-1024x683.jpg&w=3840&q=85)
Kenya, 21 October 2025 - Kenya has ushered in a new era of digital accountability with the enactment of the Computer Misuse and Cybercrimes (Amendment) Act, 2024, which places stricter obligations on internet and telecommunications service providers to support authorities in cybercrime investigations.
The new legislation, passed by Parliament on 29 September 2025, and signed into law by President William Ruto on 15 October 2025, significantly strengthens the original Computer Misuse and Cybercrimes Act, Cap 79C.
It expands the government’s authority to compel cooperation from service providers in tracking, investigating, and prosecuting digital offences.
Under the new law, service providers are required to preserve, produce, and share user data deemed relevant to active investigations when requested by law enforcement agencies.
Non-compliance could attract hefty fines, imprisonment, or forfeiture of assets linked to the commission of cybercrimes.
The law also empowers the National Computer and Cybercrimes Coordination Committee (NC4) to take decisive action against digital platforms promoting illegal content, including terrorism, child pornography, hate speech, and cultic practices.
This marks a notable step toward curbing the misuse of online platforms that has plagued Kenya’s cyberspace in recent years.
Among its other key provisions, the Act introduces strict penalties for unauthorized SIM-card swaps, an offence now punishable by a Sh200,000 fine or two years in jail.
It also broadens the legal definitions of phishing, cyber harassment, and identity theft to include new and emerging digital threats targeting individuals and businesses.
Lawmakers have emphasized that the amendment does not erode constitutional freedoms or delegate legislative powers.
Instead, it aims to ensure that digital freedoms are exercised responsibly while protecting national security and public interest.
Cybersecurity experts have lauded the move as a necessary update in a rapidly evolving digital landscape where cybercrime has become increasingly sophisticated.
However, they also urge the government to balance enforcement with privacy safeguards to prevent potential abuse of data access powers.
By tightening compliance rules and holding service providers more accountable, the Computer Misuse and Cybercrimes (Amendment) Act seeks to fortify Kenya’s digital security infrastructure and protect citizens from online threats, reinforcing the country’s commitment to building a safer and more secure cyberspace
