The Kenyan Social Health Authority deployed a machine learning-based 'Means Testing Instrument' to determine health insurance premiums for millions of citizens. Investigations revealed that the model systematically overestimates the income of the poorest households, leading to unaffordable premiums and the denial of essential medical care for vulnerable populations. Despite internal warnings from consultants about the model's inequity, the government proceeded with the rollout, resulting in widespread financial burden and restricted healthcare access.
Kenya's Social Health Authority reportedly used a machine-learning means test to set health insurance premiums. Investigators alleged that income overestimation burdened poor households with unaffordable charges. A Nairobi laundry worker was reportedly sent home before surgery and could not afford follow-up care. The technical audit used a reconstruction; the exact deployed model and implementation of proposed changes were not confirmed. SHA defended the model as equitable.
Risk classification
- Primary risk domain: 1 Discrimination & Toxicity
- Primary risk subdomain: 1.3 Unequal performance across groups
The model exhibits significant performance disparities across demographic groups, with poor female-headed households and households with electricity being disproportionately misclassified as non-poor and overcharged.
Additional risk subdomains
- 7.3 Lack of capability or robustness: The linear regression model fundamentally lacks the capability to accurately predict income at the extremes of the distribution, leading to massive errors for the poorest Kenyans.
- 5.2 Loss of human agency and autonomy: The automated system sets binding premiums and denies appeals without human review or explanation, removing human agency over critical healthcare access.
Causal factors
- Entity: AI
- Intent: Unintentional
- Timing: Post-deployment
The financial and physical harms resulted from the automated premium calculations generated by the deployed machine learning model, which unintentionally overpredicted the incomes of the poorest households.
EU AI Act risk tier
High Risk: The system is an AI used in healthcare and social security/essential public services ('Means Testing Instrument' to determine access to public healthcare), which has significant implications for safety, fundamental rights, and public interests.
AI system and alleged parties
- AI system: Means Testing Instrument
- AI purpose: Value Estimation; Resource Allocation
- Behaviour type: Tool
- Alleged developer: Palladium, Ministry of Health (Kenya), IDinsight, Healthcare administrative AI developers, Governments, Government of Kenya, Government agencies, David Khaoya
- Alleged deployer: Social Health Authority (Kenya), Ministry of Health (Kenya), Governments, Government of Kenya, Government agencies
- Alleged harmed parties: Peris Nduta, Patients, Low-income households in Kenya, General public of Kenya, General public, Florence Atieno, Economically vulnerable patients
Harm severity
Severity ratings are based on this scale.
Highest direct severity in any category: Severe. Severity is scored from Negligible to Catastrophic in each harm category, for harm the reports describe as caused directly or indirectly by the AI system.
- Physical: direct Negligible, indirect Substantial
- Infrastructure: direct Negligible, indirect Negligible
- Property: direct Negligible, indirect Negligible
- Financial: direct Substantial, indirect Negligible
- Environmental: direct Negligible, indirect Negligible
- Malicious content: direct Negligible, indirect Negligible
- Differential treatment: direct Substantial, indirect Substantial
- Civil rights: direct Negligible, indirect Severe
- Democracy: direct Negligible, indirect Negligible
- Privacy: direct Severe, indirect Severe
- Psychological: direct Negligible, indirect Substantial
- Epistemic: direct Negligible, indirect Negligible
- Child sexual exploitation and abuse: direct Negligible, indirect Negligible
Physical
Reported: The report explicitly describes physical harm to people caused indirectly by the incident.
Indirectly caused: The report states that 'People are dying at home, many people have been unable to go to hospital' because they cannot afford the premiums set by the AI, leading to untreated critical conditions.
Inferred additional harm: It is highly likely that thousands of low-income Kenyans have suffered severe health deterioration or death due to being priced out of the healthcare system by the algorithm, though exact nationwide casualty numbers are not quantified.
Financial
Reported: The report describes 1 incident causing widespread individual financial overcharges of thousands of shillings per household.
Directly caused: The AI system directly overcharged millions of low-income households by overestimating their incomes, forcing them to pay premiums multiple times higher than their actual financial capacity (e.g., charging 7,800 Ksh instead of the minimum rate).
Inferred additional harm: The cumulative financial drain on Kenya's poorest households who attempted to pay these inflated premiums likely amounts to millions of dollars, exacerbating poverty and food insecurity.
Differential treatment
Reported: The report explicitly describes systematic differential treatment of individuals and groups caused directly by the incident.
Directly caused: The algorithm systematically overpredicts the incomes of the poorest Kenyans (overcharging 80% of them) while underpredicting the incomes of the wealthiest (undercharging over 60% of them).
Indirectly caused: Poor female-headed households and households with electricity are disproportionately misclassified as non-poor compared to other demographic groups, leading to unequal financial burdens.
Inferred additional harm: This systemic bias likely deepens existing socioeconomic inequalities in Kenya by subsidizing the wealthy at the expense of the most vulnerable.
Civil rights
Reported: The report explicitly describes violations of human rights caused indirectly by the incident.
Indirectly caused: The system violates the right to health and universal healthcare access promised to all Kenyans by effectively locking the poorest out of medical services due to unaffordable algorithmic assessments.
