- KICTANet - KICTANet

UNESCO Guidelines for the governance of digital platforms Launched
by Victor Kapiyo 07 Nov '23

07 Nov '23

Dear listers, UNESCO has launched the Guidelines for the Governance of Digital Platforms. These Guidelines outline a set of duties, responsibilities and roles for States, digital platforms, intergovernmental organizations, civil society, media, academia, the technical community and other stakeholders to enable the environment where freedom of expression and information is at the core of digital platforms governance processes. The Guidelines were produced through a multi-stakeholder consultation that gathered more than 10,000 comments from 134 countries. These global-scale consultations fostered inclusive participation, ensuring a diversity of voices to be heard, including those from groups in situations of marginalization and vulnerability. Cultivating an Internet of Trust is a shared responsibility among all stakeholders. It calls upon us all to sustain an enabling environment for freedom of expression and the right to information. Read more - https://unesdoc.unesco.org/ark:/48223/pf0000387339 Regards, Victor Kapiyo Partner | Lawmark Partners LLP Nine Planet Apartments, Nairobi | Web: www.lawmark.co.ke ==================================================== “Your attitude, not your aptitude, will determine your altitude” Zig Ziglar

1 0

Public Participation: Have Your Say on the Draft Kenya Space Bill 2023
by David Indeje 06 Nov '23

06 Nov '23

Dear Listers, The Kenya Space Agency is developing a legal framework to regulate and promote the development of the space sector in Kenya. The Draft Kenya Space Bill 2023 aims to provide for the establishment, management, and functions of the Kenya Space Agency, as well as the regulation of space activities and related matters. We invite you to review the Draft Kenya Space Bill 2023 and share your views and comments. You can access the draft bill and other relevant documents from the links below. Kenya Space Agency (ksa.go.ke) <https://ksa.go.ke/docs/kenya-space-bill> Please send your written submissions by email to secretariat(a)ksa.go.ke or by post to the Director-General, Kenya Space Agency, by Monday 20 November 2023 at 5:00 p.m. -- *Kind Regards,* *David Indeje* *KICTANet Communications *_____________________________________ +254 (0) 711 385 945 | +254 (0) 734 024 856 KICTANet portals KICTANet.or.ke <https://kictanet.or.ke/> | Twitter <https://twitter.com/kictanet> | LinkedIn <https://www.linkedin.com/company/18428106/admin/> | Facebook <https://www.facebook.com/KICTANet/>

1 0

Citizen Data protection anomaly at Ministry of Interior
by Mwendwa Kivuva 05 Nov '23

05 Nov '23

In the age of data protection, the Ministry of Interior is publishing at scale the names of all citizens who have successfully applied for passports. Every week since the CS initiated the rapid results initiative, the Immigration Department has been publishing publicly the names of all passports ready for collection. Kindiki may have been doing a good thing - expediency, but as they say, the road to hell is paved by good intentions. The list is available on the immigration department website here http://immigration.go.ke/category/rri-7/ for all passports ready for collection for 6th-10th November 2023. More data is available for other weeks. The data has tracking numbers, full passport holder names, and collection dates. Through quick analysis, this week alone has 18,654 names published and distributed as follows; Kisii 1500 Kisumu 1692 Eldoret 1787 Embu 1750 Mombasa 1552 Nakuru 1000 Nairobi 9373 Questions 1. What can go wrong? What can bad actors do with this data? 2. Do data subjects need to give consent for such data to be published in a public portal? 3. Does the government have the capacity to safely handle mass citizen data? 4. How have other government agencies provided verification services without compromising on privacy? IEBC had such a challenge before the 2022 elections and they instituted a verification process for accessing voter registration data. 5. Does the Ministry of Interior have the capacity to roll out the Digital ID dubbed Maisha namba? 6. Is the ODPC under the Data Protection Act 2019 up to the task of regulating and enforcing compliance of government agencies? 7. How can we help the government in handling citizen data? For demonstration purposes, what are the implications of a data breach at scale? Just this year, there were allegations that Fuliza scammers gained access to the National Registration Bureau Database and added new citizens. The freshly minted ghost citizens went ahead and borrowed close to Ksh500 million through Safaricom’s Fuliza overdraft facilities. https://ntvkenya.co.ke/crime/eight-suspects-arrested-in-kes-500-million-ful…

4 4

Complaint on Quality of Service along SGR Corridor (Mombasa - Nairobi)
by Twahir Hussein Kassim 27 Oct '23

27 Oct '23

Chukua Hatua Team, I hope this email finds you well. I am writing to express my deep concern and frustration regarding the poor quality of service for mobile and internet connectivity along the Standard Gauge Railway (SGR) corridor between Mombasa and Nairobi. The SGR has undoubtedly been a significant infrastructure development for our country, greatly improving transportation between these two major cities. However, the lack of reliable and consistent connectivity along this corridor is negatively impacting both travellers and businesses alike. As a frequent traveller on the SGR, I have experienced repeated disruptions in mobile and internet services during my journeys. These connectivity issues not only inconvenience passengers but also hinder productivity and communication for those who rely on the train as a workspace. The challenges I've faced include: 1. *Inconsistent Network Coverage:* The SGR corridor often lacks adequate network coverage, resulting in dead zones where passengers are unable to make calls, send emails, or access the internet. 2. *Slow and Unreliable Internet:* Even when there is signal, the internet speed is frustratingly slow, making it almost impossible to carry out essential online tasks, particularly for professionals who work remotely. 3. *Communication Breakdown:* Travelers, including business professionals, are finding it increasingly difficult to stay in touch with colleagues, clients, and family members while on the move. 4. *Missed Business Opportunities:* Entrepreneurs and businesses aiming to expand their operations or make crucial business decisions during their journey face significant hindrances due to connectivity issues. The SGR corridor has enormous potential not just for transportation but also for enhancing Kenya's digital infrastructure. As it stands, the inadequate connectivity is preventing us from fully benefiting from this world-class railway. I kindly request the Communication Authority of Kenya to investigate these connectivity issues along the SGR corridor and take necessary actions to improve the quality of service. Our nation's growth and development depend on a reliable and robust digital infrastructure, and it is imperative that travellers and businesses have access to efficient and uninterrupted connectivity. I would appreciate your prompt attention to this matter and would be willing to provide any further information or feedback that could assist in addressing these challenges. I believe that by working together, we can ensure that the SGR corridor becomes a symbol of progress and connectivity for our country. Thank you for providing a platform where we can lodge complaints / feedback. Sincerely, *Twahir Hussein Kassim* *Founder * *Dunia Moja Community Network* *Telephone: +254 734 259 223* *WhatsApp: +254 722 259 223* *Skype: twahirhk* *LinkedIn: *https://www.linkedin.com/in/thkm/ [image: Mailtrack] <https://mailtrack.io?utm_source=gmail&utm_medium=signature&utm_campaign=sig…> Sender notified by Mailtrack <https://mailtrack.io?utm_source=gmail&utm_medium=signature&utm_campaign=sig…> 10/27/23, 11:29:36 AM

1 0

🚗 Data Protection Act 2019 Vs Dashboard Cameras and Vehicle Telematics and Minors 📹
by Twahir Hussein Kassim 27 Oct '23

27 Oct '23

Listers, Your thoughts? I did this post on LinkedIn <https://www.linkedin.com/posts/thkm_murkomen-wants-psvs-school-buses-fitted…> In an increasingly tech-savvy world, Kenya's Cabinet Secretary, Ministry of Transport - Kipchumba Murkomen <https://www.linkedin.com/feed/update/urn:li:activity:7123531131030757376/?c…> is considering mandatory dashboard cameras and vehicle telematics in public and commercial vehicles. While this promises safety and accountability, it raises concerns, especially for minors. 👍Positive Impacts 1. 🛡️Enhanced Safety: These can serve as valuable tools in ensuring passenger/drivers safety, as they can provide evidence in the event of accidents, disputes, or security incidents. 2. 👩‍✈️Improved Driver Behavior: Can encourage responsible driving, thereby reducing accidents and promoting road safety. 3. 🚚Fleet Management: Can help fleet operators optimize routes, monitor fuel consumption, and improve efficiency. 👎Negative Impacts 1. 🕶️Privacy Concerns: The Data Protection Act 2019 mandates that personal data, must be handled with utmost care. Continuous video recording and data collection may infringe on the privacy rights of individuals. 2. 🔐Data Security: Inadequate data security measures can expose sensitive information to unauthorized access, leading to potential risks for minors, such as identity theft or online bullying and exploitation. 3. 📜Consent Issues: It is essential to ensure that informed and explicit consent is obtained from data subjects and legal guardians. 4. 📍Location Tracking: Vehicle telematics systems include GPS tracking, which can reveal the exact location of the vehicle and, by extension, the movements of persons, raising concerns about their safety. 5. 📊Data Exploitation: Collected data could be exploited, shared, or sold without consent, leading to the potential misuse of personal information about minors. ⚖It is imperative to strike a balance between benefits of these technologies and the protection of individuals' rights, comprehensive measures need to be put in place. The enforcement of dashboard cameras and vehicle telematics can undoubtedly bring positive changes to the transportation sector. However, it is of paramount importance to ensure that data protection and the privacy is taken into account. *#DataProtection* *#TransportSafety* *#PrivacyRights* *#FleetManagement* *#Cybersecurity* *Twahir Hussein Kassim* *Founder * *Dunia Moja Network* *Telephone: +254 734 259 223* *WhatsApp: +254 722 259 223* *Skype: twahirhk* *LinkedIn: *https://www.linkedin.com/in/thkm/ [image: Mailtrack] <https://mailtrack.io?utm_source=gmail&utm_medium=signature&utm_campaign=sig…> Sender notified by Mailtrack <https://mailtrack.io?utm_source=gmail&utm_medium=signature&utm_campaign=sig…> 10/27/23, 09:45:36 AM

1 0

Cyber Security Month - What are You Doing?
by David Indeje 19 Oct '23

19 Oct '23

Dear Listers, This October, join us in marking the internationally recognized Cybersecurity Awareness Month. KICTANet has been leading the charge with a month-long virtual programme <https://www.kictanet.or.ke/kictanet-observes-october-as-cybersecurity-aware…> designed to educate, inform, and protect individuals and businesses from potential cyber threats. Under the theme, “Cybersecurity starts with me”, we’ve been sharing a wealth of cybersecurity tips, tools, resources, and best practices to help keep Kenyans digitally safe and maintain their cyber resilience. But we can’t do it alone. We need your help! We encourage everyone to take a small step this month to enhance their digital security. Whether it’s updating your passwords, backing up your data, or educating yourself on the latest scams, every action counts. Remember, cybersecurity isn’t just about protecting yourself - it’s about protecting all of us. Because when it comes to cybersecurity, we’re all in this together. So why not share what you’re doing this Cybersecurity Awareness Month? Let’s spread the word and make the internet a safer place for everyone. -- *Kind Regards,* *David Indeje* *KICTANet Communications *_____________________________________ +254 (0) 711 385 945 | +254 (0) 734 024 856 KICTANet portals KICTANet.or.ke <https://kictanet.or.ke/> | Twitter <https://twitter.com/kictanet> | LinkedIn <https://www.linkedin.com/company/18428106/admin/> | Facebook <https://www.facebook.com/KICTANet/>

