Kenya Communications Authority Clarifies SIM Registration Rules

Author: Cezary Kowalski

Date: 18.11.2025

The Communications Authority of Kenya issued clarification addressing concerns over revised SIM card registration regulations published in May 2025. The Authority stated fears regarding mandatory biometric data collection during new mobile line registration are unfounded. No directives instructed mobile operators to collect biometric data from subscribers, according to official statements.

Security Framework Targets Fraud Prevention

The revised rules aim to enhance security and integrity of Kenya’s digital ecosystem. Primary focus involves protecting citizens from SIM-related fraud, identity theft, SIM box operations and criminal activities. The regulations reinforce trust in telecommunications by ensuring registered mobile lines correspond to genuine users.

Updated rules support secure access to mobile money, e-government platforms and digital commerce services. The CA stated new regulations do not require telecommunications operators to gather biometric information. Although biometric data is defined within the legal framework covering fingerprints, DNA, retinal scans and voice recognition, these definitions do not imply collection requirements.

Privacy Protection Standards Enforced

The CA confirmed new regulations impose strict obligations on operators regarding subscriber information handling. Data must be processed and stored according to the Kenya Information and Communications Act of 1998 and Data Protection Act of 2019. Operators cannot share customer data without consent or legitimate legal orders.

The Authority works jointly with the Office of the Data Protection Commissioner, maintaining oversight through audits. Penalties apply for customer information misuse. Revised rules allow service suspension only when subscribers provide false information or repeatedly fail compliance.

Operators must issue prior notice before any disconnection, following clear and transparent procedures. The framework addresses consumer frustration over spam messages, unauthorized subscriptions and unapproved premium services. The CA supports privacy-preserving technologies like number masking on mobile payment platforms, promoting trust and safety.