Send KICTANet mailing list submissions to
kictanet@lists.kictanet.or.ke
To subscribe or unsubscribe via email, send a message with subject or
body 'help' to
kictanet-request@lists.kictanet.or.ke
You can reach the person managing the list at
kictanet-owner@lists.kictanet.or.ke
When replying, please edit your Subject line so it is more specific
than "Re: Contents of KICTANet digest..."
Today's Topics:
1. Re: KRA Should Keep of MPESA (Kukubo Masibo)
2. Re: Users allowed to sue Safaricom over clients bank details access
(Kukubo Masibo)
3. Re: Users allowed to sue Safaricom over clients bank details access
(James Mbugua)
----------------------------------------------------------------------
Message: 1
Date: Thu, 2 Feb 2023 12:15:22 +0300
From: Kukubo Masibo <kukubomasibo@gmail.com>
Subject: [kictanet] Re: KRA Should Keep of MPESA
To: "Kenya's premier ICT Policy engagement platform"
<kictanet@lists.kictanet.or.ke>
Message-ID:
<CABMDN854Hbu4vjg11WbgfOKRoN1rcaN-A_mg+mVjdWuVwuudRg@mail.gmail.com>
Content-Type: multipart/alternative;
boundary="000000000000e3186205f3b40176"
Interesting article James,
I am also curious whether KRA has conducted a Data Protection Impact
Assessment to assess the risks to personal data that come with the exercise
and to introduce sufficient safeguards.
Best regards,
On Mon, Jan 30, 2023 at 11:44 AM James Mbugua via KICTANet <
kictanet@lists.kictanet.or.ke> wrote:
> Listers,
>
> See copied below unabridged version.
>
> Regards,
>
> JG
>
> KRA ACCESS TO M-PESA TRANSACTIONS IS A GRAVE THREAT TO PRIVACY ON DATA
> PROTECTION WEEK
> BY JAMES MBUGUA
> As the Kenyan government looks for new ways to increase revenue collection
> and curb tax cheating, the Kenya Revenue Authority has announced plans to
> gain direct and warrantless access to M-Pesa transactions. While the
> intentions of (KRA) may be noble, the methods proposed raise serious
> concerns about privacy rights and the protection of personal data.
> In fact, they constitute illegal searches and seizures contrary to Article
> 31 of the Constitution of Kenya, and well established jurisprudence on
> privacy rights from around the world.
> Article 31 provides for the right to privacy and states that every person
> has the right to privacy, which includes the right not to have their
> person, home or property searched; their possessions seized; information
> relating to their family or private affairs unnecessarily required or
> revealed; or the privacy of their communications infringed.
> Kenya’s Data Protection Act of 2019, provides in Section 4 that a data
> subject’s consent must be sought before their data is collected and
> processed. Section 15 requires data controllers to obtain a warrant from a
> court of law before accessing personal data. This is to ensure that the
> collection, processing and sharing of personal data is necessary and
> proportionate.
> The High Court of Kenya, in the case of Center for Rights Education and
> Awareness (CREAW) v Attorney General [2013] , as well as in Maina Kiai v
> Attorney General held that the government's surveillance of citizens'
> communications without a warrant is a violation of the right to privacy
> protected under the Constitution.
> KRA’s proposal in the Budget Policy Statement released by the National
> Treasury last week, ironically came on the eve of Data Protection Week when
> the world marks the International Data Protection Day, on 28th January.
> In Europe, whose General Data Protection Regulation (GDPR) we largely
> modelled our Act on, the principle of necessity and proportionality, in
> collection of personal data, has repeatedly been upheld by courts when
> government agencies have tried to access citizens’ telecommunications
> information without warrants. The courts have ruled that general and
> indiscriminate retention of personal data is incompatible with EU laws and
> constitutional rights, because it represents a serious interference with
> the right to privacy and the protection of personal data
> In the Digital Rights Ireland vs. Minister for Communications case, as
> well as another called the Tele2 case, the European Court of Justice (ECJ)
> ruled that a law requiring telecommunications service providers to retain
> traffic and location data for a period specified by national law in order
> to detect, investigate and prosecute crime was invalid. The Court
> emphasized that any interference with the right to privacy and the
> protection of personal data must be proportionate to the legitimate aim
> pursued.
> These cases reinforced the principle that any data retention measures must
> be limited to what is strictly necessary to achieve a legitimate aim.
> In Kenya’s case, it can be argued that KRA can achieve its mandate through
> other means without large scale surveillance and interference with people’s
> privacy.
> Further, granting KRA unfettered access to M-Pesa transactions data
> without the need for court orders, violates constitutional protection
> against illegal searches and seizures, also provided for under Article 31
> of the Constitution.
