Skip to content
World Watch

Online safety & content laws in Kenya (2026)

Online safety rules in Kenya: partial.

Kenya has no single, EU-DSA/UK-OSA-style online safety statute. Online content is governed by a patchwork: the Computer Misuse and Cybercrimes Act (as amended in 2025) criminalises specific online harms and sets intermediary notice-and-takedown rules, the CA has issued binding child online protection guidelines (effective October 2025) that require age verification by service providers, and a wider social media age verification bill using national IDs is pending in Parliament. On 2 July 2026 the High Court struck down the executive website-blocking power and the 'false information' provision from the 2025 amendments as unconstitutional.

Last verified Official sources first · MethodologyCompare Kenya with other countries

Legal framework

Computer Misuse and Cybercrimes Act, 2018 (as amended by the Computer Misuse and Cybercrimes (Amendment) Act, 2025, in force 4 November 2025); Communications Authority of Kenya Industry Guidelines for Child Online Protection and Safety (April 2025); Kenya Information and Communications (Amendment) Bill, 2025 (pending). Primary regulators: Communications Authority of Kenya (CA) and the National Computer and Cybercrimes Coordination Committee (NC4).

Key points: internet & online safety in Kenya

  1. Primary cybercrime/content law

    The Computer Misuse and Cybercrimes Act, 2018 (amended 2025, commenced 4 November 2025) criminalises cyber harassment, child sexual abuse material, false information, incitement, identity theft and related online offences, and empowers the National Computer and Cybercrimes Coordination Committee (NC4).

    ke-cirt.go.ke digitalpolicyalert.org

  2. High Court limits on blocking powers

    On 2 July 2026 the High Court (Justice Patricia Mande) declared Sections 6(1)(ja) and 27(1)(b) of the 2025 Amendment Act unconstitutional, striking down the NC4's power to order blocking of websites/apps without a court order and the offence of communications likely to induce suicide, for violating freedoms of expression, media and religion.

    allafrica.com article19.org

  3. Child Online Protection Guidelines (in force)

    The Communications Authority adopted the Industry Guidelines for Child Online Protection and Safety on 29 April 2025, requiring Application and Content Service Providers to deploy age verification, content filtering, parental controls on devices, and governance policies; compliance deadline was 29 October 2025.

    ca.go.ke cadeproject.org

  4. Proposed ID-based age verification bill

    The Kenya Information and Communications (Amendment) Bill, 2025 (sponsored by MP Marianne Kitany) proposes mandatory national-ID age verification for social media access (WhatsApp, Facebook, Instagram, LinkedIn, etc.), ISP metered-billing identifiers and personal-data submission to the CA; the Bill remains before Parliament and has drawn human rights concerns.

    icj-kenya.org citizen.digital

  5. Intermediary liability regime

    Under the Cybercrimes Act, platforms and ISPs are not liable for user-generated content absent actual knowledge or wilful facilitation; courts (and, prior to the 2026 ruling, the NC4) can order removal of harmful content, with takedown/notification duties and fines for non-compliance.

    scielo.org.za cmadvocates.com

  6. Local-presence requirement for platforms

    In 2025 Kenya's ICT Cabinet Secretary ordered X, TikTok and Meta to establish a legal/physical presence in Kenya within three months or risk suspension, and granted the Communications Authority expanded powers to suspend non-compliant platforms, framed as a child online safety measure.

    business-humanrights.org

Timeline of decisions

  1. Guidance
    Kenya orders X and social platforms to open local offices

    The ICT Cabinet Secretary required major social media platforms including X to establish local offices, with the Communications Authority empowered to suspend non-compliant platforms, as part of a child-protection and content-moderation push.

    Broadcast Media Africa

  2. Decision
    Supreme Court petition challenges cyber-surveillance powers

    BAKE, the Law Society of Kenya, Article 19 and the journalists' union petitioned the Supreme Court to strike surveillance provisions of the Computer Misuse and Cybercrimes Act as violating privacy (Art. 31) and expression (Art. 33).

    Daily Nation

  3. Decision · official
    Court of Appeal voids Sections 22 & 23 of Cybercrimes Act

    In the BAKE appeal, the Court of Appeal declared the 'false publications' offences (Sections 22 and 23) unconstitutional as vague and a threat to legitimate online speech, a landmark win for digital rights.

    Kenya Law

  4. Decision
    High Court suspends parts of 2025 cybercrime amendments

    Justice Lawrence Mugambi issued conservatory orders pausing enforcement of cyber-harassment and false-information clauses (Sec. 27) of the Amendment Act after a petition by Reuben Kigame, KHRC and Francis Awino.

    allAfrica

  5. Law
    Computer Misuse and Cybercrimes (Amendment) Act, 2025 enacted

    President Ruto assented to amendments expanding offences including publication of 'false, misleading or mischievous' information, drawing criticism that vague provisions threaten online expression.

    Human Rights Watch

  6. Incident
    Telegram blocked and TV/radio coverage halted during Gen Z protests

    The Communications Authority ordered broadcasters to stop live protest coverage while Telegram was restricted for about 19 days, a coordinated information clampdown during the June 25 anniversary demonstrations.

    OONI

  7. Incident
    Telegram blocked during national KCSE examinations

    Telegram was made inaccessible for roughly 16 days during secondary-school exams, with authorities citing the need to curb leaked exam papers, normalizing platform-level blocking as a regulatory tool.

    Freedom House

  8. Decision · official
    High Court upholds Cybercrimes Act, dismisses BAKE petition

    Justice James Makau dismissed BAKE's constitutional challenge (Petition 206 of 2018), lifting the suspension on the contested sections and bringing the full Act into force.

    Kenya Law

  9. Decision · official
    High Court suspends 26 sections of the Cybercrimes Act

    Days after enactment, Justice Chacha Mwita granted BAKE conservatory orders suspending 26 provisions (including the false-publication and content offences) pending a full constitutional hearing.

    Kenya Law

  10. Law · official
    Computer Misuse and Cybercrimes Act, No. 5 of 2018 enacted

    Kenya's principal cybercrime statute criminalized hacking, identity theft, cyber harassment and publication of false information online, becoming the central instrument for regulating online conduct.

    Kenya Law

Sources

  1. ke-cirt.go.ke/wp-content/uploads/2025/12/Computer-Misuse-and-Cybercrimes-Amendment-
  2. ca.go.ke/sites/default/files/2025-04/%20Industry%20Guidelines%20for%20Child%20
  3. digitalpolicyalert.org/change/13427-content-moderation-regulation-in-computer-misuse-and-cyb
  4. allafrica.com/stories/202607030062.html
  5. article19.org/resources/kenya-cybercrime-provisions-on-false-information-are-uncons
  6. icj-kenya.org/news/human-rights-analysis-of-the-kenya-information-and-communication
  7. citizen.digital/article/new-bill-requires-kenyans-to-verify-id-for-social-media-acces
  8. business-humanrights.org/en/latest-news/kenya-government-orders-x-tiktok-and-meta-to-establish
  9. cadeproject.org/updates/kenya-issues-comprehensive-industry-guidelines-for-child-onli
  10. scielo.org.za/scielo.php?pid=S2077-72132018000100001&script=sci_arttext
  11. cmadvocates.com/blog/kenyas-new-cybercrimes-law-progress-or-overreach-a-deep-dive-int

Next for Kenya: CybersecurityComprehensive law

Next topic

Orientation, not legal advice: verify against the primary sources linked above. Last verified 17 Oct 2026. Methodology & how to cite · State of Technology Regulation 2026