CRB Report Privacy in Kenya: What Banks and Employers Can See
Updated April 2026 • 7 min read
Your CRB credit report contains financial information about your borrowing behaviour. Many Kenyans are unsure about who can access this information, what exactly they can see, and what their rights are. This guide answers those questions clearly.
Who Can Access Your CRB Credit Report?
Under Kenya's Credit Reference Bureau Regulations and the Data Protection Act 2019, your credit information can only be accessed by:
- You — as the data subject, you have the right to access your own full credit report
- Licensed member lenders — banks, microfinance institutions, SACCOs, digital credit providers that are registered CRB members
- Employers — but only with your explicit written consent and for roles where credit status is relevant
- Other organisations — only in cases specifically permitted by law (e.g., regulatory bodies with legal authority)
Who CANNOT access your report: random individuals, unregistered companies, landlords without your consent, family members, or government institutions without legal authority.
What Do Banks See When They Check Your CRB?
When a bank requests your credit report as part of a loan application, they typically see:
- Your full credit history: All loan accounts reported on your file, their open/close dates, payment status history
- Credit score: Your numeric creditworthiness rating
- Negative listings: Any defaults, NPLs, court judgements
- Outstanding balances: Total debt from all reportd accounts
- Enquiry history: Previous credit applications (hard enquiries)
Banks do not see:
- Your salary, income, or employment details (this comes from other documents, not the CRB)
- Your savings account balances
- Your M-Pesa wallet balance
- Loans you applied for but were declined (in most cases)
What Do Employers See When They Check Your CRB?
Employers conducting authorised credit checks typically have access to a limited version of your credit report, which shows:
- Whether you have active negative CRB listings (yes/no)
- A general credit score band
- Number of defaults (if any)
Most employers conducting pre-employment checks do not have access to the full loan-level detail that a lender sees. They receive a summary-level credit indicator.
Does the CRB Know Your Income?
No. Credit bureaus in Kenya only receive data submitted by member lenders. This data includes loan account details, payment history, and CRB-related enquiries. Salary, income levels, employment status, and savings are not submitted to CRBs and do not appear on credit reports.
When a lender assesses your income, they rely on separate documents: payslips, bank statements, and employer letters — not CRB data.
How Long Is Your Data Kept by the CRB?
Under the CRB regulations:
- Positive information (performing loans) can be kept indefinitely as credit history
- Negative information (defaults) can be retained for up to 5 years from the date of settlement or de-listing
- After 5 years, negative entries should be purged from your active credit profile
Your Privacy Rights Under the Data Protection Act 2019
Kenya's Data Protection Act 2019 (DPA) extends comprehensive rights over your credit data:
- Right to access: You can request a copy of all data held about you by any CRB
- Right to rectification: You can demand correction of inaccurate data
- Right to erasure: In certain circumstances, you can request deletion of your data
- Right to object: You can object to your data being processed in certain ways
- Consent requirement: Employers must get your written consent before accessing your credit data
If you believe your credit data rights have been violated, you can lodge a complaint with the Office of the Data Protection Commissioner (ODPC).
What Happens If Your CRB Data Is Accessed Without Consent?
Unauthorised access to your credit data is a legal violation. If you discover your credit information was accessed without consent:
- Report the incident to the relevant CRB
- File a complaint with the ODPC
- Consult a legal advisor if significant harm has resulted