1 0

Cybersecurity and Kenya's Digital Super Highway
by Nanjira Sambuli 18 Oct '23

18 Oct '23

Dear listers, Sharing with you a paper I penned, catalysed by the July cyber incidents and what they portend for KK’s ‘digital superhighway’ agenda. Thoughts/reactions welcome. https://carnegieendowment.org/2023/10/12/when-rubber-meets-road-cybersecuri…

1 0

Articles from KICTANet 16 October 2023
by News＠KICTANet 16 Oct '23

16 Oct '23

KICTANet Newsletter [View this in your browser.](https://www.kictanet.or.ke?mailpoet_router&endpoint=track&action=click&data=WyIzMiIsImQ4YTUxYjEzN2Y5OWI0OGE4NmQwMDUyOGFhZGNhMWMxIiwiMjkiLCI0YjYzNGU4ZjU5MzYiLGZhbHNlXQ) Welcome to our weekly newsletter, where we bring you the latest updates and developments in the world of technology and policy in Kenya and beyond. You vs AI: The Right to be Humanly Imperfect AI, though a powerful tool, still remains a tool. A machine. A device that makes work easier. There is no instance that it will surpass humanity. Rather it will always be a servant. A very powerful helper. [Read more](https://www.kictanet.or.ke?mailpoet_router&endpoint=track&action=click&data=WyIzMiIsImQ4YTUxYjEzN2Y5OWI0OGE4NmQwMDUyOGFhZGNhMWMxIiwiMjkiLCIyYWNiMDZlODcyNzgiLGZhbHNlXQ) [You vs AI: The Right to be Humanly Imperfect](https://www.kictanet.or.ke?mailpoet_router&endpoint=track&action=click&data=WyIzMiIsImQ4YTUxYjEzN2Y5OWI0OGE4NmQwMDUyOGFhZGNhMWMxIiwiMjkiLCIyYWNiMDZlODcyNzgiLGZhbHNlXQ) Visit Our Socials We always want to engage you on our social media pages. [Check it out](https://www.kictanet.or.ke?mailpoet_router&endpoint=track&action=click&data=WyIzMiIsImQ4YTUxYjEzN2Y5OWI0OGE4NmQwMDUyOGFhZGNhMWMxIiwiMjkiLCJlY2RiZDU0ZjcwZTgiLGZhbHNlXQ) [Unsubscribe](https://www.kictanet.or.ke?mailpoet_router&endpoint=track&action=click&data=WyIzMiIsImQ4YTUxYjEzN2Y5OWI0OGE4NmQwMDUyOGFhZGNhMWMxIiwiMjkiLCJkMjYzNTMwM2Q5YWIiLGZhbHNlXQ) | [Manage your subscription](https://www.kictanet.or.ke?mailpoet_router&endpoint=track&action=click&data=WyIzMiIsImQ4YTUxYjEzN2Y5OWI0OGE4NmQwMDUyOGFhZGNhMWMxIiwiMjkiLCJjODM1Y2JmYTAyMGYiLGZhbHNlXQ) [facebook](https://www.kictanet.or.ke?mailpoet_router&endpoint=track&action=click&data=WyIzMiIsImQ4YTUxYjEzN2Y5OWI0OGE4NmQwMDUyOGFhZGNhMWMxIiwiMjkiLCJlYTk3YTZiYjdmNmMiLGZhbHNlXQ) [twitter](https://www.kictanet.or.ke?mailpoet_router&endpoint=track&action=click&data=WyIzMiIsImQ4YTUxYjEzN2Y5OWI0OGE4NmQwMDUyOGFhZGNhMWMxIiwiMjkiLCJiZWNlYjcwZDc1MzMiLGZhbHNlXQ) [instagram](https://www.kictanet.or.ke?mailpoet_router&endpoint=track&action=click&data=WyIzMiIsImQ4YTUxYjEzN2Y5OWI0OGE4NmQwMDUyOGFhZGNhMWMxIiwiMjkiLCJjYmFjNDA4MTEwZjEiLGZhbHNlXQ) [youtube](https://www.kictanet.or.ke?mailpoet_router&endpoint=track&action=click&data=WyIzMiIsImQ4YTUxYjEzN2Y5OWI0OGE4NmQwMDUyOGFhZGNhMWMxIiwiMjkiLCI4ZDgzZTE5Njg5MGEiLGZhbHNlXQ) [linkedin](https://www.kictanet.or.ke?mailpoet_router&endpoint=track&action=click&data=WyIzMiIsImQ4YTUxYjEzN2Y5OWI0OGE4NmQwMDUyOGFhZGNhMWMxIiwiMjkiLCJkNDA2OTRiNzIzYTciLGZhbHNlXQ) [custom](https://www.kictanet.or.ke?mailpoet_router&endpoint=track&action=click&data=WyIzMiIsImQ4YTUxYjEzN2Y5OWI0OGE4NmQwMDUyOGFhZGNhMWMxIiwiMjkiLCI2YTlmZDRjNThmOTQiLGZhbHNlXQ) [Email Marketing Powered by MailPoet](https://www.kictanet.or.ke?mailpoet_router&endpoint=track&action=click&data=WyIzMiIsImQ4YTUxYjEzN2Y5OWI0OGE4NmQwMDUyOGFhZGNhMWMxIiwiMjkiLCJjNWFjNTdlOWIxMjkiLGZhbHNlXQ)

1 0

Habari Kutoka Dar
by Benson Muite 16 Oct '23

16 Oct '23

VPN inhahitaji ruhusu: https://www.tcra.go.tz/news/public-notice-declaration-of-use-of-virtual-pri…

2 1

ALert: Pay To Access Govt Services- No Free Lunch
by David Indeje 16 Oct '23

16 Oct '23

Dear Listers, Kenyans will now be forced to pay money for government services across all Huduma Centers if the plans by the State Department of Public Service, Performance and Delivery Management are actualized. “You have been enjoying these services without paying, there is no more free lunch. You have to pay for it, we will introduce fee for service for government service and private service to support our e-commerce because Huduma Centre will be backbone for e-commerce,” said Kuria during the official takeover of the State Department of Public Service, Performance and Delivery Management Govt to introduce fee for services at Huduma Centres, CS Kuria says » Capital News (capitalfm.co.ke) <https://www.capitalfm.co.ke/news/2023/10/govt-to-introduce-fee-for-services…> -- *Kind Regards,* *David Indeje* *KICTANet Communications *_____________________________________ +254 (0) 711 385 945 | +254 (0) 734 024 856 KICTANet portals KICTANet.or.ke <https://kictanet.or.ke/> | Twitter <https://twitter.com/kictanet> | LinkedIn <https://www.linkedin.com/company/18428106/admin/> | Facebook <https://www.facebook.com/KICTANet/>

1 0

Articles from KICTANet 09 October 2023
by News＠KICTANet 09 Oct '23

09 Oct '23

KICTANet Newsletter [View this in your browser.](https://www.kictanet.or.ke?mailpoet_router&endpoint=track&action=click&data=WyIzMiIsImQ4YTUxYjEzN2Y5OWI0OGE4NmQwMDUyOGFhZGNhMWMxIiwiMjgiLCIzZmI5ODJhODNlMWYiLGZhbHNlXQ) Welcome to our weekly newsletter, where we bring you the latest updates and developments in the world of technology and policy in Kenya and beyond. Welcome to the IGF 2023: It just Begun The Internet Governance Forum (IGF) 2023 has arrived, and the air is full of excitement. This annual event celebrates all things related to Internet Governance, digitality, and the limitless possibilities that the Internet offers. This year’s IGF is hosted in Kyoto by the Japanese Government and will run from day 0 on 8th October to day 4 on 12th October … [Read more](https://www.kictanet.or.ke?mailpoet_router&endpoint=track&action=click&data=WyIzMiIsImQ4YTUxYjEzN2Y5OWI0OGE4NmQwMDUyOGFhZGNhMWMxIiwiMjgiLCJkNDhmOTI3ZTI3ZGQiLGZhbHNlXQ) [Nic Nyakundi standing in front of the #IGF2023 logo at the KICC in Kyoto](https://www.kictanet.or.ke?mailpoet_router&endpoint=track&action=click&data=WyIzMiIsImQ4YTUxYjEzN2Y5OWI0OGE4NmQwMDUyOGFhZGNhMWMxIiwiMjgiLCJkNDhmOTI3ZTI3ZGQiLGZhbHNlXQ) Data Protection Commission Imposes Penalties for Privacy Violations [Immaculate Kassait Kenya’s first Data Commissioner](https://www.kictanet.or.ke?mailpoet_router&endpoint=track&action=click&data=WyIzMiIsImQ4YTUxYjEzN2Y5OWI0OGE4NmQwMDUyOGFhZGNhMWMxIiwiMjgiLCI3OWIxZmY5NDk1N2EiLGZhbHNlXQ) Kenya’s Office of the Data Protection Commission enforces significant fines on three entities for data privacy violations, marking a shift in the enforcement of the 2019 Data Protection Act. [Read more](https://www.kictanet.or.ke?mailpoet_router&endpoint=track&action=click&data=WyIzMiIsImQ4YTUxYjEzN2Y5OWI0OGE4NmQwMDUyOGFhZGNhMWMxIiwiMjgiLCI3OWIxZmY5NDk1N2EiLGZhbHNlXQ) #FIFAfrica 2023: The Internet Freedom We Want for Africa Policies and legal frameworks are the ladders we need to enjoy full freedom of the Internet and the digital space, and the foundation of it is accurate and well-secured data. It is also paramount that the laws we so much need are bucked up by evidence-based research data and a clear understanding of their expected impacts or outcomes. [Read more](https://www.kictanet.or.ke?mailpoet_router&endpoint=track&action=click&data=WyIzMiIsImQ4YTUxYjEzN2Y5OWI0OGE4NmQwMDUyOGFhZGNhMWMxIiwiMjgiLCIyZGNlNGVlMDJkNWEiLGZhbHNlXQ) [A banner of Forum on Interenet freedon in Africa 2023.](https://www.kictanet.or.ke?mailpoet_router&endpoint=track&action=click&data=WyIzMiIsImQ4YTUxYjEzN2Y5OWI0OGE4NmQwMDUyOGFhZGNhMWMxIiwiMjgiLCIyZGNlNGVlMDJkNWEiLGZhbHNlXQ) Visit Our Socials We always want to engage you on our social media pages. [Check it out](https://www.kictanet.or.ke?mailpoet_router&endpoint=track&action=click&data=WyIzMiIsImQ4YTUxYjEzN2Y5OWI0OGE4NmQwMDUyOGFhZGNhMWMxIiwiMjgiLCI4ZTkxMDk5YWY1ZDQiLGZhbHNlXQ) [Unsubscribe](https://www.kictanet.or.ke?mailpoet_router&endpoint=track&action=click&data=WyIzMiIsImQ4YTUxYjEzN2Y5OWI0OGE4NmQwMDUyOGFhZGNhMWMxIiwiMjgiLCI5ZjRmZTlmYzU4NGEiLGZhbHNlXQ) | [Manage your subscription](https://www.kictanet.or.ke?mailpoet_router&endpoint=track&action=click&data=WyIzMiIsImQ4YTUxYjEzN2Y5OWI0OGE4NmQwMDUyOGFhZGNhMWMxIiwiMjgiLCIyN2ZiOWU1MjMxYTMiLGZhbHNlXQ) [facebook](https://www.kictanet.or.ke?mailpoet_router&endpoint=track&action=click&data=WyIzMiIsImQ4YTUxYjEzN2Y5OWI0OGE4NmQwMDUyOGFhZGNhMWMxIiwiMjgiLCJhMmM0OGU0ZTY0MTAiLGZhbHNlXQ) [twitter](https://www.kictanet.or.ke?mailpoet_router&endpoint=track&action=click&data=WyIzMiIsImQ4YTUxYjEzN2Y5OWI0OGE4NmQwMDUyOGFhZGNhMWMxIiwiMjgiLCJlMDNkYTVjYjJiMGIiLGZhbHNlXQ) [instagram](https://www.kictanet.or.ke?mailpoet_router&endpoint=track&action=click&data=WyIzMiIsImQ4YTUxYjEzN2Y5OWI0OGE4NmQwMDUyOGFhZGNhMWMxIiwiMjgiLCIzNTY1OGEyYWVlOTkiLGZhbHNlXQ) [youtube](https://www.kictanet.or.ke?mailpoet_router&endpoint=track&action=click&data=WyIzMiIsImQ4YTUxYjEzN2Y5OWI0OGE4NmQwMDUyOGFhZGNhMWMxIiwiMjgiLCIzMGMwMGUxYzc1ODEiLGZhbHNlXQ) [linkedin](https://www.kictanet.or.ke?mailpoet_router&endpoint=track&action=click&data=WyIzMiIsImQ4YTUxYjEzN2Y5OWI0OGE4NmQwMDUyOGFhZGNhMWMxIiwiMjgiLCIwMjk0MzAwYjVkYWEiLGZhbHNlXQ) [custom](https://www.kictanet.or.ke?mailpoet_router&endpoint=track&action=click&data=WyIzMiIsImQ4YTUxYjEzN2Y5OWI0OGE4NmQwMDUyOGFhZGNhMWMxIiwiMjgiLCJlMDAyYTA5ODRjNzkiLGZhbHNlXQ) [Email Marketing Powered by MailPoet](https://www.kictanet.or.ke?mailpoet_router&endpoint=track&action=click&data=WyIzMiIsImQ4YTUxYjEzN2Y5OWI0OGE4NmQwMDUyOGFhZGNhMWMxIiwiMjgiLCIyOGJjZDEyYjg3NGMiLGZhbHNlXQ)

