DHA Dismisses Claims of Unauthorised Access to Digital Health System

Kenya, May 26, 2026 - The Digital Health Agency (DHA) has dismissed claims of unauthorised access to the digital health system, assuring that patient information and other digital health services are protected through strict authentication and consent processes.

In a statement, the agency’s CEO, Anthony Lenaiyara, said that any access to a member account or transactions within the system requires a verification from the patient, which includes methods such as biometric authentication or a One-Time Password (OTP) sent directly to a member’s registered contacts.

Lenaiyara has further assured that the Digital Health ecosystem is fully auditable, with detailed logs that track access attempts, facilities involved, devices used, and personnel initiating transactions within the platform.

 The agency has noted that members of the public who may have detected suspicious activities in their accounts should ensure that they report them to the agency through the toll-free hotline 14 or via email at helpdesk@dha.go.ke.

 The affected individuals should ensure that they submit the specific case  details, including member information and any other evidence, to facilitate  comprehensive investigation into the matter.

“The Digital Health Agency remains firmly committed to safeguarding citizens' health data through strong security, accountability, and data protection measures in line with the Digital Health Act, 2023, and the Data Protection Act, 2019,” Lenaiyara said.

"We also encourage all Kenyans to download the Afya Yangu application to conveniently access and monitor their health records and claims history in real time. Any suspected fraud, unauthorized access, or irregularities should be reported,” he added.

The Digital Health System is a digital platform designed to streamline the management of healthcare services and patient records in the country.

 Through the system, patients can access their medical information electronically, while healthcare providers are able to securely store, retrieve, and share health records to improve service delivery across hospitals and clinics.

The system is centered on DHA and mandated by the Digital Health Act 2023, and it also supports the processing of health insurance claims and verification of members seeking treatment under the Social Health Authority (SHA).

It also enables real-time monitoring of healthcare transactions and claims, allowing authorities to track services offered, facilities involved, and personnel handling patient information.