> In the United States, for example, the Supreme Court has ruled that the
> government's warrantless access to historical cell phone location data is a
> violation of the Fourth Amendment, which protects individuals against
> unreasonable searches and seizures. The court found that the collection of
> cell phone location data constitutes a search under the Fourth Amendment
> and that the government must obtain a warrant based on probable cause
> before accessing such data.
> In Canada, the Supreme Court has ruled that the government's warrantless
> access to historical telecommunications data is a violation of the right to
> privacy protected under the Canadian Charter of Rights and Freedoms. The
> court found that the collection of telecommunications data constitutes a
> search under the Charter and that the government must obtain a warrant
> based on a reasonable expectation of privacy before accessing such data.
> _______________________________________________
> KICTANet mailing list -- kictanet@lists.kictanet.or.ke
> To unsubscribe send an email to kictanet-leave@lists.kictanet.or.ke
>
--
Meshack K Masibo,
Writer|Noisemaker|Lawyer
Affiliated with KICTANet
kictanet.or.ke
-------------- next part --------------
A message part incompatible with plain text digests has been removed ...
Name: not available
Type: text/html
Size: 6379 bytes
Desc: not available
------------------------------
Message: 2
Date: Thu, 2 Feb 2023 12:28:45 +0300
From: Kukubo Masibo <kukubomasibo@gmail.com>
Subject: [kictanet] Re: Users allowed to sue Safaricom over clients
bank details access
To: "Kenya's premier ICT Policy engagement platform"
<kictanet@lists.kictanet.or.ke>
Message-ID:
<CABMDN87dgFVGMHC__1=GNGpxoWpL44T4085fpy0T=jYXE1HLYw@mail.gmail.com>
Content-Type: multipart/alternative;
boundary="000000000000c28aed05f3b431bb"
Curious about the choice of forum, why the High Court instead of the Office
of the Data Protection Commissioner?
Will there be a jurisdiction question?
Best regards,
On Fri, Jan 20, 2023 at 8:45 AM Victor Kapiyo via KICTANet <
kictanet@lists.kictanet.or.ke> wrote:
> The High Court has allowed millions of Safaricom subscribers to join a
> class action suit against the telecoms operator over a clause in the SIM
> card registration rules that allows the firm to collect bank details of
> mobile phone users. Clause 3.2.1 in the data privacy statement, which
> subscribers filled as part of the re-registration process, states that the
> telecoms operator can “collect and store information including credit or
> debit card information, information on bank account numbers, Swift codes or
> other banking information”.
>
> Read more:
>
https://emea01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.businessdailyafrica.com%2Fbd%2Feconomy%2Fusers-allowed-to-sue-safaricom-over-clients-bank-details--4092154&data=05%7C01%7C%7C7e9917816059490dd4f408db050b3c42%7C84df9e7fe9f640afb435aaaaaaaaaaaa%7C1%7C0%7C638109318054010470%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000%7C%7C%7C&sdata=qEvZTjQ1eRi1vchH5ksK7NWK6U2wXd3DJ5vqWGajVes%3D&reserved=0
>
>
> Looks like we are going to see a lot of privacy related litigation in the
> coming years.
>
>
> *Victor Kapiyo*
> Partner | *Lawmark Partners LLP*
> *Nine Planet Apartments, Nairobi | **Web:
https://emea01.safelinks.protection.outlook.com/?url=http%3A%2F%2Fwww.lawmark.co.ke%2F&data=05%7C01%7C%7C7e9917816059490dd4f408db050b3c42%7C84df9e7fe9f640afb435aaaaaaaaaaaa%7C1%7C0%7C638109318054010470%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000%7C%7C%7C&sdata=sjueOWR9y2OBblXi0fKAs7Q43OCOEgAaiRmI2marV6c%3D&reserved=0
> <
https://emea01.safelinks.protection.outlook.com/?url=http%3A%2F%2Fwww.lawmark.co.ke%2F&data=05%7C01%7C%7C7e9917816059490dd4f408db050b3c42%7C84df9e7fe9f640afb435aaaaaaaaaaaa%7C1%7C0%7C638109318054010470%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000%7C%7C%7C&sdata=sjueOWR9y2OBblXi0fKAs7Q43OCOEgAaiRmI2marV6c%3D&reserved=0>
*
> ====================================================
>
> *“Your attitude, not your aptitude, will determine your altitude” Zig
> Ziglar*
> _______________________________________________
> KICTANet mailing list -- kictanet@lists.kictanet.or.ke
> To unsubscribe send an email to kictanet-leave@lists.kictanet.or.ke
>
--
Meshack K Masibo,
Writer|Noisemaker|Lawyer
Affiliated with KICTANet
kictanet.or.ke
-------------- next part --------------
A message part incompatible with plain text digests has been removed ...