1 0

ICT Sector Mourns Njeri Rionge
by David Indeje 05 Oct '23

05 Oct '23

Dear Listers, Njeri Rionge, co-founder of the Internet Service Provider (ISP), Wananchi Online, has passed away. Rionge was a respected figure in the tech industry, having co-founded Wananchi Online with Joe Mucheru, former ICT Cabinet Secretary. The company, now known as Wananchi Group, operates in multiple African countries and is the parent firm of Zuku. Rionge’s entrepreneurial spirit was evident throughout her career, from selling yoghurt and luxury merchandise to becoming the marketing manager of a local ISP. Her death is a significant loss to the tech community. <https://twitter.com/mucheru/status/1708948730726990107> KICTANet sends its deepest condolences to her family, friends, and all those who knew her. Her contributions to the tech industry were significant and she will be greatly missed. -- *Kind Regards,* *David Indeje* *KICTANet Communications *_____________________________________ +254 (0) 711 385 945 | +254 (0) 734 024 856 KICTANet portals KICTANet.or.ke <https://kictanet.or.ke/> | Twitter <https://twitter.com/kictanet> | LinkedIn <https://www.linkedin.com/company/18428106/admin/> | Facebook <https://www.facebook.com/KICTANet/>

14 13

Government cancels Sh6bn Telkom buyout deal with Helios
by Victor Kapiyo 04 Oct '23

04 Oct '23

The cabinet yesterday rescinded a government purchase of 60% of shares in Telkom Kenya from London-based private equity firm Helios, the presidency said, escalating a row that erupted after a presidential election in August last year. https://nation.africa/kenya/business/ruto-government-cancels-sh6bn-telkom-b… Today, the Treasury announced plans to onboard the Infrastructure Corporation of Africa LLC (ICA) of the United Arab Emirates, as the new majority shareholder in Telkom, based on the offer they have put forward and subject to regulatory approvals. This deal is quite an 'interesting' development for Telkom, yet equally unsurprising move by this our government. Or maybe it's just me. Regards, Victor

1 0

Articles from KICTANet 02 October 2023
by News＠KICTANet 02 Oct '23

02 Oct '23

KICTANet Newsletter [View this in your browser.](https://www.kictanet.or.ke?mailpoet_router&endpoint=track&action=click&data=WyIzMiIsImQ4YTUxYjEzN2Y5OWI0OGE4NmQwMDUyOGFhZGNhMWMxIiwiMjciLCJiOWQxYzA1MWEyYmUiLGZhbHNlXQ) Welcome to our weekly newsletter, where we bring you the latest updates and developments in the world of technology and policy in Kenya and beyond. #FIFAfrica23: Temperature Check on the State of Accessibility for Persons with Disabilities One undeniable benefit of technology is the ability to open opportunities to participate more actively in society. Access to information, education, medical care, business opportunities, and so on is better for people who can access technology. There have been persistent calls and corresponding efforts for the inclusivity of the technology that disseminates public goods and services. Efforts have certainly been … [Read more](https://www.kictanet.or.ke?mailpoet_router&endpoint=track&action=click&data=WyIzMiIsImQ4YTUxYjEzN2Y5OWI0OGE4NmQwMDUyOGFhZGNhMWMxIiwiMjciLCJhMzRmOWYxOTJhY2IiLGZhbHNlXQ) [Three women and a man sitting on a low-rise platform. A woman wearing a blue dress is holding a microphone and everyone is looking at her.](https://www.kictanet.or.ke?mailpoet_router&endpoint=track&action=click&data=WyIzMiIsImQ4YTUxYjEzN2Y5OWI0OGE4NmQwMDUyOGFhZGNhMWMxIiwiMjciLCJhMzRmOWYxOTJhY2IiLGZhbHNlXQ) Visit Our Socials We always want to engage you on our social media pages. [Check it out](https://www.kictanet.or.ke?mailpoet_router&endpoint=track&action=click&data=WyIzMiIsImQ4YTUxYjEzN2Y5OWI0OGE4NmQwMDUyOGFhZGNhMWMxIiwiMjciLCJlYmM2NWFjODlhNGMiLGZhbHNlXQ) [Unsubscribe](https://www.kictanet.or.ke?mailpoet_router&endpoint=track&action=click&data=WyIzMiIsImQ4YTUxYjEzN2Y5OWI0OGE4NmQwMDUyOGFhZGNhMWMxIiwiMjciLCIwYTljZmUxZGQ5MjIiLGZhbHNlXQ) | [Manage your subscription](https://www.kictanet.or.ke?mailpoet_router&endpoint=track&action=click&data=WyIzMiIsImQ4YTUxYjEzN2Y5OWI0OGE4NmQwMDUyOGFhZGNhMWMxIiwiMjciLCIyZDg0NTExMzViZmEiLGZhbHNlXQ) [facebook](https://www.kictanet.or.ke?mailpoet_router&endpoint=track&action=click&data=WyIzMiIsImQ4YTUxYjEzN2Y5OWI0OGE4NmQwMDUyOGFhZGNhMWMxIiwiMjciLCI4ZGY3MGMzOGVhYTQiLGZhbHNlXQ) [twitter](https://www.kictanet.or.ke?mailpoet_router&endpoint=track&action=click&data=WyIzMiIsImQ4YTUxYjEzN2Y5OWI0OGE4NmQwMDUyOGFhZGNhMWMxIiwiMjciLCJmZGYwYTBjNDkzNDIiLGZhbHNlXQ) [instagram](https://www.kictanet.or.ke?mailpoet_router&endpoint=track&action=click&data=WyIzMiIsImQ4YTUxYjEzN2Y5OWI0OGE4NmQwMDUyOGFhZGNhMWMxIiwiMjciLCJhNWIyNjg0YTJlZWQiLGZhbHNlXQ) [youtube](https://www.kictanet.or.ke?mailpoet_router&endpoint=track&action=click&data=WyIzMiIsImQ4YTUxYjEzN2Y5OWI0OGE4NmQwMDUyOGFhZGNhMWMxIiwiMjciLCJhODFhOTk4ZmVlMWEiLGZhbHNlXQ) [linkedin](https://www.kictanet.or.ke?mailpoet_router&endpoint=track&action=click&data=WyIzMiIsImQ4YTUxYjEzN2Y5OWI0OGE4NmQwMDUyOGFhZGNhMWMxIiwiMjciLCI2MjNlMjllMTA3MmYiLGZhbHNlXQ) [custom](https://www.kictanet.or.ke?mailpoet_router&endpoint=track&action=click&data=WyIzMiIsImQ4YTUxYjEzN2Y5OWI0OGE4NmQwMDUyOGFhZGNhMWMxIiwiMjciLCJhMmI1OTVlYWE3NjAiLGZhbHNlXQ) [Email Marketing Powered by MailPoet](https://www.kictanet.or.ke?mailpoet_router&endpoint=track&action=click&data=WyIzMiIsImQ4YTUxYjEzN2Y5OWI0OGE4NmQwMDUyOGFhZGNhMWMxIiwiMjciLCI3Y2VmODBkYzRmNjkiLGZhbHNlXQ)

1 0

Invitation to Twitter Spaces Discussion on "Data Rules Breakdown; What Happens When Organisations Don't Comply?.
by Neema MASITSA 27 Sep '23

