Internet & Online Safety - Kenya

The Computer Misuse and Cybercrimes (Amendment) Act, 2025 was assented to by President Ruto on 15 October 2025, expanding offences (SIM-swap fraud, identity theft, online harassment) and the National Computer and Cybercrime Co-ordination Committee's (NC4) power to render websites/apps promoting 'unlawful activities and religious extremism' inaccessible.

Under the 2025 amendment, NC4's previously unchecked power to restrict access to websites and applications was placed under judicial oversight via a new section 46A, requiring a court process before access is restricted.

On 22 October 2025 the High Court suspended section 27(1)(b),(c) and (2) of the 2018 Act—which criminalized communication that 'detrimentally affects a person' or is 'indecent or grossly offensive'—pending a constitutional challenge filed by the Kenya Human Rights Commission and others.

The Communications Authority's Industry Guidelines for Child Online Protection and Safety took effect 29 October 2025, requiring ICT firms, operators and device makers to implement age-verification mechanisms, default safety settings, complaint mechanisms, and to file child-protection policies and quarterly compliance reports with the CA.

The Kenya Information and Communications (Amendment) Bill, 2025 proposes requiring social-media platforms available in Kenya to register and maintain a physical local office, with the CA empowered to halt non-compliant platforms; in May 2026 the government ordered X to establish a local office within three months while it operates under temporary authorization.

The Kenya Information and Communications Act (Cap. 411A, in force since 1998 and repeatedly amended) is the baseline ICT law, licensing operators through the Communications Authority and containing intermediary-related provisions, including compliance/takedown notices (e.g., the National Cohesion and Integration Commission's power to demand disruption of access to impugned material).