- SASRA seeks public views on proposed ICT rules for regulated Saccos.
- The draft guidelines cover cybersecurity, data protection and technology risks.
- Stakeholders have until November 20 to submit comments.
The Sacco Societies Regulatory Authority (SASRA) is seeking public views on new draft technology guidelines for regulated Saccos in Kenya.
The regulator has called on stakeholders to review the Draft Guidelines on Information, Communication and Technology (ICT) for Regulated Sacco Societies and share their input. Once adopted, the rules are meant to strengthen ICT governance and tighten cybersecurity across the sector. They also aim to protect members’ data and make digital Sacco services more reliable.
The draft covers seven main areas. It begins with ICT governance and accountability, then moves to system acquisition and development. It also addresses ICT infrastructure and service operations, as well as technology risk management and cybersecurity.
Beyond that, the guidelines deal with business continuity, data backup and disaster recovery. They further cover the protection of members’ personal data. Digital services and emerging technologies complete the list.
IN CASE YOU MISSED IT:
Stakeholders who wish to comment must be specific. Each submission should identify the part, section or paragraph it relates to. Where possible, contributors should propose alternative wording and explain their reasons.
Comments will be received until close of business on Friday, November 20, 2026. They should be sent to pmbiwa@sasra.go.ke, with a copy to policy@sasra.go.ke.
The draft guidelines are available for download on the SASRA website through the link https://shorturl.at/rdV6S.
Stakeholders needing clarification can also reach the Authority through its offices and help lines. These include the toll free line 0800 724 422, the telephone line 0796 488 200 and the email address info@sasra.go.ke.
The call comes as Saccos continue to expand their use of digital platforms to serve members. As a result, clear rules on data protection, system security and service continuity are expected to remain a priority for regulators and operators alike.
By Benedict Aoya
Get more stories from our website: Sacco Review.
For comments and clarifications, write to: Saccoreview@
Kindly follow us via our social media pages on Facebook: Sacco Review Newspaper for timely updates
Stay ahead of the pack! Grab the latest Sacco Review newspaper!