27 Sep '23

Dear Listers, I hope this email finds you well. I would like to draw your attention to an important event scheduled for this week. On September 26, 2023, the Office of the Data Protection Commissioner (ODPC) issued three penalty notices to three Data Controllers for their failure to comply with the Data Protection Commissioner's regulations. These cases underscore the significance of data protection and compliance in today's digital landscape. Here's a brief overview of the cases: 1. Mulla Pride Ltd, a digital credit provider operating KeCredit and Faircash, was found to have used names and contact information obtained from third parties to send threatening messages and make phone calls. 2. Roma School, situated in Uthiru, received a fine of Ksh 4.5 million for posting pictures of minors without obtaining consent from their parents. 3. Casa Vera Lounge, a restaurant on Ngong Road in Nairobi, incurred a penalty of Ksh 1.85 million from the Data Commissioner for posting a reveler's image on its social media pages without obtaining consent. To delve deeper into these developments and explore the implications of non-compliance with the Data Protection Act, *KICTANet *will host a *Twitter Space* on *Thursday, September 28, 2023*, at *8 PM EAT*. Our distinguished panel will include Mr. John Walubengo, a renowned data protection scholar, lecturer, and writer, as well as Angela Minayo, a Program Officer at KICTANet who specializes in gender and digital rights. The discussion will be moderated by Meshack Masibo, a Project Manager for the Data Protector's Podcast at KICTANet, which is dedicated to disseminating knowledge on key data protection issues in Kenya and beyond. We invite you to join and participate in this important conversation. Your insights and perspective will greatly enrich the discussion. Twitter Space link: https://x.com/i/spaces/1jMJgmgpozkKL Thank you for your attention, and we look forward to your participation. Best regards, Neema Masitsa, Communications personnel at KICTANet

1 0

Articles from KICTANet 25 September 2023
by News＠KICTANet 25 Sep '23

25 Sep '23

KICTANet Newsletter [View this in your browser.](https://www.kictanet.or.ke?mailpoet_router&endpoint=track&action=click&data=WyIzMiIsImQ4YTUxYjEzN2Y5OWI0OGE4NmQwMDUyOGFhZGNhMWMxIiwiMjYiLCIzMjk0NDY4NzgxNjAiLGZhbHNlXQ) Welcome to our weekly newsletter, where we bring you the latest updates and developments in the world of technology and policy in Kenya and beyond. Understanding Digital Signatures: A Leap Towards Secure Online Transactions Explore the concept of digital signatures, their benefits, and how they enhance the security of online transactions. [Read more](https://www.kictanet.or.ke?mailpoet_router&endpoint=track&action=click&data=WyIzMiIsImQ4YTUxYjEzN2Y5OWI0OGE4NmQwMDUyOGFhZGNhMWMxIiwiMjYiLCI3YjU4MGZmMmQ5ZmYiLGZhbHNlXQ) [President William Ruto during the unveiling of Digital Government Services dubbed Gava Mkononi at the Kenyatta International Convention Centre in Nairobi.](https://www.kictanet.or.ke?mailpoet_router&endpoint=track&action=click&data=WyIzMiIsImQ4YTUxYjEzN2Y5OWI0OGE4NmQwMDUyOGFhZGNhMWMxIiwiMjYiLCI3YjU4MGZmMmQ5ZmYiLGZhbHNlXQ) #KICTANet Space - The Impact of Accessibility and Equality Fellowship [Accessibility loading](https://www.kictanet.or.ke?mailpoet_router&endpoint=track&action=click&data=WyIzMiIsImQ4YTUxYjEzN2Y5OWI0OGE4NmQwMDUyOGFhZGNhMWMxIiwiMjYiLCIyYjljY2ZlNWI0MDciLGZhbHNlXQ) Part III The perception of disability tends to be similar across all regions. Does this call for a universal solution? Unfortunately, the universalisation of disability makes persons with disabilities be treated as a homogeneous group, regardless of the diversity of their disabilities. Angela Minayo, a Program Officer at KICTANet, whose works have mostly revolved around digital human rights, gender, cyber … [Read more](https://www.kictanet.or.ke?mailpoet_router&endpoint=track&action=click&data=WyIzMiIsImQ4YTUxYjEzN2Y5OWI0OGE4NmQwMDUyOGFhZGNhMWMxIiwiMjYiLCIyYjljY2ZlNWI0MDciLGZhbHNlXQ) Digital Accessibility at KICTANet Part I The Digital Accessibility program, which started a year ago as ICT Access and Equality for Persons with Disabilities, have seen a myriad of achievements in the digital space in Kenya and beyond. Looking back, and in celebration of the program's first anniversary, the programs team, this time around on their bi-monthly X (formerly Twitter) Space held a candid … [Read more](https://www.kictanet.or.ke?mailpoet_router&endpoint=track&action=click&data=WyIzMiIsImQ4YTUxYjEzN2Y5OWI0OGE4NmQwMDUyOGFhZGNhMWMxIiwiMjYiLCIzOTE0ZWY0OTQxMWQiLGZhbHNlXQ) [A smartphone showing a travel guide app/website for the country of Kenya - a scene of planning a holiday. Also on the table is a diary/planner and mug.](https://www.kictanet.or.ke?mailpoet_router&endpoint=track&action=click&data=WyIzMiIsImQ4YTUxYjEzN2Y5OWI0OGE4NmQwMDUyOGFhZGNhMWMxIiwiMjYiLCIzOTE0ZWY0OTQxMWQiLGZhbHNlXQ) Visit Our Socials We always want to engage you on our social media pages. [Check it out](https://www.kictanet.or.ke?mailpoet_router&endpoint=track&action=click&data=WyIzMiIsImQ4YTUxYjEzN2Y5OWI0OGE4NmQwMDUyOGFhZGNhMWMxIiwiMjYiLCI3ZjA0Zjg0NmU2MzIiLGZhbHNlXQ) [Unsubscribe](https://www.kictanet.or.ke?mailpoet_router&endpoint=track&action=click&data=WyIzMiIsImQ4YTUxYjEzN2Y5OWI0OGE4NmQwMDUyOGFhZGNhMWMxIiwiMjYiLCI3ZDhmMjlmZGRhYWQiLGZhbHNlXQ) | [Manage your subscription](https://www.kictanet.or.ke?mailpoet_router&endpoint=track&action=click&data=WyIzMiIsImQ4YTUxYjEzN2Y5OWI0OGE4NmQwMDUyOGFhZGNhMWMxIiwiMjYiLCI2NTczZGY2NzBlZmUiLGZhbHNlXQ) [facebook](https://www.kictanet.or.ke?mailpoet_router&endpoint=track&action=click&data=WyIzMiIsImQ4YTUxYjEzN2Y5OWI0OGE4NmQwMDUyOGFhZGNhMWMxIiwiMjYiLCI5MzZmMWY0N2E2MDkiLGZhbHNlXQ) [twitter](https://www.kictanet.or.ke?mailpoet_router&endpoint=track&action=click&data=WyIzMiIsImQ4YTUxYjEzN2Y5OWI0OGE4NmQwMDUyOGFhZGNhMWMxIiwiMjYiLCJjZTkxOTU1ZjYxMDciLGZhbHNlXQ) [instagram](https://www.kictanet.or.ke?mailpoet_router&endpoint=track&action=click&data=WyIzMiIsImQ4YTUxYjEzN2Y5OWI0OGE4NmQwMDUyOGFhZGNhMWMxIiwiMjYiLCIwYjAzYzhkMDQ0MDAiLGZhbHNlXQ) [youtube](https://www.kictanet.or.ke?mailpoet_router&endpoint=track&action=click&data=WyIzMiIsImQ4YTUxYjEzN2Y5OWI0OGE4NmQwMDUyOGFhZGNhMWMxIiwiMjYiLCJjNmY4MzQ1MDI0NGYiLGZhbHNlXQ) [linkedin](https://www.kictanet.or.ke?mailpoet_router&endpoint=track&action=click&data=WyIzMiIsImQ4YTUxYjEzN2Y5OWI0OGE4NmQwMDUyOGFhZGNhMWMxIiwiMjYiLCJhYTQ3ZmM3Yjg4OWYiLGZhbHNlXQ) [custom](https://www.kictanet.or.ke?mailpoet_router&endpoint=track&action=click&data=WyIzMiIsImQ4YTUxYjEzN2Y5OWI0OGE4NmQwMDUyOGFhZGNhMWMxIiwiMjYiLCJkYTI4YzQ1MDBhNDYiLGZhbHNlXQ) [Email Marketing Powered by MailPoet](https://www.kictanet.or.ke?mailpoet_router&endpoint=track&action=click&data=WyIzMiIsImQ4YTUxYjEzN2Y5OWI0OGE4NmQwMDUyOGFhZGNhMWMxIiwiMjYiLCI1YzViYzQ4NWZlNjMiLGZhbHNlXQ)

1 0

Join Us Today for an Eye-Opening Discussion on Computer Misuse and Cybercrimes Regulations!
by Neema MASITSA 21 Sep '23

21 Sep '23

Dear Listers, Exciting News! Join us today, at 🕒 8PM-9PM EAT, for a Twitter Space event where we'll delve into the critical topic of "Computer Misuse and Cybercrimes Regulations." 📊 We will be sharing and validating data for our upcoming report. Your insights matter in shaping the future of cybersecurity. Don't miss out! 🔐 🔗Twitter Space Link: https://x.com/i/spaces/1LyxBnMkBzpxN #Cybersecurity #DataSecurity #TwitterSpace #Cybercrimes #InfoSec

1 0

Day 1: PUBLIC PARTICIPATION OF THE “COMPUTER MISUSE AND CYBERCRIMES (CRITICAL INFORMATION INFRASTRUCTURE AND CYBERCRIMES MANAGEMENT) REGULATIONS, 2023.
by Linda Wairure 20 Sep '23

20 Sep '23

DAY 1: Monday 18/09/2023 Dear Listers, Welcome to the inaugural day of our lively discussion and debate centered around the *"Computer Misuse and Cybercrimes (Critical Information Infrastructure and Cybercrimes Management) Regulations 2023,*" put forth by the Cabinet Secretary for Interior and National Administration. https://nc4.go.ke/cmca-2018-draft-regulations/ We extend a warm invitation to all Stakeholders in the Digital Space to actively engage in this conversation, as your insights are not just valued but indispensable. Together, we aim to ensure that these regulations are not only well-informed but also in perfect alignment with the swiftly evolving realm of cyber security and digital technologies. Discover how they will impact your organization and be part of the conversation that will define the future of cyber security regulations. Your perspectives will help us shape and submit a more comprehensive and effective framework. *We shall also have a twitter space on Thursday to disseminate/validate the report before submitting it on Friday. * *Feel free to share your insights, concerns, justifications and recommendations to shape these regulations effectively.* PART I - PRELIMINARY PROVISIONS Objects of the Regulations *Section 3.* (a) Provide a framework to monitor, detect and respond to cyber security threats in the cyberspace belonging to Kenya; (i) Promote coordination, collaboration, cooperation and shared responsibility amongst stakeholders in the cybersecurity sector including critical infrastructure protection (g) Approve the identification and designation of critical information infrastructure *Question:* * Is this sufficient to allow each government related cyber unit to operate efficiently without turf wars on who is more superior?* (l) Monitor all databases established for purposes of establishing their integrity and confidentiality for the attainment of the objectives of the Act and these Regulations. Question: Is this regulation realistic and can this be effectively implemented? What are some of the data protection and privacy rights concerns that may arise from this regulation? PART III - CYBERSECURITY OPERATIONS CENTRES Section 13 13. (2) The cybersecurity awareness programme under paragraph (1) shall include the following topics—..... Question: Does this need to be this prescriptive? And what does this mean for emerging areas? How about emerging cyber threats? 13(3) The owner of critical information infrastructure shall in consultation with the Committee, review the cybersecurity awareness programme at least once every twelve months to ensure that the programme is adequate and that it remains upto-date and relevant. Question: Is this a role for NC4? Review curriculum on infrastructure t*hat it does not own*. Any comments? : : : *What are your views, justifications and recommendations regarding the following sections, and how do you interpret the regulations in question?*

