A Remote Work Law Guide for Foreigners in East Africa
Remote work can make borders feel less important than they are. A person may live in Kigali, Nairobi or Kampala, receive salary from a company in London or New York and never meet a local client. It is tempting to conclude that the work remains legally “outside” East Africa. That can be wrong.
The law usually
asks where the worker is physically living and working, not only where the
employer is incorporated or salary is paid. A foreign employee may therefore
need immigration permission, owe local tax, or expose the overseas employer to
payroll, registration or permanent-establishment rules. The same laptop can
also move employee or customer data across borders.
The safest
analysis separates six questions: lawful work status, personal tax, employee or
contractor classification, employer tax presence, local registration and data
protection. A “remote” job answers none of them by itself.
Immigration permission
comes before tax planning
A tourist or
visitor permission should not be treated as work authorisation merely because
the employer is abroad. Kenya now provides the clearest regional example: its
Directorate of Immigration Services publishes Class N, the Digital Nomad
permit, for a person who works remotely in Kenya for a company registered
outside Kenya, conducts business for a foreign company, or serves clients
outside Kenya.
The other EAC
systems reviewed remain largely organised around locally sponsored employment,
investment or other defined purposes. Uganda states that a work permit is
always sponsored by an organisation or company. Rwanda’s employment categories
generally require an employer or a qualifying multinational assignment.
Tanzania’s Class B permit is tied to specific employment by a specific employer
and requires a labour work permit. Burundi requires a work permit or special
authorisation for foreigners and EAC citizens exercising an activity there.
South Sudan and Somalia also require work authorisation for foreign workers.
The absence of
a published digital-nomad category is not permission to improvise. Before
working, ask the immigration authority which status covers remote employment
for an overseas company and keep the answer.
A foreign salary can
still be local taxable income
Where money is
paid from does not necessarily determine where employment income is sourced. If
the employee performs the work while physically in an East African country,
local law may treat the salary as locally connected even when payroll is
abroad.
Rwanda Revenue
Authority expressly includes services and employment performed in Rwanda among
taxable income. Uganda’s Income Tax Act contains source rules for employment
exercised in Uganda. Burundi’s legislation treats employment exercised in
Burundi as Burundi-source income, and South Sudan’s Taxation Act treats wages
from work done there as South Sudan-source income. The DRC’s new 2026 IRPP
taxes residents on global income and non-residents on Congolese-source income.
Somalia now applies Income Tax Law No. 37 of 2025 rather than the old 1966
framework.
Tax residence
asks a second question and can broaden exposure. A digital-nomad permit,
residence card or foreign bank account does not itself create a tax exemption.
Employee or contractor is
more than a label
Remote
arrangements are sometimes rewritten as “consultancy” contracts because the
overseas business has no local payroll. The heading on the contract does not
necessarily settle classification.
Local labour
law can look at the real relationship: control, regular remuneration,
integration into the business and continuing duties. Burundi’s Labour Code, for
example, defines employment around work under the employer’s direct or indirect
authority and says a contract to be performed in Burundi is subject to the
Code. Uganda’s Employment Act, updated in June 2026, applies to contracts of
service. Rwanda, Tanzania, the DRC, South Sudan and Somalia also maintain
national employment statutes.
Classification
matters for leave, termination, social security, workplace rights and
withholding. If the arrangement is genuinely independent, the contract and
working practices should support that reality. If it is employment, local
mandatory rules should be assessed even where the contract chooses foreign law.
The employee can create a
tax presence for the overseas employer
The employer’s
tax risk is separate from the worker’s personal tax. A foreign company can
sometimes create a permanent establishment, or another taxable business
presence, where its remote employee works. That can lead to registration,
corporate tax filings and profit attribution.
