Excerpt from Business Daily Article, Published on November 30, 2025
In today’s digital – first world, personal data has become one of the most valuable forms of currency. Kenyans rely heavily on online platforms for banking, mobile money, e – commerce, communication and public services. While this shift boosts convenience and innovation, it also increases exposure to serious cyber risks. Growing cases of identity theft, data breaches and cybercrime threaten both individual privacy and national security. In this environment, it is essential to Strengthen existing cyber laws and ensure strong enforcement mechanisms.
Kenya has taken important steps by introducing the Computer Misuse and Cybercrimes Act (2018), the Data Protection Act (2019), and amendments made in 2024 to fortify cyber regulations. These laws create an important legal framework, but legislation alone is not enough. Weak enforcement, limited awareness and inadequate technical resources mean many incidents go unreported or unresolved, leaving citizens exposed.
Sensitive information — including bank details, health records and personal identifiers — remains at high risk. A single breach can lead to financial loss, reputational harm or direct safety concerns. Moreover, diminished trust in digital systems could slow progress in e – governance, weaken financial inclusion and hinder future investment in Kenya’s digital economy.
To address these challenges, both government and private sector stakeholders must take coordinated action. Cyber laws should be updated to reflect modern threats such as AI – powered attacks, ransomware, deepfake manipulation and sophisticated phishing schemes. Clear rules for data handling, storage, sharing and breach reporting must be enforced, with meaningful penalties for violations.
Additionally, enforcement bodies require proper funding, training and technology to investigate cyber incidents effectively. Collaboration across institutions — locally and internationally — will be critical in combating complex, cross – border cyber threats.
Public awareness also plays a vital role. Many citizens are unaware of how their data is collected or used. Education on safe online practices, including strong password habits and recognising suspicious activity, is essential in building a culture of data responsibility.
Kenya is at a defining moment. Without the political commitment to Strengthen cyber protections and enforce data privacy laws, the benefits of digital growth may be undermined.
To delve deeper into this topic, visit Business Daily.