8 17

GLOBAL ENCRYPTION DAY WORKSHOP ATTENDANCE REGISTRATION - FRIDAY 13TH OCTOBER, 2023 - KENYA NATIONAL LIBRARY BURUBURU.
by Kennedy Ronoh 20 Sep '23

20 Sep '23

Dear Listers, Strong encryption <https://www.internetsociety.org/action-plan/2022/encryption/> is a fundamental part of how we remain safe online and offline: https://youtu.be/y5G_Rggsg8E. It means people can communicate with another person safe in the knowledge no-one is listening in or tampering with their messages. Despite this, some governments around the world are ramping up their attacks on end -to-end encryption (E2EE). Some governments view it as a hurdle for law enforcement agencies. But systematically weakening people’s digital safety is not the answer. End-to-end encryption is the gold standard of security in a world where daily life is increasingly online. We need to push back against government efforts to undermine E2EE. On the annual Global Encryption Day, we join our efforts to discuss how to protect end-to-end encryption and defeat any proposals that undermine it. ISOC Kenya will have its Global Encryption Day activities on 13th October from 9am to 4pm. It will be a hybrid event with both physical and online participation. The goals of the workshop are the following: 1)To explain the technical details of encryption 2)To create awareness about encryption and the importance of end to end encryption 3)Advocate for strong encryption 4)To create awareness how to defend encryption The venue for physical attendance will be Kenya National Library Buruburu. *Please register here if interested in GED workshop attendance (online or virtual): *https://forms.gle/1xhoKYtR1UPbS1wQ8 Best regards, Kennedy Ronoh, Technical/Research Committee, Internet Society Kenya.

1 0

Re: Day 3: PUBLIC PARTICIPATION OF THE “COMPUTER MISUSE AND CYBERCRIMES (CRITICAL INFORMATION INFRASTRUCTURE AND CYBERCRIMES MANAGEMENT) REGULATIONS, 2023.
by Linda Wairure 20 Sep '23