A home office
does not automatically create a permanent establishment. Risk rises where core
business is carried on through a fixed local place, the worker regularly
concludes or drives contracts, manages local operations, or provides services
for a statutory period. Kenya’s Income Tax Act covers fixed places, dependent
agents and certain services through employees. Uganda broadened its
permanent-establishment definition in 2024. Rwanda, Tanzania, Burundi, South
Sudan and Somalia likewise use permanent-establishment concepts; Burundi
specifically includes a dependent person who habitually concludes contracts.
A software
engineer working privately for an overseas team presents a different risk from
a regional sales director who signs customers from home. Employers should
review the role before approving relocation.
Registration and payroll
can follow the worker
Once tax or
employment rules are triggered, the absence of a rented office may not remove
registration duties. The employee may need a taxpayer number and return; the
overseas employer may need payroll withholding, social-security registration, a
permanent-establishment tax file or another local registration mechanism.
Do not assume
tax paid in the employer’s country settles the host-country position. A
double-taxation agreement, where applicable, may allocate taxing rights or
provide relief, but filing and evidence can still be required. Keep foreign
payslips, tax certificates and travel records.
Remote access can be a
cross-border data transfer
Remote work
also changes where personal data is processed. An employee may open customer
records, HR files or financial data stored abroad, or upload locally collected
information to overseas systems.
Kenya’s Data
Protection Act and 2021 Regulations regulate transfers outside Kenya. Rwanda’s
2021 law requires controller or processor registration and places formal
conditions on external transfer and storage. Tanzania’s Personal Data
Protection Commission operates a cross-border transfer permit system. Uganda’s
Personal Data Protection Office requires controllers and processors to
register. Somalia’s Data Protection Authority, established under Law No. 005 of
2023, now operates with regulations approved in January 2026 and publishes
cross-border transfer guidance. The DRC’s Digital Code has also brought
personal-data compliance into the ARPTC’s formal declaration and authorisation
system.
For Burundi and
South Sudan, the public materials reviewed do not present the same dedicated
transfer-permit mechanism. That should not be read as permission to ignore
confidentiality, cybersecurity, sector-specific duties or contractual
safeguards. A remote-work approval should identify what data the worker
accesses, where it is stored and what transfer or registration steps are
required.
Kenya: a remote-work
permit is not a tax holiday
Kenya’s Class N
expressly recognises remote work for overseas employers and clients, giving a
qualifying foreigner a status designed for the activity. But immigration
permission does not override the Income Tax Act. A worker should still review
tax residence and income source, while the foreign company should test whether
the employee’s activities create a permanent establishment. If personal data is
handled, the Office of the Data Protection Commissioner’s cross-border rules
also matter.
Uganda: the permit system
expects sponsorship
Uganda’s
current guidance says work permits are sponsored by an organisation or company,
and Class G2 is directed to foreign expatriates employed in Uganda. There is no
obvious general digital-nomad route in the published categories reviewed.
Work performed
in Uganda can create Ugandan-source employment income, while residence can
broaden the tax position, subject to Uganda’s short-term-resident
foreign-income exception. The foreign employer should also review the expanded
permanent-establishment rules. Uganda’s 2026 Employment Act amendments and the
Personal Data Protection Office registration regime become relevant where the
relationship and data processing are effectively operating from Uganda.
Rwanda: overseas
employment may not fit an ordinary permit
Rwanda’s
employment permits cover locally sponsored workers and certain multinational or
regional assignments. The Q1 category can cover an employee assigned by a home
company to an affiliated Rwandan organisation or working for a multinational or
regional company with an office in Rwanda. A worker whose overseas employer has
no Rwandan connection should not assume that Q1 or visitor status applies.
RRA states that
services and employment performed in Rwanda are taxable activities, and
non-resident companies can become taxable through a permanent establishment.
Data compliance is especially important because Rwanda requires controller or
processor registration and regulates transfer and storage outside Rwanda.
Tanzania:
specific-employer rules make informal remote work risky
Mainland
Tanzania’s Class B residence permit is built around specific employment by a
specific employer and normally requires a work permit from the Labour
Commissioner. A visitor status should not be treated as a substitute because
salary comes from abroad.
