A call button tells you a room. In Kenya, the law also tells you who may hold the record.
Nurse call, staff duress and resident safety for Kenyan hospitals, clinics and care homes — built so every call leaves a record of who went and how long it took, and designed around the Data Protection Act's rules on health data, which are narrower than most buyers assume.
The call system knows a room. It does not know a response.
Most Kenyan wards and care homes already have a call system: a button at the bed, a light above the door, a tone at the station. It summons reliably and cheaply. What it structurally cannot produce is the second half — who attended, whether they arrived, and how long the patient waited — because a light going out records a reset at the wall, not an arrival in the room.
Two other calls sit outside it entirely. The resident who leaves, where nothing is pressed and nothing alarms. And the nurse alone at 02:00 who needs help and is nowhere near a fixed button. Both are location problems, and neither is solved by a better bell.
Route to the nearest
The call goes to the closest available staff member on duty instead of to everyone, which is how an alarm becomes somebody's job.
Record arrival, not reset
Attendance is registered by presence in the room, so the response record is made by the building rather than by memory at shift end.
Escalate on a timer
If the first responder does not acknowledge, it moves to a named second and then a third — the failure that hurts is the alarm someone silenced and forgot.
Health data rules here are narrower than elsewhere in the region.
If you have read guidance written for South Africa, do not carry it across. The Data Protection Act, 2019 treats health status as sensitive personal data, and section 46 is specific about who may process personal data relating to health: only by or under the responsibility of a health care provider, or by a person subject to an obligation of professional secrecy under any law. The condition is met where processing is necessary for reasons of public interest in the area of public health, or is carried out by another person who owes a duty of confidentiality under any law.
That matters for a location system in three practical ways.
| Provision | What it means for a facility system |
|---|---|
| s.2 — sensitive personal data includes health status | Patient and resident records from the system are in the sensitive category from day one, with the heavier obligations that follow |
| s.46 — who may process health data | Processing must sit under a health care provider's responsibility, or with someone bound by professional secrecy or a duty of confidentiality. Vendor staff and administrators are not automatically covered — the confidentiality obligation has to be created, in writing |
| s.49(1) — sensitive data leaving Kenya | Processing sensitive personal data out of Kenya requires the data subject's consent plus confirmation of appropriate safeguards. A cloud platform hosted abroad turns a technical choice into a consent problem you have to solve per patient |
| s.50 — local processing | The Cabinet Secretary may prescribe categories of processing to be effected only through a server or data centre in Kenya. Not a blanket rule today, but a standing reason not to design yourself into a foreign dependency |
Our design answer is the same one we would give anyway, and here it has a legal reason behind it: the positioning engine and the event database run on a server inside your facility. Nothing about a patient leaves Kenya because nothing about a patient leaves the building. The Office of the Data Protection Commissioner has also published a dedicated guidance note on processing health data, which is the document to hand your data protection officer before procurement, not after.
Two further design decisions follow from the Act's minimisation principle: resolution set to room and door level rather than centimetres, because that answers the operational question and collects less; and short retention on raw position history, with only the aggregate response measures kept longer.
Four jobs, one set of infrastructure.
Call response evidence
Keep your existing call points; add routing to the nearest carer, arrival by presence and a call-to-arrival time for every event.
Staff duress & lone worker
A wearable button that carries the wearer's location with the alarm — for night shifts, emergency units and outreach teams.
Resident egress safety
Monitor the doors and gates rather than the person, so an unaccompanied exit alarms while privacy inside the home is preserved.
Equipment location
Find the pump, the wheelchair, the monitor — and the usual first project, since it processes no personal data at all.
The reference points that locate a pump are the same ones that later locate a carer, so equipment is a low-risk way to prove coverage in your actual building before extending to people. Related: RFID asset tracking and tagging in Kenya for the cheaper checkpoint-identification approach, which is the right answer for linen, stores and anything you only need to count at a handover.
Designed for the building and the grid you actually have.
- No rewiring where rewiring is the obstacle. Battery-powered reference points with multi-year sealed cells mount on a wall or gatepost and report over a long-range radio link to one gateway — no conduit, no ceiling voids, no ward closures. New wings take cabled Power-over-Ethernet units instead, because when the ceiling is already open, one cable per point is cheaper to run.
- It has to keep recording through an outage. Reference points, gateways and the server sit behind backup power and continue writing locally, because emergencies do not wait for the grid. Many Kenyan facilities already run gensets and inverters; this rides on that, and our generator and power monitoring page covers the supply side.
- It has to survive cleaning. Wearables are specified IP67 or better so they can be wiped with whatever your infection prevention programme mandates. A tag that cannot be cleaned will not be worn.
- Radio equipment approval. Confirm the type-approval status of any radio device with the Communications Authority of Kenya before purchase, whoever supplies it, and make it a written term of supply. It is an easy item to leave undiscovered until it delays a project.
One boundary we hold firmly: this is a location and safety system, not a medical device. Some wearables can sense a pulse or detect that a wearer has not moved, and that is useful as a trigger to send someone to look. It is not clinical monitoring, we do not present it as clinical monitoring, and it does not replace any clinical observation or device your clinicians rely on. Anything offered as clinical measurement falls under medical device regulation, which is a different regime entirely.
Survey first, one area proven, then the rest.
- 1 · Site survey. We walk the building, mark which areas need presence and which need full coverage, identify where cable can and cannot go, and agree what evidence the system must produce. The data protection decisions — resolution, retention, who may see the record — get made here, before anything is bought.
- 2 · Design and reference cases. A layout, a bill of materials and a written scope, plus comparable deployments to interrogate rather than a demo kit that proves nothing about your corridors.
- 3 · One area, live. A single ward or wing runs against acceptance criteria agreed at survey. If the response record is not trustworthy there, it will not be across twelve.
- 4 · Phased rollout on the same server and the same design, at the pace your operations allow.
- 5 · Handover you own. Documentation, API access to your own event data, and training. Hardware is within our quoting scope — we supply the tags, reference points, gateways and server as part of the delivered system and quote per project against the survey.
Primary sources
- Data Protection Act, No. 24 of 2019 (Office of the Data Protection Commissioner) — section 2 (sensitive personal data includes health status), section 46 (personal data relating to health), section 49 (safeguards prior to transfer out of Kenya), section 50 (processing through a server or data centre in Kenya)
- ODPC — Guidance Note on the Processing of Health Data
- Office of the Data Protection Commissioner — the supervisory authority under the Act
This page explains how the legislation shapes system design; it is not legal advice, and your data protection officer or advocate should sign off the assessment for your facility. Radio type-approval status should be confirmed with the Communications Authority of Kenya for any equipment, from any supplier.
Start with the building, and who answers at 02:00.
Tell us what you operate and the question you could not answer last time it was asked. We will walk the site, design to it, and prove one area before the rest follows.