Safaricom, Kenya’s leading telecommunications provider, is facing scrutiny over allegations of unlawfully sharing identification information of a former employee. The incident has raised concerns about data privacy and corporate handling of sensitive personal information, particularly significant given Safaricom’s recent implementation of biometric registration systems for customer identity verification.
Former Chief Justice of Kenya Willy Mutunga has publicly criticized Safaricom’s actions, calling for severe measures against the company regarding what he characterized as “rogue tactics.” The specific details of how the ex-employee’s identification information was shared have not been disclosed.
The case underscores ongoing discussions about data protection in Kenya’s telecommunications sector. Kenya enacted the Data Protection Act in 2019, which established requirements for companies handling personal information and created the Office of the Data Protection Commissioner to oversee compliance. The legislation has become increasingly relevant as telecom operators expand their collection and processing of biometric and personal data for services like SIM registration and mobile banking.
The telecommunications sector in Kenya has seen increased scrutiny regarding data privacy practices in recent years, as mobile operators maintain extensive databases of customer and employee information. These databases include national ID numbers, biometric data, and other sensitive personal details required for SIM card registration and employment records. The implementation of biometric SIM registration by Safaricom has raised the stakes for proper data handling procedures, as the company now manages an expanding collection of sensitive biometric identifiers alongside traditional personal information.
The situation unfolds against the backdrop of broader digital identity developments in Kenya, where telecommunications providers play a crucial role in the national digital infrastructure. Recent regulatory changes have included enhanced requirements for mobile device registration and identity verification, making the proper handling of personal data increasingly critical for both consumer protection and regulatory compliance.
The specific nature of any legal proceedings or regulatory actions against Safaricom in this matter, including details of any fines imposed, has not been publicly disclosed. Regulatory bodies and consumer advocacy groups have not issued public statements regarding the incident.
Sources: Kenya Insights
Follow Us