Article 47 of the Digital Health Act states that personal health information cannot be shared with any person outside Kenya except for the purposes of health tourism. According to the regulation, health tourism means a situation where a patient travels across international borders to receive medical treatment. No other restrictions were found in the Data Protection Act.