Can a hospital share my medical information? The law on patient confidentiality
Health Act, 2017; Constitution of Kenya · sources read 5 Oct 2026
No, not freely. Information about your health, treatment or hospital stay is confidential, and may only be shared with your written consent, when a court order or a law requires it, or when keeping it secret is a serious threat to public health.
- Where
- The head of the health facility first; then KHPOA (KWFT Building, 11th Floor, Nairobi; info@khpoa.go.ke); the High Court for a rights violation
Steps
- Complain to the head of the hospital or clinic, or the person it names to handle complaints.
- If the facility does not resolve it, take it to the Kenya Health Professions Oversight Authority (KHPOA).
- Privacy is a constitutional right, so you can also go to the High Court if it has been violated.
Watch out
- Sharing to protect public health is allowed only under regulations made by the Health Cabinet Secretary.
- If telling you your diagnosis would harm your best interests, a health worker may tell your next of kin or guardian instead.
- Your information can also be used for health research and planning, but only with your informed consent.
Who this covers
- Every patient or user of a health facility, public or private
- Every person has a constitutional right to privacy, including private affairs not being revealed without need
Official sources (3)
- Health Act (Cap. 241, No. 21 of 2017), version of 10 July 2026 new.kenyalaw.org · read 5 Oct 2026
- Constitution of Kenya, 2010 new.kenyalaw.org · read 2 Oct 2026
- Kenya Health Professions Oversight Authority (KHPOA): home and contact pages khpoa.go.ke · read 2 Oct 2026