20 Sep '23

Thank you so much Counsel and Florence for expounding and the informative insights. Dear Listers, Considering *Regulation 29 *entails the* Localization of Critical Information Infrastructure:* 29. (1) An owner of a critical information infrastructure shall ensure that the infrastructure on which critical information is domiciled is located in Kenya. (2) An owner of a critical information infrastructure who intends to have critical information located outside Kenya, shall apply to the Committee in Form CMCA 3 set out in the Third Schedule. (3) The Committee shall consider the application and may approve or decline to approve the application under paragraph (2), and shall communicate its decision within thirty days of receipt of the application. (4) The Committee may, in considering an application by the operator to have critical information located outside Kenya take into account— (a) security measures and safeguards being applied to the information and infrastructure on which the information is contained are adequate; (b) whether it is necessary for the information to be stored outside the geographical jurisdiction of the Republic; (c) national security; (d) public interest; (e) security of data including personal data contained in the critical information infrastructure; (f) submissions by concerned operator; and (g) any other factors that the Director considers *What are your views on data sovereignty, operational complexity and business continuity risks, particularly when organizations utilize global cloud services like AWS? * *Are the regulations overlapping with any other independent entities? * *What about the bureaucracy aspect?* Feel free to raise your concerns, justifications and recommendations on the same. On Wed, 20 Sept 2023, 16:35 Cherie Oyier via KICTANet, < kictanet(a)lists.kictanet.or.ke> wrote: > Section 13 > > 13. (2) The cybersecurity awareness programme under paragraph (1) shall > include the following topics—..... > > Question: > > Does this need to be this prescriptive? And what does this mean for > emerging areas? How about emerging cyber threats? > > This provision is definitely too restrictive. Due to the rampant pace > technology is advancing at, cybercrimes and threats are equally advancing > at the same pace. It is therefore likely that mitigating measures will need > to advance as we go on . Therefore such a restrictive provision will not be > ideal to cover future threats and awareness programs. I would recommend > that the committee publishes guidelines on topics for the awareness > program. Further, owners of critical information infrastructure can come up > with a curriculum. The curriculum should be formulated in collaboration > with all relevant stakeholders. > > On Wed, 20 Sep 2023, 16:19 Cherie Oyier, <oyierlaw(a)gmail.com> wrote: > >> (l) Monitor all databases established for purposes of establishing their >> integrity and confidentiality for the attainment of the objectives of the >> Act and these Regulations. >> >> Question: >> >> Is this regulation realistic and can this be effectively implemented? >> >> What are some of the data protection and privacy rights concerns that >> may arise from this regulation? >> >> The vastness of critical information databases across different sectors >> may render this provision inoperable. It would be more realistic to put in >> place provisions to measure compliance relating to integrity and >> confidentiality. Perhaps provide for officers to ensure this within an >> entity similar to data protection officers. Also a compliance certificate >> would suffice, where an entity submits proof of compliance for a >> certificate of compliance running for a specific period. Where there is >> proof of noncompliance the same can be revoked. >> >> Several concerns arise regarding data protection. This provision is too >> wide. Access to critical information infrastructure should be on a need >> basis i.e where there is proof of breach, loss or disaster. Otherwise left >> as is, the provision is prone to abuse leading to surveillance and other >> data protection risks. >> >> >> On Wed, 20 Sep 2023, 13:56 Florence Awino via KICTANet, < >> kictanet(a)lists.kictanet.or.ke> wrote: >> >>> Dear Linda, >>> *Should we let the existing regulatory bodies do their jobs instead of >>> introducing the given regulations that might cause conflicts?* >>> *Or on the Contrary.... Do you have any recommendations and/or reasons >>> to justify such regulations? * >>> >>> *My Answer: *There are valid concerns that existing regulatory bodies >>> should handle this without new regulations to avoid potential conflicts. >>> However, justifications for this provision lie in securing critical >>> information infrastructure. >>> Critical information infrastructure is a prime target for cyberattacks, >>> and outsourcing can introduce vulnerabilities. Notification should help to >>> assess risks and align with cybersecurity standards. Provided that new >>> regulations address our evolving cyber threats and offer specific guidance. >>> It is also hard to argue with the potential of this regulation to >>> facilitate stakeholder information sharing, which is crucial for >>> cybersecurity. >>> Regards >>> Florence Awino Ouma <https://www.linkedin.com/in/flo-ouma-profile/> >>> >>> >>> On Tue, Sep 19, 2023 at 11:25 PM Linda Wairure via KICTANet < >>> kictanet(a)lists.kictanet.or.ke> wrote: >>> >>>> Thank you for the informative input Barrack. >>>> >>>> I agree with your sentiments that the enactment of such regulations >>>> supplants the functions of well-established regulatory authorities and may >>>> potentially cause a discord leading to contradiction, ambiguity and >>>> operational inefficacy. >>>> >>>> Dear Listers, >>>> >>>> *Should we let the existing regulatory bodies do their jobs instead of >>>> introducing the given regulations that might cause conflicts?* >>>> >>>> *Or on the Contrary.... Do you have any recommendations and/or reasons >>>> to justify such regulations? * >>>> >>>> "14. (1) An owner of a critical information infrastructure including >>>> government-owned critical information infrastructure who intends to >>>> outsource any operations shall, in writing, notify the Committee prior to >>>> outsourcing….. " >>>> >>>> *Any other concerns on the regulations below? * >>>> >>>> *Feel free to share your insights on the same.* >>>> >>>> (2)The external service provider shall report to the owner of the >>>> critical information infrastructure, at least quarterly, notifying on the >>>> status of implementation of their obligations under the agreement including >>>> notifying on any security incident... >>>> >>>> Sent from Outlook for Android <https://aka.ms/AAb9ysg> >>>> ------------------------------ >>>> *From:* Barrack Otieno <barrack(a)kictanet.or.ke> >>>> *Sent:* Tuesday, September 19, 2023 10:19:01 PM >>>> *To:* Kenya's premier ICT Policy engagement platform < >>>> kictanet(a)lists.kictanet.or.ke> >>>> *Cc:* Linda Wairure <lindagichohi(a)gmail.com> >>>> *Subject:* Re: [kictanet] Re: Day 2: PUBLIC PARTICIPATION OF THE >>>> “COMPUTER MISUSE AND CYBERCRIMES (CRITICAL INFORMATION INFRASTRUCTURE AND >>>> CYBERCRIMES MANAGEMENT) REGULATIONS, 2023. >>>> >>>> Dear Linda, >>>> >>>> My responses inline: >>>> >>>> On Tue, Sep 19, 2023 at 11:25 AM Linda Wairure via KICTANet < >>>> kictanet(a)lists.kictanet.or.ke> wrote: >>>> >>>> DAY 2: Tuesday 19/09/2023 >>>> >>>> Dear Listers, >>>> >>>> Welcome to Day 2 of our engaging discourse and virtual Public >>>> Participation forum on the "Computer Misuse and CyberCrimes (Critical >>>> Information Infrastructure and CyberCrimes Management) Regulations 2023," >>>> KICTANet extends gratitude to every stakeholder and partner who made Day 1 >>>> an enriching experience. Thank you for being an integral part of this >>>> important discussion. >>>> >>>> We shall also have a Twitter Space on Thursday to disseminate/validate >>>> the report before official submissions. >>>> >>>> Today our focus of discussion will center around the following >>>> sections: S. 14( 1),( 2), S.18 3 (d), 4 . >>>> >>>> *PART III: CYBERSECURITY OPERATION CENTRES * >>>> >>>> *OutSourced Capabilities * >>>> 14. (1) An owner of a critical information infrastructure including >>>> government-owned critical information infrastructure who intends to >>>> outsource any operations shall, in writing, notify the Committee prior to >>>> outsourcing… >>>> >>>> Question*:● * >>>> *How does the notification requirement to notify before outsourcing >>>> impact various aspects, such as Institutional independence, business >>>> autonomy, legality, decision-making, and cybersecurity and other related >>>> concerns?* >>>> >>>> BO: This requirement does not make sense. It is usurping roles of >>>> Regulatory bodies such as the Communications Authority and Office of the >>>> Data Protection Commissioner which Registers Data Controllers. >>>> >>>> >>>> >>>> (2)The external service provider shall report to the owner of the >>>> critical information infrastructure, at least quarterly, notifying on the >>>> status of implementation of their obligations under the agreement including >>>> notifying on any security incident. >>>> >>>> Question*:* >>>> *Is it appropriate for this reporting requirement between the external >>>> service provider and the owner of critical information infrastructure to be >>>> mandated by regulations,...* >>>> >>>> BO: This will become an administrative burden, again, Service providers >>>> report periodically to the agencies overseeing their ecosystem such as the >>>> communications Authority. >>>> >>>> >>>> >>>> *Or Should it be left as a matter of business arrangement and >>>> negotiation between the parties involved? * >>>> >>>> *Risk assessment and evaluation of cybersecurity operation centres* >>>> >>>> 18. 3. (d) Define a treatment plan and implement business continuity >>>> management controls including – ... >>>> >>>> (4) The business impact analysis of an organization shall be based on— >>>> (a) the potential impacts of business disruptions for each prioritized >>>> business function and processes including financial, operational, customer, >>>> legal and regulatory impacts; >>>> (b) recovery time objectives, recovery point >>>> objectives and maximum acceptable outage; >>>> (c) internal and external inter-dependencies; and >>>> (d) the resources required for recovery >>>> >>>> Question: >>>> >>>> *1. Is this not too prescriptive? * >>>> >>>> *2. How can organizations strike a balance between complying with >>>> extensive business impact analysis requirements in cybersecurity operations >>>> and maintaining the flexibility to adapt these regulations to their >>>> specific cybersecurity needs and circumstances?* >>>> >>>> *3. Is the committee not assuming the role of Big bro? * >>>> *(*Business Autonomy Preservation, Regulatory Detail, Comprehensive >>>> Requirements) >>>> >>>> Stay engaged, share your concerns, views, justifications and >>>> recommendations to ensure a safer and more secure digital future for all. >>>> >>>> *~Shaping the Future of CyberSecurity ~* >>>> >>>> On Mon, 18 Sept 2023, 17:04 Linda Wairure, <lindagichohi(a)gmail.com> >>>> wrote: >>>> >>>> Thank you Counsel for the eye-opening feedback and very valid points. >>>> Indeed there is need for more public awareness and advocacy. >>>> >>>> Echoing Barrack sentiments, over-legislation might not be the best way >>>> to go. >>>> As a country, we need more emphasis on implementation of the already >>>> existing regulations and laws. >>>> >>>> To follow up and expound on the same... >>>> >>>> Dear Listers, >>>> >>>> What are some of your concerns, justifications and recommendations on >>>> how governments can strike a balance between securing critical information >>>> infrastructure and ensuring the privacy and civil liberties of their >>>> citizens? >>>> >>>> >>>> >>>> >>>> >>>> >>>> >>>> On Mon, 18 Sept 2023, 16:25 Faith Kisinga via KICTANet, < >>>> kictanet(a)lists.kictanet.or.ke> wrote: >>>> >>>> >>>> Hi Linda, >>>> Thanks for providing this opportunity. >>>> Indeed there’s need to create awareness on what this framework aims to >>>> do, to avoid leaving the public feeling overwhelmed. >>>> >>>> These regulations are specifically aimed at the facilities, networks >>>> and systems, which if disrupted, would have a debilitating effect on >>>> national security, the economy, public health and safety. 16 critical >>>> infrastructure sectors are listed. >>>> >>>> >>>> On 18 Sep 2023, at 15:58, Barrack Otieno via KICTANet < >>>> kictanet(a)lists.kictanet.or.ke> wrote: >>>> >>>> >>>> Hi Linda, >>>> >>>> I tend to think we are over legislating. Having moderated a session >>>> during this years Communications Authority ICT Week, i learnt from GSMA >>>> that while the country has 98% Infrastruture Coverage, usage is a paltry >>>> 21%. The users account for 30% of the population and are mostly in urban >>>> centres. We need to pay attention so that we dont scare away the 70% based >>>> in rural areas who are mostly using feature phones. We should also have >>>> this in mind as we frame the laws so that we avoid a scenario where we >>>> respond to mosquito bites with a hammer. >>>> >>>> Best Regards >>>> >>>> On Mon, Sep 18, 2023 at 3:20 PM Linda Wairure via KICTANet < >>>> kictanet(a)lists.kictanet.or.ke> wrote: >>>> >>>> Can you provide examples of robust sector-specific cybersecurity >>>> regulations that have been successful ? .......What are the potential >>>> drawbacks or challenges associated with trying to monitor all databases? >>>> >>>> >>>> On Mon, 18 Sept 2023 at 04:54, Neema MASITSA <masitsaneema(a)gmail.com> >>>> wrote: >>>> >>>> (l) Monitor all databases established for purposes of establishing >>>> their integrity and confidentiality for the attainment of the objectives of >>>> the Act and these Regulations. >>>> >>>> Question: >>>> >>>> Is this regulation realistic, and can it be effectively implemented? >>>> >>>> My opinion is rather than to attempt to monitor all databases, we can >>>> focus on risk-based and sector-specific approaches to cybersecurity. >>>> >>>> On Mon, Sep 18, 2023 at 10:12 AM Linda Wairure via KICTANet < >>>> kictanet(a)lists.kictanet.or.ke> wrote: >>>> >>>> DAY 1: Monday 18/09/2023 >>>> >>>> Dear Listers, >>>> >>>> Welcome to the inaugural day of our lively discussion and debate >>>> centered around the *"Computer Misuse and Cybercrimes (Critical >>>> Information Infrastructure and Cybercrimes Management) Regulations 2023,*" >>>> put forth by the Cabinet Secretary for Interior and National >>>> Administration. https://nc4.go.ke/cmca-2018-draft-regulations/ >>>> >>>> We extend a warm invitation to all Stakeholders in the Digital Space to >>>> actively engage in this conversation, as your insights are not just valued >>>> but indispensable. Together, we aim to ensure that these regulations >>>> are not only well-informed but also in perfect alignment with the swiftly >>>> evolving realm of cyber security and digital technologies. Discover how >>>> they will impact your organization and be part of the conversation that >>>> will define the future of cyber security regulations. Your perspectives >>>> will help us shape and submit a more comprehensive and effective framework. >>>> >>>> *We shall also have a twitter space on Thursday to disseminate/validate >>>> the report before submitting it on Friday. * >>>> >>>> >>>> *Feel free to share your insights, concerns, justifications and >>>> recommendations to shape these regulations effectively.