Creates one National Digital Health Agency that holds every Kenyan's medical history.

Section 4 establishes the Agency as the sole custodian of the Integrated Health Information System. Every facility — public, private, faith-based — is required to interoperate within 12 months. Opt-out is permitted but must be filed in writing at a Huduma centre.

Public and private hospitals must upload your records. Insurers can request access during underwriting.

Insurers gain a regulated lookup endpoint for underwriting and claims adjudication. Hospitals migrate paper files and legacy EMRs into a national schema. Penalties for non-upload reach KES 1M per incident.

Prescriptions, HIV status, mental health visits and maternity records all sit in one searchable database.

Pharmacies must verify e-prescriptions against the national registry before dispensing. Sensitive categories — HIV, mental health, reproductive — are technically flagged but not legally siloed; access depends on role-based controls set by the Agency.

Faster referrals and fewer lost files — but a leak exposes your entire medical life. Opt-out must be filed in writing.

Patients get continuity of care across counties and a single source of truth for chronic conditions. The trade-off: a single breach exposes an entire medical biography, and opting out means surrendering many of the system's benefits at the same time.