Katiba Institute v Communications Authority of Kenya & 2 others; Data Privacy and Governance Society of Kenya & 3 others (Interested Parties); Ideate Policy Africa Limited (ITPA) (Amicus Curiae)
Katiba Institute v Communications Authority of Kenya & 2 others; Data Privacy and Governance Society of Kenya & 3 others (Interested Parties); Ideate Policy Africa Limited (ITPA) (Amicus Curiae) [2025] KEHC 10568 (KLR)
The court found that IMEI numbers, once associated with individuals through device registration and network activation, constitute personal data protected under Article 31 of the Constitution and the Data Protection Act. The impugned notices by the 1st and 2nd respondents, which required the collection, processing, and storage of IMEI numbers, lacked a clear legal basis and failed to comply with statutory requirements, including the need for guidelines, public participation, and a data protection impact assessment. The respondents did not demonstrate that the limitation of the right to privac…
Source excerpt
- Right To Privacy
- Data Protection
- Administrative Action
- Statutory Instruments
- Public Participation
- Proportionality Test