The Income Tax
Act separately tests source, residence and permanent establishment. Tanzania’s
Personal Data Protection Commission also operates a formal cross-border
transfer permit system. Remote workers and employers should therefore settle
immigration, tax and data issues before the arrangement starts.
Burundi and DRC: local
activity still matters
Burundi’s 2022
joint order says no foreigner or EAC citizen may exercise an activity in
Burundi without the required work permit or special authorisation. Its Labour
Code applies to employment performed in Burundi, and its income-tax law
contains source and permanent-establishment rules. A foreign contract does not
displace those questions.
In the DRC, the
Labour Code remains in force and the foreign-worker framework was updated in
2025. The personal-tax landscape changed in 2026 with the new IRPP, while the
Digital Code places personal-data activities within a formal ARPTC compliance
framework. An overseas employer using a DRC-based worker should therefore
review immigration, labour, tax and digital compliance together.
South Sudan and Somalia:
do not invent a digital-nomad status
South Sudan’s
Ministry of Labour requires foreign workers to regularise employment through a
work permit and reinforced compliance in late 2025. Its Taxation Act taxes
South Sudan-source wages and defines a permanent establishment as a workplace
through which a non-resident conducts business.
Somalia’s
federal government says a company must request a work permit before a foreign
employee legally begins working, and employment-based stay requires an approved
contract and work permit. Somalia also has the 2025 income-tax framework and an
active Data Protection Authority under the 2023 Act, with regulations approved
in January 2026. In both countries, a worker should use the current official
process rather than assuming an overseas payroll creates an exception.
A remote-work approval
should be a legal decision
The practical
mistake is to ask a manager, “Can I work from East Africa for three months?”
and treat a yes as sufficient. A manager can approve productivity arrangements;
they cannot waive immigration, tax, labour or data law.
Before
relocating, identify the country and expected duration, confirm lawful work
status, determine how salary is sourced and whether tax residence may arise,
test employee or contractor classification, assess the employer’s
permanent-establishment and payroll exposure, and map the data that will be
accessed from the new location. Document who handles filings, whether the
worker may sign customers, what happens if immigration permission is refused
and which security controls apply.
Remote work is
borderless only at the level of technology. Legally, the place where the person
sits can still determine whether the worker may work, where income is taxed,
whether the employer has entered a new tax jurisdiction and how company data
may move.
Sources and publication
note
Source note. This article was prepared from current official and
primary materials reviewed for publication on 3 September 2026, including Kenya
Directorate of Immigration Services guidance on the Class N Digital Nomad
permit, Kenya’s Income Tax Act and data-protection framework; Uganda
immigration work-permit guidance, the Income Tax Act, the Employment Act as
amended in 2026 and Personal Data Protection Office materials; Rwanda
immigration employment-permit guidance, Rwanda Revenue Authority income-tax guidance
and Law No. 058/2021 on personal data; Tanzania Class B guidance, the Income
Tax Act, Employment and Labour Relations Act and Personal Data Protection
Commission guidance; Burundi’s Labour Code, Joint Order No. 570/530/921 of 20
June 2022 and income-tax law; the DRC Labour Code, 2025 foreign-worker
framework, 2026 IRPP guidance and Digital Code compliance materials; South
Sudan Ministry of Labour work-permit guidance, Labour Act 2017 and Taxation Act
2009, Revised Edition 2021; and Somalia’s federal work-permit and
permit-of-stay services, Income Tax Law No. 37 of 2025, 2025 Income Tax
Regulations and Data Protection Act No. 005 of 2023 with its 2026 regulatory
framework. Tax treaties and individual facts can change the result. This is
general legal information, not individual legal or tax advice.
Suggested citation:
Ronald Serwanga, “A Remote Work Law Guide for Foreigners in East Africa” East Africa Legal Insight (3 September 2026).