President William Ruto has officially signed into law the Computer Misuse and Cybercrimes (Amendment) Act, 2024, introducing some of the toughest penalties ever seen for online misconduct in Kenya. The new statute aims to combat cyber harassment, identity theft, and the spread of harmful digital content, while giving authorities greater power to regulate online spaces.
Harsher Penalties for Online Misconduct
The new law defines cyber harassment as any direct or indirect communication that an individual knows — or ought to know — could cause harm. This includes conduct that threatens safety, damages a person’s reputation, causes emotional distress, or is indecent or grossly offensive in nature.
Anyone found guilty faces a fine of up to Ksh 20 million, 10 years in prison, or both. The law also introduces penalties for those who assist, abet, or continue harassment even after being warned or ordered to stop.
Court Orders and Victims’ Rights
The Act allows victims to seek legal protection by applying for a court order to compel an offender to stop harmful communication or to restrain others from spreading it further. Courts are required to hear such cases within 14 days, and in emergencies, applications can be made outside regular court hours.
Additionally, courts may direct telecommunication or internet service providers to share subscriber details to help identify anonymous offenders. Failure to obey such a court order can attract a fine of up to Ksh 1 million, six months imprisonment, or both.
Expanded Definition of Cyber Offences
The amendments broaden the scope of what constitutes computer misuse and cybercrime, reflecting modern technological threats.
- Identity theft now includes unauthorized use of someone’s identification, passwords, SIM card details, or banking information.
- Digital impersonation and phishing are now criminalized, closing gaps that previously existed in cyber fraud enforcement.
- Unauthorized SIM swaps and data harvesting are also punishable under the new law.
- The term “asset” now extends to include digital property, cryptocurrencies, and intellectual rights.
Government Powers to Control Illegal Content
The law grants the state and courts authority to block websites, take down illegal content, or shut down social media accounts that promote criminal activity. Investigators can now act preemptively — applying for a court order even before the harmful material spreads.
Offences covered under this section include:
- Child exploitation and pornography
- Terrorism-related propaganda
- Extreme religious or cultic content
- False information or digital impersonation
Once a court authorizes action, authorities can compel the removal of content from any digital device, server, or website, effectively disabling the source of the violation.
Pushback and Civil Rights Concerns
While the law aims to protect citizens from cyber abuse and digital crime, it has drawn criticism from activists and civil rights defenders. Critics argue that some provisions could be misused to silence dissent or target journalists, given their broad wording. Terms like “offensive communication” or “indecent material” are seen as open to interpretation, leaving room for abuse.
Digital freedom groups have also warned that the expanded state powers over online platforms could lead to overreach and censorship if not implemented with transparency and judicial oversight.
Background and Legislative Journey
The Computer Misuse and Cybercrimes (Amendment) Bill, 2024, was introduced by Wajir East MP Aden Daudi Mohamed and reviewed by the Departmental Committee on Communication, Information and Innovation, chaired by Dagoretti South MP John Kiarie. It received overwhelming support in Parliament, following concerns over rising cases of online fraud, defamation, and fake news.
In defending the bill, Kiarie noted that Kenyans spend over four hours online daily, making the country highly vulnerable to digital scams, misinformation, and cyberbullying. The law, he said, provides the tools to curb these emerging threats while encouraging responsible use of technology.
Looking Ahead
With this law now in force, Kenya joins a growing list of African countries tightening cyber regulations in response to online abuse and digital crime. However, its success will depend on whether enforcement agencies can strike the right balance between protecting citizens and preserving freedom of expression.
The Ksh 20 million fine and 10-year jail term serve as a stern warning to internet users: in the digital age, every post, message, and upload carries legal responsibility.