Inferred additional harm: The right to life and social security of millions of Kenyans is compromised by the state's delegation of essential welfare decisions to a flawed algorithm.
Privacy
Reported: The report explicitly describes privacy violations caused directly and indirectly by the incident.
Directly caused: The system requires citizens to answer intrusive questions about their personal lives, assets, and living conditions (e.g., toilet type, wall materials) to register for healthcare.
Indirectly caused: The SHA attempts to automatically pull personal values from government databases to authenticate self-reported data, expanding state surveillance of private citizen assets.
Inferred additional harm: The centralized collection and algorithmic processing of highly detailed socioeconomic data of 20 million citizens poses significant long-term privacy risks.
Psychological
Reported: The report explicitly describes psychological distress and anxiety caused indirectly by the incident.
Indirectly caused: The reports describe widespread anxiety, confusion, and distress among poor Kenyans who feel 'under investigation' by the intrusive questions and are shocked by the unaffordable premiums.
Inferred additional harm: Widespread mental distress and anxiety are likely experienced by millions of families facing the choice between buying food or paying for mandatory health insurance.
People affected
- Occurrences reported: 1
- People reportedly harmed: 15000000
- People reportedly exposed: 20000000
Potential causes
Management
- Prioritizing Revenue Over Fairness: Management chose to overcharge the poor to avoid undercharging the wealthy.
- Ignoring Expert Warnings: Ignored warnings from World Bank, ILO, UN, and internal consultants.
- Pressure to Increase Yield: Government pressured engineers to adjust model to extract higher contributions.
Technology
- Regression-to-the-Mean Bias: Linear regression inherently predicts towards the center, failing at extremes.
- Flawed Two-Step Model Adjustment: Proposed logistic regression adjustments reduced accuracy and increased errors.
- Opaque Algorithm Formula: Complex formula was published without public disclosure of weights or code.
Data Inputs
- Out-of-Date Training Data: Model trained on 2020/2021 survey data, missing recent economic shocks.
- Unrepresentative Data Sample: Training data over-represented middle-income and lacked poverty pockets.
- Inaccurate Proxy Variables: Assets like roof material or radio ownership poorly proxy actual income.
Human Factors
- Self-Reporting Errors: Users may intentionally or unintentionally misreport assets on online forms.
- Overreliance on Automated Appeals: System rejected appeals automatically without providing reasons to users.
- Intrusive Questionnaire Design: Lengthy and intrusive questions caused user confusion and discomfort.
Process and Methods
- Rushed Implementation Timeline: System was deployed in months instead of years despite its complexity.
- Inadequate Validation and Testing: The model was launched despite known high exclusion error rates of 39%.
- Ineffective Appeal Mechanisms: Automated appeal line denied premium reductions without providing reasons.
Regulatory Environment
- Lack of Algorithmic Transparency: SHA refused access to model details until forced by the Ombudsman.
- Absence of Independent Oversight: No regulatory body audited the means testing tool prior to national rollout.
Information quality
- Classification confidence: High
- Reason for confidence: The reports provide highly detailed, peer-reviewed investigative findings, including the exact variables, training data (2021 KCHS), and mathematical methodology of the model. The journalists successfully reconstructed and audited the model, and obtained internal reports from consultants (IDinsight) confirming the system's flaws, leaving very little ambiguity about the AI's role and performance.
- Ambiguities identified: The exact post-prediction rules or manual calibrations implemented by Safaricom and SHA employees remain unconfirmed due to the agency's lack of response.
- Alternative interpretations: The government might argue the system is a necessary administrative proxy rather than an AI failure, but the mathematical bias is objectively demonstrated.
The Kenyan Social Health Authority deployed a flawed machine learning model that systematically overpredicted incomes for poor households, locking millions out of affordable healthcare. This administrative AI failure represents a substantial threat to societal stability and human rights, highlighting the risks of deploying unvalidated automated decision-making systems in critical public services.
- Overall national security impact: Substantial
- Scope: Single nation
- Primary target: Kenya
- Alleged perpetrator: Kenyan Social Health Authority
Threat characteristics
- Imminence: Near-term. The system is currently active and causing ongoing financial and physical harm, requiring near-term policy intervention to prevent further escalation.
- Autonomy: Human-supervised. The model automatically calculates binding premiums without case-by-case human review, though the overall system is managed by government authorities.
- Novelty: Established threat. Algorithmic bias and errors in automated welfare and means-testing systems are well-documented globally, representing an established threat type.
Impact by dimension
- Physical security: Minor. Flawed premium calculations led to indirect physical harm and reported deaths due to healthcare exclusion, but did not involve kinetic attacks or critical infrastructure sabotage.
- Information security: Negligible. No evidence of information warfare, espionage, or compromise of intelligence capabilities in this administrative AI deployment.
- Sovereignty: Minor. The AI deployment compromised a major government healthcare rollout, leading to administrative instability, though it did not disrupt core constitutional processes.
- Economic security: Minor. The flawed model threatened the financial viability of the national health insurance scheme, though it does not represent strategic economic warfare or intellectual property theft.
- Societal stability: Substantial. The system systematically discriminated against millions of low-income citizens, violating their right to healthcare, causing widespread financial distress and heightening societal tension.