As we commemorate Data Privacy Day 2025, observed annually on 28th January, KICTANet reflects on how protecting personal data is essential for fostering trust in digital systems. By prioritizing privacy, we enable the secure adoption of technology, encourage innovation, and support economic growth—key pillars for Kenya’s digital transformation journey. This day underscores the need for collective responsibility in protecting privacy and building trust in our increasingly digital world.
Over the past year, Kenya has witnessed significant developments in the realm of data privacy, particularly in the wake of public discourse and protests surrounding the Finance Bill 2024. These events highlighted growing concerns about the potential misuse of personal data and underscored the critical need for robust data protection measures. KICTANet has been at the forefront of these discussions, advocating for greater accountability and transparency in data handling practices across both public and private sectors.
A notable milestone in our journey was the launch of the policy brief titled “5 Years of the Data Protection Act in Kenya 2019 – 2024.” This comprehensive review assessed Kenya’s data privacy and legal framework, evaluating the progress made, identifying challenges, and exploring opportunities for reform.
KICTANet has also contributed a number of memorandums on key legislative and regulatory processes, including the Memorandum on Registration of Persons (Amendment) Rules 2024, the Births and Deaths Registration (Amendment) Rules 2024 tied to the Maisha Namba Digital ID rollout, the Digital Health Act Regulations, and the infamous Finance Bill (National Assembly Bills No. 30 of 2024). These efforts underscore our commitment to ensuring privacy and data protection are central to Kenya’s legislative developments.
KICTANet also continues to publish a number of blogs and articles around data privacy and protection, and the large data governance ecosystem. These blogs are meant to create public awareness around data privacy issues in Kenya, the region and globally.
In addition, we published a groundbreaking report titled “Surveillance Laws and Technologies Used in Countering Terrorism and Their Potential Impact on Civic Space.” This paper interrogates the impact of counter-terrorism and prevention of violent extremism measures on civic space in Kenya. Privacy issues, particularly around surveillance, are critically analyzed in this report to inform accountability and safeguard open civic space.
KICTANet’s commitment to tracking data protection developments remains unwavering. The KICTANet Data Protection Tracker continues to be an essential tool for monitoring advancements, challenges, and compliance trends in Kenya’s data ecosystem. Furthermore, as a founding member of the NIIMS Coalition, KICTANet has played an instrumental role in shaping and advocating for privacy-focused policies in the Maisha Namba project, ensuring that digital identity systems respect individual privacy rights. KICTANet’s approach to data protection and privacy awareness and advocacy is one that also underscores the unique challenges that certain groups of people face, such as children, women, rural communities and persons with disabilities, and is therefore at the forefront of ensuring that these are mainstreamed into our programming.
Throughout the past year, KICTANet has also led efforts to address emerging challenges such as digital surveillance, data breaches, and the ethical implications of artificial intelligence. These issues, exacerbated by rapid technological advancements, demand innovative solutions and multistakeholder collaboration to protect personal data and uphold privacy rights. KICTANet’s advocacy extends beyond Kenya, contributing to the development of privacy legislation globally.
Our initiatives have included providing platforms for stakeholders to engage on privacy issues, such as hosting the Kenya Internet Governance Forum (IGF) to address privacy, cybersecurity, and artificial intelligence. Privacy continues to be a central theme in the Kenya School of Internet Governance (KESIG), which has now equipped over 400 individuals with the knowledge and skills to navigate the digital landscape responsibly.
Through the Tatua Digital Resilience Centre, KICTANet has supported social justice organizations by equipping them with tools to securely operate in the digital age. Further, our privacy podcast series, online awareness campaigns, and content on social media platforms have amplified critical conversations on privacy and cyber hygiene, reflecting our sustained commitment to raising awareness.
As we celebrate Privacy Day 2025, we invite all stakeholders – academia, business, civil society, government, media, and the technical community – to reflect on the progress made in promoting privacy and data protection. Let us continue to work together to build a digital future where individuals have full control over their personal information and organizations adhere to the highest standards of data protection.
By safeguarding personal data, we can unlock the full potential of digital transformation and economic growth, creating a thriving and equitable society for all.
