A university ethics letter is not necessarily a research permit. A research permit is not necessarily immigration permission. Immigration permission is not necessarily authority to enter a protected area, interview patients, export samples or transfer personal data abroad. Foreign researchers who treat one approval as a universal licence can therefore be fully approved by one institution and still be non-compliant somewhere else.

For visiting academics, doctoral researchers, consultants, NGOs and university teams, the better approach is to think in layers. This guide compares Kenya, Uganda, Mainland Tanzania and Rwanda and explains where the main permission questions arise before fieldwork begins.

The first question is what the country calls research

Researchers sometimes assume that only laboratory science is regulated. National frameworks are usually broader.

Kenya’s NACOSTI Research Information Management System states that its research-licensing framework targets all persons intending to undertake research in the country. A non-Kenyan researcher must be affiliated with a relevant local institution capable of hosting and monitoring the project. The application requires institutional documentation and a description of the proposed research. NACOSTI also makes clear through its system and licensing guidance that research clearance does not remove obligations arising under other laws.

Mainland Tanzania follows a similarly broad approach. COSTECH’s National Research Registration and Clearance Guidelines state that the framework applies to research activities conducted in Tanzania Mainland by individuals, institutions and organisations. A foreign academic who describes a project as “independent field observation” should therefore not assume that the label avoids the clearance system.

Uganda’s UNCST administers national research processes through the National Research Information Management System. Rwanda’s National Council for Science and Technology likewise operates a research-permit process requiring a proposal and institutional or professional information. The practical starting point is not the researcher’s personal view that the project is harmless. It is the definition and clearance practice of the country in which the activity will occur.

Immigration and research clearance are separate gates

Kenya demonstrates the distinction particularly clearly. The Directorate of Immigration Services provides an Internship/Research Pass for a foreign person undertaking internship or academic research, and the listed requirements for researchers include NACOSTI clearance. In other words, the research authority and the immigration authority perform different functions.

Rwanda also links the systems without merging them. Its H7 professional research permit requires a research permit from the competent Rwandan authority. The U2 occupational trainee category may be relevant to academic research undertaken as professional training. A researcher should therefore identify whether the project is university-based training, professional research or another activity before selecting an immigration route.

Tanzania Immigration guidance expressly includes research within the academic purposes for which a student visa may be issued, while the COSTECH clearance framework remains a separate research-control question. In Uganda, a foreign researcher should similarly confirm lawful immigration status with the Directorate of Citizenship and Immigration Control in addition to UNCST requirements.

The practical sequence is to obtain the host institution’s support early, identify the national research route, and then ensure that the immigration application accurately describes the same activity. Inconsistent descriptions across the university letter, ethics application, research permit and immigration documents can create avoidable questions.

Human participants create an additional ethics layer

Research involving interviews, surveys, medical records, identifiable observations or interventions can require ethical review even when the research seems low risk.

Uganda’s 2025 National Guidelines for Research Involving Humans as Research Participants are a useful illustration. They address informed consent, privacy and confidentiality, data management and transfer, vulnerable populations, genetic and genomic research, biological materials and emerging technologies. UNCST also lists accredited Research Ethics Committees and operates review processes through NRIMS. Depending on the project, sector bodies such as the National Drug Authority or health-research institutions may also become relevant.

Kenya similarly requires researchers to consider accredited ethics review where human participants are involved. In Rwanda and Tanzania, university or sector ethics structures can operate alongside national clearance. A social-science researcher should not assume that ethics regulation is only for clinical trials. Recording political opinions, collecting health histories or interviewing vulnerable communities can raise serious consent and privacy questions even where no medicine is involved.

Sector permission may be the approval researchers overlook

A national research permit does not automatically open every site. Wildlife research, protected areas, hospitals, schools, archives, prisons, genetic resources, clinical trials and biological samples may be controlled by separate institutions.

The sensible method is to draw a permissions map before travel. Identify every place from which data will be collected, every category of participant, every dataset that will be accessed, every physical sample that may be taken, and every item that may cross a border. Then identify the institution controlling that resource.

