Parliament has approved the creation of a new body to oversee cybersecurity and digital safety after passing the National Cybersecurity Agency Order, 2026, a move that has triggered concerns over possible regulation of social media and increased state oversight of online activity.
The National Cybersecurity Agency (NCSA) will coordinate the country’s cybersecurity efforts, including tackling online fraud, identity theft, cyberattacks, data breaches, malicious software and misinformation campaigns.
However, civil society organisations and digital rights advocates have raised concerns that the agency could be used to expand state oversight of online activity, infringe on privacy rights, or restrict internet access, particularly as the country moves closer to the next General Election.
The approval comes amid growing debate over the balance between national security and digital freedoms, with critics warning that attempts to regulate online spaces risk undermining freedom of expression, privacy and access to information.
Defending the initiative, Internal Security Principal Secretary Raymond Omollo said the agency will strengthen Kenya’s ability to protect its expanding digital infrastructure and respond to emerging cyber threats.
“Cybercrime, ransomware attacks, online fraud, identity theft, malicious software, data breaches, misinformation campaigns and attacks on critical digital infrastructure continue to pose growing risks to national security, economic stability and public confidence in digital services,” he said.
According to the government, the NCSA will operate as an autonomous regulatory and technical institution responsible for coordinating cybersecurity matters across both public and private sectors. It will also establish satellite offices, specialised units and technical centres where necessary to support its mandate.
The agency will conduct regular assessments of government and private digital systems, monitor vulnerabilities, and deploy forensic and analytical tools to identify emerging cyber threats. It will also issue technical advisories aimed at improving compliance with national cybersecurity standards.
Kenya’s rapidly growing digital economy has increased demand for stronger cyber protection, with the country emerging as a regional leader in mobile money, digital finance, e-government platforms, telecommunications, online commerce and other technology-driven services.
“While these developments have expanded opportunities for innovation, investment and service delivery, they have also increased exposure to cyber threats targeting both public and private sector systems,” added the PS.
DataReportal estimates that Kenya now has more than 26 million internet users, underscoring the growing influence of digital platforms as sources of information, entertainment and public discourse.
Despite government assurances, critics maintain that any attempts to regulate online spaces must be carefully scrutinised to ensure they do not undermine constitutional rights.
Email your news TIPS to Editor@nairobilawmonthly.com, and to advertise with us, call +254715061658 anytime of the day
