Kenya, December 15 2025 - Kenya’s telecommunications companies are preparing for what they see as a potential breakthrough in the fight against SIM-related fraud following the rollout of updated SIM registration regulations.
But as public anxiety grows around data privacy, the country’s communications regulator has moved to clearly state what the new rules do and do not require.
The updated regulations, now being implemented across mobile networks, aim to tighten identity verification and reduce fraud linked to anonymous or poorly registered SIM cards.
Fraud schemes involving SIM swaps, mobile money theft, and impersonation have become increasingly sophisticated, pushing regulators and operators to strengthen controls at the point of SIM registration.
However, the inclusion of biometric data in the legal definitions section of the regulations triggered widespread concern that telcos would begin collecting fingerprints, DNA, or other sensitive biological data from subscribers.
In response, the Communications Authority of Kenya (CA) issued a firm clarification. “For the avoidance of doubt, CA has not issued any directives for the collection of biometric data by our licensees,” the regulator said, seeking to calm fears of mass biometric capture.
The CA explained that the reference to biometric data in the regulations is purely definitional and does not amount to an instruction for collection. “The new SIM card regulations do not contain any provisions for the collection of biometric data,” the authority said, adding that defining biometric data as personal data “does not mean that all this information will be collected from subscribers during SIM card registration.”
Instead, the regulator says the revised framework is focused on improving accountability in the telecom sector by ensuring every SIM card is clearly linked to a verified individual.
More from Kenya
According to the CA, the changes are part of a broader effort to protect consumers and the integrity of Kenya’s fast-growing digital economy.
“These concerns are a priority for the Authority, and the improved SIM card registration processes are part of the larger strategy to safeguard consumer interests and welfare across all networks,” the regulator said.
For telecom operators, the rules are seen as a necessary step toward restoring trust in mobile services, particularly mobile money platforms that have become prime targets for criminals.
Industry players argue that stronger identity controls will make it harder for fraudsters to exploit loopholes created by weak or outdated registration systems.
At the same time, privacy advocates continue to urge caution, warning that any expansion of personal data collection must be matched with strong safeguards and transparency. Kenya’s Data Protection Act places strict obligations on how personal information is collected, stored, and used, a framework the CA says remains fully applicable under the new SIM rules.
As implementation continues, the regulator insists that no additional biometric data will be collected unless expressly authorised through law and public consultation. For now, the focus remains on tightening existing registration processes, not turning SIM cards into biometric checkpoints.

More from Kenya

Global Food Prices Dip in December 2025 but Remain Higher Than Last Year, FAO Reports

Inside President Ruto’s Sh2.88 Trillion Budget: Priorities, Politics and Public Pressure