This matters because a letter from a university supervisor may establish academic legitimacy without authorising entry to a government facility. Likewise, the national science council may authorize the project in principle while a hospital ethics committee still controls access to patient files. A permit should be read for its scope and conditions rather than treated as a ceremonial certificate.

Personal data can turn an academic workflow into a regulatory issue

Foreign research teams increasingly store interview recordings, survey responses and photographs in cloud services located outside the country. That can create cross-border data questions in addition to research ethics.

The researcher should decide, before collection begins, what personal data will be collected, why it is needed, who will have access, where it will be stored, how long it will be retained and whether it will leave the country. Consent forms should correspond with the actual data practice rather than promising local storage while the project automatically synchronises files to an overseas server.

National data-protection law may impose requirements separate from the research permit. Sensitive health, biometric or other personal information generally deserves greater care. Where a local institution is a partner, the collaboration agreement should allocate responsibility for data security, breach response, participant requests and final deletion or archiving.

Samples and genetic resources need special attention

Physical material can create a legal problem that does not arise from an ordinary interview. A researcher collecting blood, tissue, plant specimens, soil, pathogens or genetic resources should ask whether collection, storage, transport, export, import, biosafety or access-and-benefit-sharing permission is required.

The fact that the sample is scientifically small does not make the legal question small. Nor should a courier shipment be treated as merely an administrative stage. If the project envisages exporting samples to a laboratory abroad, that intention should be disclosed early in the ethics and regulatory process rather than added after collection.

Institutions should also agree who owns or controls stored specimens, whether future research is permitted, whether re-consent is required and what happens at the end of the project.

Local affiliation should be substantive, not decorative

Kenya expressly requires non-Kenyan researchers to have relevant local institutional affiliation. Even where another jurisdiction does not use exactly the same wording, a serious local partner can be important for ethics, participant access, regulatory communication and responsible dissemination.

The relationship should be documented. A good collaboration agreement identifies the project, researchers, responsibilities, budget where relevant, data access, intellectual property, publication expectations, equipment, sample custody and the procedure if the project ends early. It should also say who is responsible for national reporting and regulator correspondence.

A foreign researcher should be cautious about using a local academic’s name merely to obtain a letter while excluding that institution from the actual research. That can create ethical, contractual and reputational problems even if the permit application succeeds.

Permission continues after fieldwork begins

Researchers often concentrate on entry and forget post-approval duties. A permit may impose conditions concerning amendments, reporting, renewal, local dissemination or notification of changes to the study site or investigators. Ethics approval may require reporting adverse events or protocol changes. Immigration status may expire before data collection is complete.

Create a compliance calendar containing the expiry date and conditions of every approval. If the methodology changes substantially, confirm whether an amendment is needed before implementing it. If the principal investigator leaves the project, do not assume that another team member automatically inherits the authorization.

Before departure, confirm whether final reports, data-deposit requirements, equipment export formalities or sample-transfer approvals remain outstanding. A clean exit matters because future applications may depend on the record of the earlier project.

The most useful way to plan foreign research in East Africa is therefore not to ask, “Do I need a permit?” in the singular. Ask instead which authorities control the person, the project, the participants, the place, the data and any physical material.

When those six questions are answered before fieldwork starts, research administration becomes far more predictable. When they are left until the researcher is already in the field, a seemingly minor missing approval can threaten the whole project.

Source note and disclaimer. This article is based principally on Kenya’s current NACOSTI research-licensing guidance and Directorate of Immigration Services Internship/Research Pass requirements; Uganda National Council for Science and Technology resources, NRIMS and the 2025 National Guidelines for Research Involving Humans as Research Participants; Tanzania Commission for Science and Technology National Research Registration and Clearance Guidelines and current Tanzania Immigration guidance; and Rwanda National Council for Science and Technology research-permit requirements and Directorate General of Immigration and Emigration study and research permits. Sector-specific and institutional permissions may also apply. This article is general legal information, not a substitute for clearance advice for a particular project.

Search Description: Foreign research in East Africa: permits, ethics, local affiliation, immigration, data, samples and sector approvals explained.

Suggested citation: Ronald Serwanga, “Border Research: East Africa Permit Rules Explained” East Africa Legal Insight (13 September 2026).