Key Revelations:

• Communications surveillance is being carried out by Kenyan state actors, essentially without oversight, outside of the procedures required by Kenyan laws. Intercepted communications content and data are used to facilitate gross human rights abuses - to spy on, profile, locate, track and ultimately arrest, torture, kill or 'disappear' suspects.
• Intelligence gained by intercepting phone communications, primarily by the National Intelligence Service (NIS), is regularly shared with units of the police to carry out counter-terrorism operations, particularly the GSU-Recce company and Anti-Terrorism Police Unit (ATPU). These police units have well-documented records of abuses including torture and extrajudicial killing
• Despite constitutional and other privacy protections, telecommunications operators regularly hand over customer data to both intelligence and law enforcement agencies. Sources who spoke with PI feel that they cannot decline agencies’ requests.
• The NIS appears to have direct access to communication networks across Kenya. Direct access means an actor has backdoor access the phone communications that flow through service providers. In this case, it is unlikely that the network operators had knowledge of the state's interception.
• NIS officers use various techniques to access both call content and call data records, including using mobile interception devices. Further methods are documented in the report.
• Law enforcement agents are present within telecommunications operators’ facilities with the providers’ knowledge. NIS are also informally present in the telecommunication operators’ facilities, apparently undercover, according to current and former telecommunications, Communications Authority and NIS staff interviewed by Privacy International. This investigation details both the 'above the board' and informal practices. Agency and company responses to requests for comment by Privacy International are included in the report.
• In advance of the August 2017 Presidential elections, the Communications Authority has launched several disturbing initiatives, including a project to monitor social media content, whose potential capacities are discussed in this report.