Internet & Online Safety · Kenya
Online safety & content laws in Kenya (2026)
Kenya shaded by its internet & online safety status
Kenya regulates online content and safety through several overlapping instruments rather than one DSA/OSA-style law: the Computer Misuse and Cybercrimes Act 2018 (criminalizing offences and enabling site-blocking), recently amended in 2025, sector guidelines from the Communications Authority on child online protection and age verification (in force 29 Oct 2025), and a pending Information and Communications (Amendment) Bill 2025 that would force social-media platforms to register and open local offices. Several provisions are contested—the High Court suspended parts of the 2018 Act's offensive-communication offence in October 2025—and civil-society groups warn the 2025 cybercrime amendments risk overreach against speech.
Key points
The Computer Misuse and Cybercrimes (Amendment) Act, 2025 was assented to by President Ruto on 15 October 2025, expanding offences (SIM-swap fraud, identity theft, online harassment) and the National Computer and Cybercrime Co-ordination Committee's (NC4) power to render websites/apps promoting 'unlawful activities and religious extremism' inaccessible.
Under the 2025 amendment, NC4's previously unchecked power to restrict access to websites and applications was placed under judicial oversight via a new section 46A, requiring a court process before access is restricted.
On 22 October 2025 the High Court suspended section 27(1)(b),(c) and (2) of the 2018 Act—which criminalized communication that 'detrimentally affects a person' or is 'indecent or grossly offensive'—pending a constitutional challenge filed by the Kenya Human Rights Commission and others.
The Communications Authority's Industry Guidelines for Child Online Protection and Safety took effect 29 October 2025, requiring ICT firms, operators and device makers to implement age-verification mechanisms, default safety settings, complaint mechanisms, and to file child-protection policies and quarterly compliance reports with the CA.
The Kenya Information and Communications (Amendment) Bill, 2025 proposes requiring social-media platforms available in Kenya to register and maintain a physical local office, with the CA empowered to halt non-compliant platforms; in May 2026 the government ordered X to establish a local office within three months while it operates under temporary authorization.
The Kenya Information and Communications Act (Cap. 411A, in force since 1998 and repeatedly amended) is the baseline ICT law, licensing operators through the Communications Authority and containing intermediary-related provisions, including compliance/takedown notices (e.g., the National Cohesion and Integration Commission's power to demand disruption of access to impugned material).
Timeline - major decisions & events
The ICT Cabinet Secretary required major social media platforms including X to establish local offices, with the Communications Authority empowered to suspend non-compliant platforms, as part of a child-protection and content-moderation push.
Broadcast Media Africa ↗BAKE, the Law Society of Kenya, Article 19 and the journalists' union petitioned the Supreme Court to strike surveillance provisions of the Computer Misuse and Cybercrimes Act as violating privacy (Art. 31) and expression (Art. 33).
Daily Nation ↗In the BAKE appeal, the Court of Appeal declared the 'false publications' offences (Sections 22 and 23) unconstitutional as vague and a threat to legitimate online speech, a landmark win for digital rights.
Kenya Law ↗Justice Lawrence Mugambi issued conservatory orders pausing enforcement of cyber-harassment and false-information clauses (Sec. 27) of the Amendment Act after a petition by Reuben Kigame, KHRC and Francis Awino.
allAfrica ↗President Ruto assented to amendments expanding offences including publication of 'false, misleading or mischievous' information, drawing criticism that vague provisions threaten online expression.
Human Rights Watch ↗The Communications Authority ordered broadcasters to stop live protest coverage while Telegram was restricted for about 19 days, a coordinated information clampdown during the June 25 anniversary demonstrations.
OONI ↗Telegram was made inaccessible for roughly 16 days during secondary-school exams, with authorities citing the need to curb leaked exam papers, normalizing platform-level blocking as a regulatory tool.
Freedom House ↗Justice James Makau dismissed BAKE's constitutional challenge (Petition 206 of 2018), lifting the suspension on the contested sections and bringing the full Act into force.
Kenya Law ↗Kenya's first comprehensive privacy law, modeled on the EU GDPR, gave effect to Article 31 of the Constitution and created the Office of the Data Protection Commissioner to govern handling of personal data online.
Laws of Kenya ↗Days after enactment, Justice Chacha Mwita granted BAKE conservatory orders suspending 26 provisions (including the false-publication and content offences) pending a full constitutional hearing.
Kenya Law ↗Kenya's principal cybercrime statute criminalized hacking, identity theft, cyber harassment and publication of false information online, becoming the central instrument for regulating online conduct.
Kenya Law ↗Amendments to the Kenya Information and Communications Act renamed the regulator the Communications Authority of Kenya and strengthened its powers over broadcasting and internet content standards and ISP compliance.
Laws of Kenya ↗Kenya - other topics
Last verified 5/23/2026 · Orientation, not legal advice - verify against the primary sources linked above. Explore the full world map →