* >>>> >>>> >>>> PART I - PRELIMINARY PROVISIONS >>>> >>>> >>>> Objects of the Regulations >>>> >>>> *Section 3.* >>>> >>>> (a) Provide a framework to monitor, detect and respond to cyber >>>> security threats in the cyberspace belonging to Kenya; >>>> >>>> (i) Promote coordination, collaboration, cooperation and shared >>>> responsibility amongst stakeholders in the cybersecurity sector including >>>> critical infrastructure protection >>>> >>>> (g) Approve the identification and designation of critical information >>>> infrastructure *Question:* >>>> >>>> * Is this sufficient to allow each government related cyber unit to >>>> operate efficiently without turf wars on who is more superior?* >>>> >>>> >>>> (l) Monitor all databases established for purposes of establishing >>>> their integrity and confidentiality for the attainment of the objectives of >>>> the Act and these Regulations. >>>> >>>> Question: >>>> >>>> Is this regulation realistic and can this be effectively implemented? >>>> >>>> What are some of the data protection and privacy rights concerns that >>>> may arise from this regulation? >>>> >>>> PART III - CYBERSECURITY OPERATIONS CENTRES >>>> >>>> Section 13 >>>> >>>> 13. (2) The cybersecurity awareness programme under paragraph (1) >>>> shall include the following topics—..... >>>> >>>> Question: >>>> >>>> Does this need to be this prescriptive? And what does this mean for >>>> emerging areas? How about emerging cyber threats? >>>> >>>> >>>> 13(3) The owner of critical information infrastructure shall in >>>> consultation with the Committee, review the cybersecurity awareness >>>> programme at least once every twelve months to ensure that the programme is >>>> adequate and that it remains upto-date and relevant. >>>> >>>> >>>> Question: >>>> >>>> Is this a role for NC4? Review curriculum on infrastructure t*hat it >>>> does not own*. Any comments? >>>> >>>> : >>>> >>>> : >>>> >>>> : >>>> >>>> *What are your views, justifications and recommendations regarding the >>>> following sections, and how do you interpret the regulations in question?* >>>> >>>> >>>> _______________________________________________ >>>> KICTANet mailing list -- kictanet(a)lists.kictanet.or.ke >>>> To unsubscribe send an email to kictanet-leave(a)lists.kictanet.or.ke >>>> Unsubscribe or change your options at: >>>> https://mm3-lists.kictanet.or.ke/mm/lists/kictanet.lists.kictanet.or.ke/ >>>> >>>> Mailing List Posts Online: https://posts.kictanet.or.ke/ >>>> >>>> Twitter: https://twitter.com/KICTANet/ >>>> Facebook: https://www.facebook.com/KICTANet/ >>>> Instagram: https://www.instagram.com/KICTANet/ >>>> LinkedIn: https://www.linkedin.com/company/kictanet/ >>>> YouTube: https://www.youtube.com/channel/UCbcLVjnPtTGBEeYLGUb2Yow/ >>>> >>>> KICTANet is a multi-stakeholder Think Tank for people and institutions >>>> interested and involved in ICT policy and regulation. >>>> KICTANet is a catalyst for reform in the Information and Communication >>>> Technology sector. Its work is guided by four pillars >>>> of Policy Advocacy, Capacity Building, Research, and Stakeholder >>>> Engagement. >>>> >>>> KICTANetiquette : Adhere to the same standards of acceptable behaviors >>>> online that you follow in real life: respect people's >>>> times and bandwidth, share knowledge, don't flame or abuse or >>>> personalize, respect privacy, do not spam, do not market your >>>> wares or qualifications. >>>> >>>> KICTANet - The Power of Communities, is Kenya's premier ICT policy >>>> engagement platform. >>>> >>>> _______________________________________________ >>>> KICTANet mailing list -- kictanet(a)lists.kictanet.or.ke >>>> To unsubscribe send an email to kictanet-leave(a)lists.kictanet.or.ke >>>> Unsubscribe or change your options at: >>>> https://mm3-lists.kictanet.or.ke/mm/lists/kictanet.lists.kictanet.or.ke/ >>>> >>>> Mailing List Posts Online: https://posts.kictanet.or.ke/ >>>> >>>> Twitter: https://twitter.com/KICTANet/ >>>> Facebook: https://www.facebook.com/KICTANet/ >>>> Instagram: https://www.instagram.com/KICTANet/ >>>> LinkedIn: https://www.linkedin.com/company/kictanet/ >>>> YouTube: https://www.youtube.com/channel/UCbcLVjnPtTGBEeYLGUb2Yow/ >>>> >>>> KICTANet is a multi-stakeholder Think Tank for people and institutions >>>> interested and involved in ICT policy and regulation. >>>> KICTANet is a catalyst for reform in the Information and Communication >>>> Technology sector. Its work is guided by four pillars >>>> of Policy Advocacy, Capacity Building, Research, and Stakeholder >>>> Engagement. >>>> >>>> KICTANetiquette : Adhere to the same standards of acceptable behaviors >>>> online that you follow in real life: respect people's >>>> times and bandwidth, share knowledge, don't flame or abuse or >>>> personalize, respect privacy, do not spam, do not market your >>>> wares or qualifications. >>>> >>>> KICTANet - The Power of Communities, is Kenya's premier ICT policy >>>> engagement platform. >>>> >>>> >>>> >>>> -- >>>> >>>> *Barrack Otieno * >>>> *Trustee* >>>> *Kenya ICT Action Network (KICTAnet)* >>>> *Skype:barrack.otieno* >>>> *+254721325277* >>>> >>>> *https://www.linkedin.com/in/barrack-otieno-2101262b/ >>>> <https://www.linkedin.com/in/barrack-otieno-2101262b/> * >>>> *www.kictanet.or.ke <http://www.kictanet.or.ke>* >>>> _______________________________________________ >>>> KICTANet mailing list -- kictanet(a)lists.kictanet.or.ke >>>> To unsubscribe send an email to kictanet-leave(a)lists.kictanet.or.ke >>>> Unsubscribe or change your options at: >>>> https://mm3-lists.kictanet.or.ke/mm/lists/kictanet.lists.kictanet.or.ke/ >>>> >>>> Mailing List Posts Online: https://posts.kictanet.or.ke/ >>>> >>>> Twitter: https://twitter.com/KICTANet/ >>>> Facebook: https://www.facebook.com/KICTANet/ >>>> Instagram: https://www.instagram.com/KICTANet/ >>>> LinkedIn: https://www.linkedin.com/company/kictanet/ >>>> YouTube: https://www.youtube.com/channel/UCbcLVjnPtTGBEeYLGUb2Yow/ >>>> >>>> KICTANet is a multi-stakeholder Think Tank for people and institutions >>>> interested and involved in ICT policy and regulation. >>>> KICTANet is a catalyst for reform in the Information and Communication >>>> Technology sector. Its work is guided by four pillars >>>> of Policy Advocacy, Capacity Building, Research, and Stakeholder >>>> Engagement. >>>> >>>> KICTANetiquette : Adhere to the same standards of acceptable behaviors >>>> online that you follow in real life: respect people's >>>> times and bandwidth, share knowledge, don't flame or abuse or >>>> personalize, respect privacy, do not spam, do not market your >>>> wares or qualifications. >>>> >>>> KICTANet - The Power of Communities, is Kenya's premier ICT policy >>>> engagement platform. >>>> >>>> _______________________________________________ >>>> KICTANet mailing list -- kictanet(a)lists.kictanet.or.ke >>>> To unsubscribe send an email to kictanet-leave(a)lists.kictanet.or.ke >>>> Unsubscribe or change your options at: >>>> https://mm3-lists.kictanet.or.ke/mm/lists/kictanet.lists.kictanet.or.ke/ >>>> >>>> Mailing List Posts Online: https://posts.kictanet.or.ke/ >>>> >>>> Twitter: https://twitter.com/KICTANet/ >>>> Facebook: https://www.facebook.com/KICTANet/ >>>> Instagram: https://www.instagram.com/KICTANet/ >>>> LinkedIn: https://www.linkedin.com/company/kictanet/ >>>> YouTube: https://www.youtube.com/channel/UCbcLVjnPtTGBEeYLGUb2Yow/ >>>> >>>> KICTANet is a multi-stakeholder Think Tank for people and institutions >>>> interested and involved in ICT policy and regulation. >>>> KICTANet is a catalyst for reform in the Information and Communication >>>> Technology sector. Its work is guided by four pillars >>>> of Policy Advocacy, Capacity Building, Research, and Stakeholder >>>> Engagement. >>>> >>>> KICTANetiquette : Adhere to the same standards of acceptable behaviors >>>> online that you follow in real life: respect people's >>>> times and bandwidth, share knowledge, don't flame or abuse or >>>> personalize, respect privacy, do not spam, do not market your >>>> wares or qualifications. >>>> >>>> KICTANet - The Power of Communities, is Kenya's premier ICT policy >>>> engagement platform. >>>> >>>> _______________________________________________ >>>> KICTANet mailing list -- kictanet(a)lists.kictanet.or.ke >>>> To unsubscribe send an email to kictanet-leave(a)lists.kictanet.or.ke >>>> Unsubscribe or change your options at: >>>> https://mm3-lists.kictanet.or.ke/mm/lists/kictanet.lists.kictanet.or.ke/ >>>> >>>> Mailing List Posts Online: https://posts.kictanet.or.ke/ >>>> >>>> Twitter: https://twitter.com/KICTANet/ >>>> Facebook: https://www.facebook.com/KICTANet/ >>>> Instagram: https://www.instagram.com/KICTANet/ >>>> LinkedIn: https://www.linkedin.com/company/kictanet/ >>>> YouTube: https://www.youtube.com/channel/UCbcLVjnPtTGBEeYLGUb2Yow/ >>>> >>>> KICTANet is a multi-stakeholder Think Tank for people and institutions >>>> interested and involved in ICT policy and regulation. >>>> KICTANet is a catalyst for reform in the Information and Communication >>>> Technology sector. Its work is guided by four pillars >>>> of Policy Advocacy, Capacity Building, Research, and Stakeholder >>>> Engagement. >>>> >>>> KICTANetiquette : Adhere to the same standards of acceptable behaviors >>>> online that you follow in real life: respect people's >>>> times and bandwidth, share knowledge, don't flame or abuse or >>>> personalize, respect privacy, do not spam, do not market your >>>> wares or qualifications. >>>> >>>> KICTANet - The Power of Communities, is Kenya's premier ICT policy >>>> engagement platform. >>>> >>>> >>>> >>>> -- >>>> >>>> *Barrack Otieno * >>>> *Trustee* >>>> *Kenya ICT Action Network (KICTAnet)* >>>> *Skype:barrack.otieno* >>>> *+254721325277* >>>> >>>> *https://www.linkedin.com/in/barrack-otieno-2101262b/ >>>> <https://www.linkedin.com/in/barrack-otieno-2101262b/> * >>>> >>>> *www.kictanet.or.ke <http://www.kictanet.or.ke>* >>>> _______________________________________________ >>>> KICTANet mailing list -- kictanet(a)lists.kictanet.or.ke >>>> To unsubscribe send an email to kictanet-leave(a)lists.kictanet.or.ke >>>> Unsubscribe or change your options at: >>>> https://mm3-lists.kictanet.or.ke/mm/lists/kictanet.lists.kictanet.or.ke/ >>>> >>>> Mailing List Posts Online: https://posts.kictanet.or.ke/ >>>> >>>> Twitter: https://twitter.com/KICTANet/ >>>> Facebook: https://www.facebook.com/KICTANet/ >>>> Instagram: https://www.instagram.com/KICTANet/ >>>> LinkedIn: https://www.linkedin.com/company/kictanet/ >>>> YouTube: https://www.youtube.com/channel/UCbcLVjnPtTGBEeYLGUb2Yow/ >>>> >>>> KICTANet is a multi-stakeholder Think Tank for people and institutions >>>> interested and involved in ICT policy and regulation. >>>> KICTANet is a catalyst for reform in the Information and Communication >>>> Technology sector. Its work is guided by four pillars >>>> of Policy Advocacy, Capacity Building, Research, and Stakeholder >>>> Engagement. >>>> >>>> KICTANetiquette : Adhere to the same standards of acceptable behaviors >>>> online that you follow in real life: respect people's >>>> times and bandwidth, share knowledge, don't flame or abuse or >>>> personalize, respect privacy, do not spam, do not market your >>>> wares or qualifications. >>>> >>>> KICTANet - The Power of Communities, is Kenya's premier ICT policy >>>> engagement platform. >>>> >>> _______________________________________________ >>> KICTANet mailing list -- kictanet(a)lists.kictanet.or.ke >>> To unsubscribe send an email to kictanet-leave(a)lists.kictanet.or.ke >>> Unsubscribe or change your options at: >>> https://mm3-lists.kictanet.or.ke/mm/lists/kictanet.lists.kictanet.or.ke/ >>> >>> Mailing List Posts Online: https://posts.kictanet.or.ke/ >>> >>> Twitter: https://twitter.com/KICTANet/ >>> Facebook: https://www.facebook.com/KICTANet/ >>> Instagram: https://www.instagram.com/KICTANet/ >>> LinkedIn: https://www.linkedin.com/company/kictanet/ >>> YouTube: https://www.youtube.com/channel/UCbcLVjnPtTGBEeYLGUb2Yow/ >>> >>> KICTANet is a multi-stakeholder Think Tank for people and institutions >>> interested and involved in ICT policy and regulation. >>> KICTANet is a catalyst for reform in the Information and Communication >>> Technology sector. Its work is guided by four pillars >>> of Policy Advocacy, Capacity Building, Research, and Stakeholder >>> Engagement. >>> >>> KICTANetiquette : Adhere to the same standards of acceptable behaviors >>> online that you follow in real life: respect people's >>> times and bandwidth, share knowledge, don't flame or abuse or >>> personalize, respect privacy, do not spam, do not market your >>> wares or qualifications. >>> >>> KICTANet - The Power of Communities, is Kenya's premier ICT policy >>> engagement platform. >>> >> _______________________________________________ > KICTANet mailing list -- kictanet(a)lists.kictanet.or.ke > To unsubscribe send an email to kictanet-leave(a)lists.kictanet.or.ke > Unsubscribe or change your options at: > https://mm3-lists.kictanet.or.ke/mm/lists/kictanet.lists.kictanet.or.ke/ > > Mailing List Posts Online: https://posts.kictanet.or.ke/ > > Twitter: https://twitter.com/KICTANet/ > Facebook: https://www.facebook.com/KICTANet/ > Instagram: https://www.instagram.com/KICTANet/ > LinkedIn: https://www.linkedin.com/company/kictanet/ > YouTube: https://www.youtube.com/channel/UCbcLVjnPtTGBEeYLGUb2Yow/ > > KICTANet is a multi-stakeholder Think Tank for people and institutions > interested and involved in ICT policy and regulation. > KICTANet is a catalyst for reform in the Information and Communication > Technology sector. Its work is guided by four pillars > of Policy Advocacy, Capacity Building, Research, and Stakeholder > Engagement. > > KICTANetiquette : Adhere to the same standards of acceptable behaviors > online that you follow in real life: respect people's > times and bandwidth, share knowledge, don't flame or abuse or personalize, > respect privacy, do not spam, do not market your > wares or qualifications. > > KICTANet - The Power of Communities, is Kenya's premier ICT policy > engagement platform. >

