Secretary of State Marco Rubio, Kenyan President William Ruto, and Prime Cabinet Secretary Musalia Mudavadi at the signing of the Kenya–U.S. Health Cooperation Framework, Washington, D.C., December 4, 2025. Official State Department photo by Freddie Everett. The petition that stopped implementation cold On December 11, 2025, Justice Bahati Mwamuye issued a conservatory order suspending the government's ability to implement any part of the agreement that "provides for or facilitates the transfer, sharing or dissemination of medical, epidemiological or sensitive personal health data." The order came in response to a petition filed by the Consumers Federation of Kenya (COFEK), which argued the government had never consulted the public before agreeing to share Kenyans' HIV status, TB treatment history and vaccination records with a foreign government, and that doing so breached both the Data Protection Act and the constitutional right to privacy. The case, filed at the Milimani Law Courts under reference HCCHRPET/E809/2025, initially targeted only the data-sharing provisions; by December 19, the suspension had been extended to the entire agreement. The government's counter-move, and the back-and-forth since Attorney General Dorcas Oduor applied to the Court of Appeal on January 11, 2026 to stay the High Court's conservatory orders. The case was mentioned before Justice Lawrence Mugambi on February 12 to confirm compliance and set an expedited hearing schedule. That legal back-and-forth continued for months until May 2026, when the Court of Appeal lifted the restrictions on the agreement, allowing implementation to resume though a full, substantive ruling on whether the deal itself is constitutional is not expected until October 2026. In effect, Kenya has been operating under a legal question mark for most of the time the deal has technically been in force; the State Department's original timeline had called for implementation to begin in April 2026, squarely inside the suspension window. Why courts, not just campaigners, took this seriously Kenya's judiciary had reason to move quickly on data protection concerns specifically. In 2025, a Kenyan court had already ruled that Worldcoin the biometric identity venture linked to OpenAI's Sam Altman violated the Data Protection Act after collecting biometric data from roughly 300,000 Kenyans, and ordered the company to delete everything it had gathered. Legal analysts tracking the America First health deal have pointed to that precedent as evidence that Kenya's courts were primed to scrutinize exactly this kind of cross-border data arrangement, rather than treating COFEK's petition as a fringe objection. Kenya's case reshaped the template for everyone else Kenya was the first of what has become a much larger wave: by July 20, 2026, at least 33 countries had signed similar MOUs, together governing roughly $23.5 billion in spending between 2026 and 2030, with recipient governments expected to fund about 39% of that total themselves. But Kenya's legal fight appears to have changed how Washington wrote the template for everyone who signed afterward. When the State Department signed its MOU with Senegal, the press release included language explicitly absent from Kenya's original agreement: "This MOU does not... give the U.S. access to private patient data. Data protections remain governed by Senegalese law." Analysts at the Carnegie Endowment for International Peace have described Kenya's experience as a genuine "stress test" for the entire strategy one that forced Washington to start building explicit data-sovereignty language into agreements it had not previously bothered to include. What's still unresolved The core legal question whether a foreign government can be granted the kind of direct access to national health databases that this framework originally envisioned, without violating Kenya's own data protection and privacy law has not actually been answered yet. The Court of Appeal's May ruling lifted the immediate block, but public health law researchers writing in PLOS Global Public Health have argued that Kenya's interim wins show domestic courts and public mobilization can slow "extractive health data regimes," while cautioning that national safeguards alone won't be enough without a coordinated African position through institutions like Africa CDC on transparency, parliamentary approval, and enforceable data-sovereignty terms across all these bilateral deals, not just Kenya's. Whether Kenya's October ruling upholds the agreement, forces renegotiation, or something in between will likely shape how the remaining America First MOUs are drafted and challenged across the continent going forward. _Reporting sources: U.S. Department of State press releases; Carnegie Endowment for International Peace; PLOS Global Public Health; Think Global Health / Council on Foreign Relations MOU tracker; AllAfrica court reporting; Semafor; African Business_