Name: not available
Type: text/html
Size: 4034 bytes
Desc: not available
------------------------------
Message: 3
Date: Thu, 2 Feb 2023 13:47:22 +0300
From: James Mbugua <jgmbugua@gmail.com>
Subject: [kictanet] Re: Users allowed to sue Safaricom over clients
bank details access
To: "Kenya's premier ICT Policy engagement platform"
<kictanet@lists.kictanet.or.ke>
Message-ID:
<CAAp8a6yMbzkHL7=e4BF0FkrUAw3EYcCZXSaZEAPHP9QcjP65Aw@mail.gmail.com>
Content-Type: multipart/alternative;
boundary="000000000000ccdebf05f3b54a38"
Kukubo,
It's a class action suit. HC has original jurisdiction there.
Regards
JG
On Thu, 2 Feb 2023, 12:36 Kukubo Masibo via KICTANet, <
kictanet@lists.kictanet.or.ke> wrote:
> Curious about the choice of forum, why the High Court instead of the
> Office of the Data Protection Commissioner?
>
> Will there be a jurisdiction question?
>
>
> Best regards,
>
> On Fri, Jan 20, 2023 at 8:45 AM Victor Kapiyo via KICTANet <
> kictanet@lists.kictanet.or.ke> wrote:
>
>> The High Court has allowed millions of Safaricom subscribers to join a
>> class action suit against the telecoms operator over a clause in the SIM
>> card registration rules that allows the firm to collect bank details of
>> mobile phone users. Clause 3.2.1 in the data privacy statement, which
>> subscribers filled as part of the re-registration process, states that the
>> telecoms operator can “collect and store information including credit or
>> debit card information, information on bank account numbers, Swift codes or
>> other banking information”.
>>
>> Read more:
>>
https://emea01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.businessdailyafrica.com%2Fbd%2Feconomy%2Fusers-allowed-to-sue-safaricom-over-clients-bank-details--4092154&data=05%7C01%7C%7C7e9917816059490dd4f408db050b3c42%7C84df9e7fe9f640afb435aaaaaaaaaaaa%7C1%7C0%7C638109318054010470%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000%7C%7C%7C&sdata=qEvZTjQ1eRi1vchH5ksK7NWK6U2wXd3DJ5vqWGajVes%3D&reserved=0
>>
>>
>> Looks like we are going to see a lot of privacy related litigation in the
>> coming years.
>>
>>
>> *Victor Kapiyo*
>> Partner | *Lawmark Partners LLP*
>> *Nine Planet Apartments, Nairobi | **Web:
https://emea01.safelinks.protection.outlook.com/?url=http%3A%2F%2Fwww.lawmark.co.ke%2F&data=05%7C01%7C%7C7e9917816059490dd4f408db050b3c42%7C84df9e7fe9f640afb435aaaaaaaaaaaa%7C1%7C0%7C638109318054010470%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000%7C%7C%7C&sdata=sjueOWR9y2OBblXi0fKAs7Q43OCOEgAaiRmI2marV6c%3D&reserved=0
>> <
https://emea01.safelinks.protection.outlook.com/?url=http%3A%2F%2Fwww.lawmark.co.ke%2F&data=05%7C01%7C%7C7e9917816059490dd4f408db050b3c42%7C84df9e7fe9f640afb435aaaaaaaaaaaa%7C1%7C0%7C638109318054010470%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000%7C%7C%7C&sdata=sjueOWR9y2OBblXi0fKAs7Q43OCOEgAaiRmI2marV6c%3D&reserved=0>
*
>> ====================================================
>>
>> *“Your attitude, not your aptitude, will determine your altitude” Zig
>> Ziglar*
>> _______________________________________________
>> KICTANet mailing list -- kictanet@lists.kictanet.or.ke
>> To unsubscribe send an email to kictanet-leave@lists.kictanet.or.ke
>>
>
>
> --
> Meshack K Masibo,
> Writer|Noisemaker|Lawyer
> Affiliated with KICTANet
> kictanet.or.ke
> _______________________________________________
> KICTANet mailing list -- kictanet@lists.kictanet.or.ke
> To unsubscribe send an email to kictanet-leave@lists.kictanet.or.ke
>
-------------- next part --------------
A message part incompatible with plain text digests has been removed ...
Name: not available
Type: text/html
Size: 5078 bytes
Desc: not available
------------------------------
Subject: Digest Footer
_______________________________________________
KICTANet mailing list -- kictanet@lists.kictanet.or.ke
To unsubscribe send an email to kictanet-leave@lists.kictanet.or.ke
------------------------------
End of KICTANet Digest, Vol 179, Issue 46
*****************************************