Kenya, Sept. 9 -- On September 8, 2025, a notable event unfolded at Nairobi's Milimani Law Courts when a Safaricom employee, Mr Daniaf, admitted to disclosing subscriber data without obtaining a court order, which constitutes a significant breach of Kenya's Data Protection Act.
This case centres on university student David Oaga Mokaya, whose personal details were accessed in connection with allegations stemming from a deceptive social media post.
The situation illustrates increasing worries about telecom privacy violations in Kenya, where protecting user information continues to be a significant issue for ordinary people depending on mobile networks.
The situation developed when Mr Daniaf, while being questioned by the defence, candidly admitted to providing Mokaya's subscriber data to investigators without the necessary legal approval.
The incident took place while officials were investigating Mokaya's X post from November 2024, which showcased a modified image of a funeral procession, misleadingly suggesting it was related to President William Ruto.
The post rapidly gained traction, sparking significant public anger, as many interpreted it as a satirical take on political discontent. However, this prompted quick responses from law enforcement, who sought Mokaya's phone records to track down the account.
Individuals who put forth a claim - Defence attorney Danstan Omari pressed the witness about the unauthorised release, highlighting how these actions undermine trust in telecommunications companies and leave individuals vulnerable to unnecessary surveillance.
Mokaya, a fourth-year student at Moi University, is facing charges under the Computer Misuse and Cybercrimes Act for allegedly spreading false information that led to public panic.
During the court proceedings, it was disclosed that the image portrayed a casket covered with the Kenyan flag, accompanied by military personnel, along with a caption implying that it depicted the president's body being transported from a funeral home.
The prosecution claims that the post disturbed social harmony, while Mokaya's supporters argue that it was a form of protected expression. The recent unauthorised data leak has intensified discussions surrounding telecom privacy violations in Kenya, a country where millions rely on services such as M-Pesa and voice calls for their everyday needs.
Experts highlight that these violations pose a risk of identity theft and may also lead to potential government overreach, as evidenced by the increasing number of complaints regarding location tracking without consent.
This event fits into a larger trend of examination surrounding Safaricom, the leading telecom company in Kenya, which has been confronted with several allegations regarding the improper management of customer data.
In the past, there was a significant leak in 2019 that exposed the details of more than 11 million gamblers, resulting in extensive lawsuits seeking trillions in compensation.
Published by HT Digital Content Services with permission from Bana Kenya.