Guys I get it. And I am guessing the case here is that Safcom shared the statement, but protected personal details in the transactions. Where my point of confusion is, where are the lines drawn on ownership and responsibility for the transaction data. Remember that this data being transacted is about the client's money. Are they protecting the data because of the rights of the beneficiary of the funds? Or should they exercise transparency for the rights of the owner of the funds? The other questions about the investigative gaps between the DCI and Safaricom is, where are consumer rights here? You know this is Kenya. You report a case, get an OB, but it ends there? Who is responsible to follow up on action? Customer, DCI, Safaricom? *I was in another complicated situation two weeks ago, where my device was stolen and had data of its movement. A case of burglary where the cop were not interested in taking up. Was later told that its because I was not speaking their language.* On Thu, Sep 5, 2024 at 12:44 PM Cephas Joseph via KICTANet < kictanet@lists.kictanet.or.ke> wrote:
Liz,
1. All phone numbers in an MPESA statement have six digits masked, for obvious reasons; if the statement is accessed illicitly, the individual unique numbers can not be determined. 2. There is both security and privacy justification for this. BUt also business case, including liability 3. The DCI can via a court order get access to the said phone numbers as part of investigation, the OB is only a record of the incident with police.
Imagine a scenario where wakora wa Nairobi, grab you and transfer money to a number(s) linked to a terrorist cell, the ATU will seek/find you as the owner without having to get an OB no. - but this is their job!
On Thu, Sep 5, 2024 at 11:40 AM Odhiambo Washington via KICTANet < kictanet@lists.kictanet.or.ke> wrote:
On Thu, Sep 5, 2024 at 10:39 AM Liz Orembo via KICTANet < kictanet@lists.kictanet.or.ke> wrote:
Dear listers,
See this case in twitter. A lady was carjacked, her phone stolen and mpesa transferred to other numbers by thieves. Safaricom does not want to reveal the beneficiary numbers for the criminal transactions to the registered line owner. This is despite them going to Safaricom with an OB number. https://x.com/herine_lando/status/1831366028443709797?s=46
I am not too conversant with the DP Act, but as long as the lady still has the number, she can use a USSD option to obtain the M-Pesa statement sent directly to her email by the system. But then what does she do with it after finding who her money was sent to? DCI. The DCI are the ones who will handle that case - which to me is a robbery with violence case.
-- Best regards, Odhiambo WASHINGTON, Nairobi,KE +254 7 3200 0004/+254 7 2274 3223 In an Internet failure case, the #1 suspect is a constant: DNS. "Oh, the cruft.", egrep -v '^$|^.*#' ¯\_(ツ)_/¯ :-) [How to ask smart questions: http://www.catb.org/~esr/faqs/smart-questions.html] _______________________________________________ KICTANet mailing list -- kictanet@lists.kictanet.or.ke To unsubscribe send an email to kictanet-leave@lists.kictanet.or.ke Unsubscribe or change your options at: https://mm3-lists.kictanet.or.ke/mm/lists/kictanet.lists.kictanet.or.ke/
Mailing List Posts Online: https://posts.kictanet.or.ke/
Twitter: https://twitter.com/KICTANet/ Facebook: https://www.facebook.com/KICTANet/ Instagram: https://www.instagram.com/KICTANet/ LinkedIn: https://www.linkedin.com/company/kictanet/ YouTube: https://www.youtube.com/channel/UCbcLVjnPtTGBEeYLGUb2Yow/ WhatsApp Channel: https://whatsapp.com/channel/0029VaQsX4w6mYPIctLsGh1K
KICTANet is a multi-stakeholder Think Tank for people and institutions interested and involved in ICT policy and regulation. KICTANet is a catalyst for reform in the Information and Communication Technology sector. Its work is guided by four pillars of Policy Advocacy, Capacity Building, Research, and Stakeholder Engagement.
KICTANetiquette : Adhere to the same standards of acceptable behaviors online that you follow in real life: respect people's times and bandwidth, share knowledge, don't flame or abuse or personalize, respect privacy, do not spam, do not market your wares or qualifications.
PRIVACY POLICY: See https://mm3-lists.kictanet.or.ke/mm/lists/kictanet.lists.kictanet.or.ke/
KICTANet - The Power of Communities, is Kenya's premier ICT policy engagement platform.
--
--- *Cephas O.M *
_______________________________________________ KICTANet mailing list -- kictanet@lists.kictanet.or.ke To unsubscribe send an email to kictanet-leave@lists.kictanet.or.ke Unsubscribe or change your options at: https://mm3-lists.kictanet.or.ke/mm/lists/kictanet.lists.kictanet.or.ke/
Mailing List Posts Online: https://posts.kictanet.or.ke/
Twitter: https://twitter.com/KICTANet/ Facebook: https://www.facebook.com/KICTANet/ Instagram: https://www.instagram.com/KICTANet/ LinkedIn: https://www.linkedin.com/company/kictanet/ YouTube: https://www.youtube.com/channel/UCbcLVjnPtTGBEeYLGUb2Yow/ WhatsApp Channel: https://whatsapp.com/channel/0029VaQsX4w6mYPIctLsGh1K
KICTANet is a multi-stakeholder Think Tank for people and institutions interested and involved in ICT policy and regulation. KICTANet is a catalyst for reform in the Information and Communication Technology sector. Its work is guided by four pillars of Policy Advocacy, Capacity Building, Research, and Stakeholder Engagement.
KICTANetiquette : Adhere to the same standards of acceptable behaviors online that you follow in real life: respect people's times and bandwidth, share knowledge, don't flame or abuse or personalize, respect privacy, do not spam, do not market your wares or qualifications.
PRIVACY POLICY: See https://mm3-lists.kictanet.or.ke/mm/lists/kictanet.lists.kictanet.or.ke/
KICTANet - The Power of Communities, is Kenya's premier ICT policy engagement platform.
-- Best regards. Liz. PGP ID: 0x1F3488BF