Kenya’s technology story is often told through the founders who built companies, the investors who financed them and the executives who took African businesses into new markets. Less visible are the lawyers, policy specialists and governance professionals who helped create the rules under which that digital economy could grow.
Rosemary Koech-Kimwatu was one of them. For nearly two decades, Koech-Kimwatu worked across law, fintech, telecommunications, public policy and data protection, building a career around an increasingly important question for Africa’s digital economy: how can technology scale while protecting the people and institutions that depend on it?
Her answer evolved with the technology itself.
She moved from traditional legal and regulatory work into fintech, then public policy in telecommunications, and ultimately into senior data-protection leadership at KCB Bank Group. Along the way, she became an active participant in Kenya’s internet-governance and technology-policy community, helping bring legal thinking into conversations that increasingly involved digital rights, innovation, privacy and regulation.
Koech-Kimwatu died on August 21, 2026, at her home in Ngong. She was 40. Her family has not publicly disclosed the cause of her death. Her death has prompted tributes across Kenya’s technology, legal, fintech and data-protection communities, where she was remembered not simply for the positions she held but for the bridges she built between industries.
Education That Went Beyond The Law
Koech-Kimwatu’s professional story began with law, but her education was broader than the traditional path into legal practice.
She earned a Bachelor of Laws degree from the University of Nairobi, giving her the legal foundation that would later become central to her work in technology regulation and public policy. She subsequently obtained an Advanced Diploma in Public Relations from the Chartered Institute of Public Relations, an unusual but revealing combination for someone who would eventually spend much of her career operating between business, government, technology and the public.
Her academic choices would prove valuable as technology companies increasingly found themselves operating in environments where legal compliance alone was not enough.
Technology businesses needed to understand regulators. Regulators needed to understand innovation. Companies needed to communicate complex policy questions to customers, governments and other stakeholders. And lawyers increasingly needed to understand technologies that did not exist when many of the country’s traditional legal frameworks were written.
Koech-Kimwatu built her career around that intersection. She became an Advocate of the High Court of Kenya, while developing expertise in technology law, public policy, fintech regulation and data protection. The result was a professional profile that could move comfortably between legal analysis and the commercial realities of fast-changing technology businesses. That combination became one of her defining advantages.
From Legal Practice To Fintech
Before she became widely known for data protection, Koech-Kimwatu had already spent years working in Kenya’s emerging fintech industry.
She began her professional career at Caritas Nairobi, where she served as a Legal and Administrative Officer and contributed to the establishment of Caritas Microfinance Bank. She subsequently moved into technology and fintech, serving as Senior Associate for Legal and Regulatory Affairs at Mobile Decisioning Holding Ltd. (MODE) before becoming Head of Legal and Regulatory Affairs at fintech company WayaWaya.
Those roles placed her inside an industry undergoing a profound transformation. Kenya’s financial system was increasingly moving away from the traditional model of banking through physical branches and toward mobile money, digital payments, automated decision-making and technology-enabled financial services. For lawyers working in the sector, that meant the job was changing too.
It was no longer enough to interpret established financial regulations. Technology companies were creating new products, new customer relationships and new ways of moving money, forcing regulators and businesses to constantly negotiate questions around licensing, consumer protection, data and financial inclusion.
Koech-Kimwatu became part of that emerging legal and regulatory infrastructure. Her colleagues at Oxygène Marketing Communications later described her as someone whose ability to identify the links between law and innovation strengthened the company’s public-policy work.
The Move Into Public Policy
Koech-Kimwatu later joined Oxygène Marketing Communications, where she served as a Legal and Regulatory Specialist before becoming Head of Public Policy. The move was significant because it took her work beyond advising individual companies and into the wider policy environment shaping technology markets.
Public policy sits at a difficult intersection.
Businesses want predictable rules that allow them to innovate. Governments want regulation that protects citizens and advances national interests. Consumers want convenience without surrendering their rights. Technology companies want to scale across borders even though regulations remain largely national.
Koech-Kimwatu’s career increasingly placed her in the middle of those competing interests.
Her expertise became particularly relevant as Kenya’s technology economy matured and issues such as mobile communications, fintech, digital identity, cybersecurity, privacy and data governance moved closer to the center of national policy debates.
Safaricom And The Business Of Regulation
In 2020, Koech-Kimwatu joined Safaricom as a Public Policy Manager after her time at Oxygène.
The move brought her into one of the most important technology companies in East Africa and into an industry where policy and commercial strategy are inseparable. Safaricom operates at the heart of Kenya’s digital economy. Its businesses touch telecommunications, mobile money, payments, financial services and digital platforms, meaning regulatory decisions can have consequences far beyond the company itself.
For Koech-Kimwatu, the role provided another opportunity to apply her legal background to technology policy at scale. It also placed her closer to the questions that would eventually define the final stage of her career: how businesses should collect, process, use and protect information in an increasingly digital economy.
