central Bank of Kenya

If the lender does not resolve your complaint satisfactorily, you can escalate to the CBK. Submit complaints at www.centralbank.go.ke or by email to the Consumer Protection department. The CBK can investigate conduct violations by licensed DCPs and take regulatory action.

With the Office of the Data Protection Commissioner

For data privacy violations — including unauthorised data collection, sharing your data without consent, or refusing to respond to data access requests — complain to the ODPC at www.odpc.go.ke.

With the Communications Authority

For complaints about specific apps — particularly those requesting excessive permissions or engaging in practices that violate the CA's guidelines — contact the Communications Authority at info@ca.go.ke.

What the Law Does Not Yet Fully Protect You From

It is equally important to be honest about the limits of current protections:

• Interest rate caps: Unlike bank lending rates, digital lender rates are not currently capped. You may be charged very high interest legally — though disclosure requirements apply
• Unlicensed lenders: Your rights only apply against licensed entities. Scam operations and unlicensed lenders fall outside the CBK's jurisdiction entirely
• Enforcement gaps: Rights on paper are only valuable if enforced. Response times from regulatory bodies can be slow, and small individual complaints may not result in immediate action

The Practical Takeaway

Your rights as a borrower in Kenya are real, meaningful, and growing. But they only protect you if you borrow from licensed lenders who operate within the regulatory framework. Choosing a CBK-licensed lender like SwiftCash is not just about safety — it is about accessing a lending relationship where the law is actually on your side.

Know your rights. Demand transparency before you sign. Document any violations in writing. And remember: you always have the right to walk away from any loan offer that does not meet the standards the law requires.