1 0

Computer Misuse and Cybercrimes (Critical Information Infrastructure and CyberCrimes Management Regulations, 2023)
by Grace Githaiga 19 Sep '23

19 Sep '23

Hi Listers, KICTANet is inviting all Stakeholders to participate in this crucial public engagement and informed dialogue regarding the regulations conferred by the Computer Misuse and Cybercrimes (Critical Information Infrastructure and CyberCrimes Management Regulations, 2023) <https://nc4.go.ke/cmca-2018-draft-regulations/>and released by the Cabinet Secretary for Interior and National Administration. Your valuable input is not just welcomed, but it is essential in ensuring that the Regulations are well-informed and aligned with the rapidly evolving landscape of cybersecurity and digital technologies. We plan to hold a three-day online moderated debate on this list, starting from Monday to Wednesday next week (September 18- 20, 2023). The debate will be moderated by Our Linda Gichohi. What is your take on these regulations? Do you have any concerns about the regulations? Looking forward to your active participation. We provide a quick summary of the regulations below: The Regulations Introduction The Regulations are conferred by 70 of the Computer Misuse and Cybercrimes Act, 2018. The Cabinet Secretary for Interior and National Administration makes the following Regulations— PART I - PRELIMINARY PROVISIONS This encapsulates the citation, interpretation, objects of the Regulations, guiding principles, and the Scope of Regulations. Thereby entailing the official title by which the regulations should be referred, to ensure clarity, defining specific terms and phrases used within the regulations. This is to ensure that meanings are understood, and fundamental principles to be adhered to when implementing the regulations. The boundaries are defined and the applicability of the regulations including their jurisdiction and purpose. PART II- ADMINISTRATION AND MANAGEMENT OF THE COMMITTEE This part essentially deals with the responsibilities of the committee, the conduct of business of the committee, and the role of the secretariat. The regulations focus on the practical aspects of how the committee operates, and are supported in its efforts to enforce and manage the regulations related to cybercrime and critical information infrastructure. PART III- CYBERSECURITY OPERATIONS CENTRES This part entails the establishment and operations of the Cyber Security Operations Centres, monitoring and inspection processes related to their activities, particularly in safeguarding critical information infrastructure and addressing cyber threats. PART IV- CRITICAL INFORMATION INFRASTRUCTURE This part covers the Critical Information Infrastructure and encompasses the critical aspects of managing, preserving, and protecting critical information infrastructure, including designations, obligations, security measures, auditing, inspection, and the establishment of the National Public Key Infrastructure. PART V— CYBERSECURITY CAPABILITY AND CAPACITY This proposes measures to strengthen cyber security capabilities and capacity through training, information sharing, information sharing, standards, collaboration, and the certification of institutions and professionals in the field of cybersecurity. PART VI—REPORTING MECHANISM This part focuses on the objectives, procedures, and methods of reporting cyber threats, including provisions for anonymous reporting to promote cybersecurity awareness and response. PART VII—MISCELLANEOUS PROVISIONS This typically covers various miscellaneous provisions related to cybersecurity, including the adoption of best practices, partnerships, dispute resolution, and data protection while, The “SCHEDULES” section contains additional detailed information or forms related to compliance. Again, we look forward to your active participation. Have a great weekend. -- Grace Githaiga KICTANet Convenor KICTANet portals KICTANet.or.ke <https://kictanet.or.ke/> | Twitter <https://twitter.com/kictanet> | LinkedIn <https://www.linkedin.com/company/18428106/admin/> | Facebook <https://www.facebook.com/KICTANet/>

2 2

Digital Health & e-Health Bills 2023
by Victor Kapiyo 18 Sep '23

18 Sep '23

Dear Listers, There are two interesting health bills at the National Assembly and the Senate: 1. Digital Health Bill, 2023 <http://kenyalaw.org/kl/fileadmin/pdfdownloads/bills/2023/DigitalHealthBill2…> - This seeks to provide for the establishment of the Digital Health Agency; to provide a framework for the provision of digital health services; and to establish a comprehensive integrated digital health information system. 2. e-Health Bill, 2023 <http://kenyalaw.org/kl/fileadmin/pdfdownloads/bills/2023/TheE-HealthBill_20…> - This seeks to provide a framework for the provision of Telemedicine; M -health; Health Tourism; licencing of health e-waste undertakings; and the roles of the national and county governments. Regards, *Victor Kapiyo* Partner | *Lawmark Partners LLP* *Nine Planet Apartments, Nairobi | **Web: www.lawmark.co.ke <http://www.lawmark.co.ke/> * ==================================================== *“Your attitude, not your aptitude, will determine your altitude” Zig Ziglar*

2 1

Call for Input: Draft Medium-Term Revenue Strategy
by Victor Kapiyo 13 Sep '23

13 Sep '23

Dear Listers, The National Treasury is calling <https://www.treasury.go.ke/wp-content/uploads/2023/09/MTRS-Public-Notice.pdf> for public input on the Draft Medium-Term Revenue Strategy <https://www.treasury.go.ke/wp-content/uploads/2023/09/Draft-MTRS-Final.pdf> . The deadline for submissions is 6 October 2023 to budgetproposals(a)treasury.go.ke Regards *Victor Kapiyo* Partner | *Lawmark Partners LLP* *Nine Planet Apartments, Nairobi | **Web: www.lawmark.co.ke <http://www.lawmark.co.ke/> * ==================================================== *“Your attitude, not your aptitude, will determine your altitude” Zig Ziglar*

1 0

Fwd: #SDF- DGIx promotion
by Grace Githaiga 12 Sep '23

12 Sep '23

Listers This might be of interest to some of you. Rgds GG Dear Innovators, Entrepreneurs, and Changemakers, We want to share an exciting opportunity for digital green innovations in Africa to scale their solutions and grow their impact! *The Digital Green Innovation Acceleration Programme DGIx?* The *Digital Green Innovation Acceleration Programme (DGIx)* <https://innovation.wfp.org/digital-green-innovation-acceleration-programme> is a programme by the #Smart Development Fund (#SDF) <https://sdf.d4dhub.eu/> and the WFP Innovation Accelerator, powered by Deutsche Gesellschaft für Internationale Zusammenarbeit (GIZ) GmbH and the German Federal Ministry for Economic Cooperation and Development (BMZ) and the European Union (EU). DGIx is in search of digital ventures and consortiums, addressing one/ more climate priorities in selected countries. The selected digital green solutions will receive: - *Equity- Free Funding *up to US $230,000 - *Tailored Mentorship *from professional experts - *Strong Support Network of investors, partners, and support structures* Find more information on the Digital Green Innovation Acceleration Programme website <https://innovation.wfp.org/digital-green-innovation-acceleration-programme> and join our info session on the 19th of September 14:00-15:00 CET by registering here <https://wfp-org-conference.zoom.us/meeting/register/tJUpduGvqj4rGNCYB0uTzur…> . *Apply Now* by filling in the Application Form <https://airtable.com/appzDARXlNlS8wnmA/shrENeHx0jBbn9yYu> before *24 September 2023* 23:59 (CET). We are eagerly awaiting your digital and green solutions! Warm regards, The #SmartDevelopmentFund [image: Ein Bild, das Text, Screenshot, Design enthält. Automatisch generierte Beschreibung] ------------------------------ Deutsche Gesellschaft fuer Internationale Zusammenarbeit (GIZ) GmbH; Sitz der Gesellschaft Bonn und Eschborn/Registered offices Bonn and Eschborn, Germany; Registergericht/Registered at Amtsgericht Bonn, Germany; Eintragungs-Nr./Registration no. HRB 18384 und/and Amtsgericht Frankfurt am Main, Germany; Eintragungs-Nr./Registration no. HRB 12394; USt-IdNr./VAT ID no. DE 113891176; Vorsitzender des Aufsichtsrats/Chairman of the Supervisory Board: Jochen Flasbarth; Vorstand/Management Board: Thorsten Schaefer-Guembel (Vorstandssprecher/Chair), Ingrid-Gabriela Hoven (Stellvertretende Vorstandssprecherin/Vice-Chair), Anna Sophie Herken -- Grace Githaiga KICTANet Convenor KICTANet portals KICTANet.or.ke <https://kictanet.or.ke/> | Twitter <https://twitter.com/kictanet> | LinkedIn <https://www.linkedin.com/company/18428106/admin/> | Facebook <https://www.facebook.com/KICTANet/>

1 0

Deception and exploitation : How Worldcoin recruited its first million test users
by Mwendwa Kivuva 12 Sep '23

12 Sep '23

Worldcoin was founded by Sam Altman, who also founded OpenAI, the company behind ChatGPT. Worldcoin is an iris biometric cryptocurrency project that has scanned and stored the eyes of millions of people across the world. Apart from invading our shopping malls to harvest eye iris data, I've now seen they are operating from inside supermarkets, most recently from inside Quickmarts in Nairobi. This is an important discussion because Worldcoin has been operating in Kenya for more than a year, collecting biometric iris scans of the uninformed consenting public. We had a discussion here, and it was not clear if the Office of the Data Protection Commissioner (ODPC) had given content for such eternal personally identifiable data to be collected. The privacy implications of Worldcoin collecting biometric iris scans of poor people are significant. 1) The data could be used to track people's movements and activities. Iris scans are unique to each individual and can be used to identify people even if they are wearing disguises. This means that Worldcoin could track poor people's movements, including where they go, who they meet, and what they do. This could be used to target them for marketing or surveillance purposes. 2) The data could be used to discriminate against poor people. Iris scans could be used to deny poor people access to services or opportunities. For example, a bank could use iris scans to deny a loan application from a poor person, or an employer could use iris scans to reject a job application from a poor person. 3) The data could be hacked or stolen. If the data is hacked or stolen, it could be used to commit identity theft or other crimes. This could have a devastating impact on poor people, who may not have the resources to recover from identity theft. 4. Obtaining informed consent is essential when collecting sensitive biometric data. Poor individuals may not fully understand the implications of providing their biometric data or may feel pressured to participate due to their socio-economic situation, potentially leading to uninformed or coerced consent. 5. There's a concern that the initial purpose of collecting biometric data for cryptocurrency verification might evolve into other uses without adequate consent or oversight, leading to function creep and expanded surveillance. Informed consent is a process in which data subjects give permission for something to happen after they have been given and understood all the relevant information about it. Informed consent requires data subjects to understand the purpose of the data collection. This is one of the four elements of informed consent, along with information, comprehension, and voluntariness. There are some concerns about Worldcoin's consent process. 1. The consent form is not clear about what data is being collected. The consent form does not explicitly state that Worldcoin is collecting biometric data, such as iris scans. Instead, the form simply states that Worldcoin is collecting "personal data." This could lead users to believe that they are only giving consent to the collection of non-sensitive personal data, such as their name and address. 2. The consent form is not easy to understand. The consent form is written in complex legal language that is difficult for many people to understand. This could make it difficult for users to understand what they are consenting to. 3. The consent form is not easy to revoke. Once users have given consent to Worldcoin to collect their biometric data, it is difficult to revoke their consent. Users must send a written request to Worldcoin, and the company is not required to delete the data immediately. There is an exciting read from MIT claiming that Worldcoin has built a biometric database from the bodies of the poor using deceptive practices: Read along here https://www.technologyreview.com/2022/04/06/1048981/worldcoin-cryptocurrenc… Which direction should African and global majority countries take in regard to Western companies harvesting personally identifiable data from their citizens? Best Regards, ______________________ Mwendwa Kivuva, Nairobi, Kenya https://www.linkedin.com/in/mwendwa-kivuva

7 7