Finance Bill 2025: Why KRA Wants Access To Your Data Again

As part of the bill presented to Parliament, the government wants to scrap Section 59A(1B) of the Tax Procedures Act

Finance Bill 2025: Why KRA Wants Access To Your Data Again
An image of KRA offices. /FILE

The National Treasury unveiled the Finance Bill 2025, outlining a series of new tax proposals set to take effect in the 2025/2026 financial year.

The bill was released on Wednesday, April 30, by Kimani Kuria, Chair of the National Assembly's Finance Committee. In it are a series of proposals, one of which is seeking to grant the Kenya Revenue Authority (KRA) what it has wanted for the longest time: access to personal data.

As part of the bill presented to Parliament, the government wants to scrap Section 59A(1B) of the Tax Procedures Act — a clause that currently blocks KRA from accessing trade secrets or customer personal data. If this proposal goes through, KRA would gain the authority to require businesses to hand over detailed transactional data.

The current law protects businesses from being forced to link their systems with KRA if it risks exposing sensitive information. Removing this safeguard would give KRA full access to business systems in the name of enforcing tax compliance.

A person using their phone. /BBC

This is akin to a proposal that was made in the deleted Finance Bill 2024, which sought to allow KRA to access sensitive personal data, including property and bank account details, in its fight against tax evasion. Former Treasury Cabinet Secretary Njuguna Ndung’u had sought to amend the Data Protection Act, 2019, via the Finance Bill 2024, which would have granted KRA unrestricted access to information from various entities without a court warrant. 

This amendment would have integrated data from banks, telecoms, utilities, schools, land registries, and other agencies into KRA's digital system, iTax, sparking concerns among legal experts.

“Section 51(2) of the Data Protection Act is amended by inserting the following new paragraph immediately after paragraph (b)—(ba) disclosure is necessary for the assessment, enforcement or collection of any tax or duty under a written tax law,” stated the Finance Bill which, just like the 2025 version, was tabled in the National Assembly.

Section 51 (2) of the Data Protection Act 2019 allows data controllers and processors to share personal data with a third party if it relates to the individual themselves purely for personal or household activity and when it is necessary for national security or public interest. Section 51 (2) (c) also allows for exemption if the disclosure is required by or under any written law or by an order of the court.

Other Highlights Of Finance Bill 2025

However, the Bill came as a relief for several sectors of the economy, including the construction sector, as it proposes changes in the Export and Investment Promotion levy.

The bill proposes slashing the Export and Investment Promotion Levy from 17.5% to 5% for various construction-related items, such as semi-finished iron and non-alloy steel products like bars and rods.

It also suggests major Value Added Tax (VAT) changes, including reclassifying many goods and services from zero-rated to VAT-exempt — a move that could affect sectors like pharma and agriculture, with raw materials for drug manufacturing and sugarcane transport among the impacted items.

Products like locally assembled phones, e-bikes, solar and lithium-ion batteries, and raw materials for animal feed are also addressed in the bill. However, if these zero-rated or exempt items are used outside their intended purpose, VAT will still apply.

A new tax of 25% — or Ksh200 per kilogram — will hit imports of plastic-based products like adhesive plates, films, tapes, and strips. But this won’t affect imports from EAC partner states that comply with regional origin rules.

Finally, the bill proposes extending KRA’s window to process VAT refunds from 90 to 120 days.

New Powers For CS Mbadi

The Bill also seeks to bring back the Cabinet Secretary for the National Treasury’s authority to waive tax penalties and interest — a power that was scrapped in the 2023 Finance Act over concerns about misuse and lack of transparency.

Under the new proposal, the CS would only be allowed to grant waivers in cases where electronic tax system issues are to blame, such as system glitches, data update delays, technical errors, or incorrect taxpayer registration.

Treasury Cabinet Secretary, John Mbadi at his office on August 8, 2024. /NATIONAL TREASURY

“(5A) The Cabinet Secretary may, on the recommendation of the Commissioner, waive the whole or part of any penalty or interest imposed under this Act where the liability to pay the penalty or interest was due to,

“(a) an error generated by an electronic tax system; (b) a delay in the updating of an electronic tax system; (c) a duplication of a penalty or interest due to a malfunction of an electronic tax system; ог (d) the incorrect registration of the tax obligations of a taxpayer,” the bill reads in part.

Fresh Implementation

The Finance Bill 2025 ditches the previous three-phase rollout plan in favour of a streamlined approach, with most changes kicking in on July 1, 2025.

There are no provisions slated to begin on September 1. Instead, two clauses are pushed to January 1, 2026, while the other 57 will take effect in July 2025.