KCB And The Rise Of Data Protection
In June 2022, Koech-Kimwatu left Safaricom for KCB Bank Group, joining the lender as Group Data Protection Officer. She was promoted to Head of Data Protection in June 2023, taking responsibility for data-protection compliance across the banking group. The timing mattered.
Kenya’s Data Protection Act, 2019 had fundamentally changed the country’s approach to personal information, establishing obligations for organisations that collect and process personal data. For banks, the implications were particularly significant. A financial institution can hold some of the most sensitive information about an individual: identification details, account information, transaction histories, income patterns, credit information and records of financial behavior.
As banking becomes increasingly digital, the amount of data generated by those relationships continues to grow. Koech-Kimwatu’s role at KCB therefore went far beyond a conventional compliance function. It placed her at the intersection of technology, banking, privacy, regulation and customer trust.
Her professional journey had effectively come full circle. The lawyer who began working on legal and administrative issues had become a senior executive responsible for helping one of East Africa’s largest financial groups navigate the increasingly complex world of personal data.
Building The Institutions Around Kenya’s Digital Economy
Her influence was not confined to corporate Kenya.
Koech-Kimwatu was deeply involved in the country’s wider technology-policy ecosystem. She served as a trustee of KICTANet, participated in Kenya’s internet-governance community and was involved with the Kenya School of Internet Governance. She also chaired multistakeholder advisory groups associated with the Kenya and East Africa Internet Governance Forums.
These platforms may not command the visibility of venture-capital announcements or technology product launches, but they play an important role in determining how Africa’s digital economy develops. Internet governance brings together governments, businesses, civil society, academics, technologists and legal professionals around questions that increasingly affect everyday life.
Who controls data? How should platforms be regulated? How should digital rights be protected? What responsibilities should technology companies have? How should governments respond to emerging technologies? And how can African countries participate meaningfully in global technology-policy discussions rather than simply importing rules developed elsewhere? Koech-Kimwatu contributed to those conversations from the perspective of someone who understood both the law and the commercial technology environment.
A Lawyer Who Became A Technology Professional
Perhaps the most interesting part of Koech-Kimwatu’s career is that she did not abandon her legal training when she entered technology.
She expanded what that training could mean. Her career illustrates how the role of a lawyer has changed as technology has become embedded in almost every major sector of the economy. The courtroom was only one possible destination. Legal expertise could be applied to fintech product development, telecommunications policy, data governance, digital rights, corporate compliance and technology regulation.
Koech-Kimwatu became part of a generation of African professionals proving exactly that. Her recognition reflected this evolution. In 2020, she was named to CIO Africa’s inaugural Most Influential Women in Digital Transformation list. She was also recognized by the International Legal Technology Association among its influential women in legal technology, while Africa’s legal-innovation community recognized her contribution to the field.
These were not simply awards for a legal career. They reflected the emergence of a new category of professional in Africa: the technology lawyer who understands that regulation itself is becoming part of the innovation ecosystem.
Her Legacy Is Bigger Than Data Protection
It would be easy to remember Koech-Kimwatu simply as KCB’s Head of Data Protection. That would undersell her career. Her more important contribution was helping Kenya navigate the difficult transition from an economy where technology was an emerging sector to one where technology has become infrastructure.
When money moves through mobile phones, when banks make decisions using algorithms, when businesses collect information from millions of customers and when governments increasingly deliver services digitally, law and technology can no longer operate as separate disciplines.
They have to work together. Koech-Kimwatu understood that early. She spent her career moving between the worlds that needed to understand one another: lawyers and technologists, companies and regulators, innovators and policymakers. That work rarely generates the headlines associated with a major funding round or a new technology product. Yet without it, digital economies cannot mature sustainably.
The Questions She Leaves Behind
Kenya’s technology sector is entering another major transition.
Artificial intelligence is changing how companies make decisions. Financial institutions are processing increasingly sophisticated datasets. Digital identity is becoming more important to commerce and public services. Cybersecurity threats are expanding. Regulators are trying to keep pace with technologies that evolve faster than legislation.
The questions Koech-Kimwatu spent her career addressing will therefore become more important in the years ahead.
How much data should companies collect? How should that information be used? What rights should consumers have? How can businesses innovate without weakening privacy? And who should be accountable when technology causes harm?
These are no longer theoretical questions for Kenya. They are business questions, policy questions and questions of public trust. Koech-Kimwatu spent much of her professional life preparing institutions to confront them. Her legacy is therefore not only the policies she helped develop or the organisations she served. It is also the professionals she influenced, the conversations she helped shape and the idea that Africa’s technology future must be built with both innovation and accountability.
For a country that has become one of the world’s most closely watched digital markets, that is a significant contribution. Rosemary Koech-Kimwatu’s career showed that sometimes the people who help shape a technology revolution are not the ones building the next app. They are the ones helping society decide what the app should be allowed to do.
TechMoran extends its condolences to her family, friends, colleagues and the wider technology, legal, fintech and digital-policy communities mourning her loss.
