How does Safaricom handle data subject rights? Doesn’t every customer of theirs have a right to information about their transactions, similar to bank statements? Masking of important information like where a customer’s phone sent money to seems contrary to the right to information. On Thursday 5 September 2024, Ochieng A. Ogango via KICTANet < kictanet@lists.kictanet.or.ke> wrote:
Surely you want to believe such a tweet, don't you think she out to spew the idea of an alleged breach!!
*Kind regards,*
*Ochieng A. Ogango*
*Advocate, LLB (Hons), CPM(M.T.I)*
On Thu, Sep 5, 2024 at 4:24 PM Florence Awino via KICTANet < kictanet@lists.kictanet.or.ke> wrote:
Interesting development; because Safaricom has just called the complainant's mother. Isn't that the real breach? 😊
https://x.com/herine_lando/status/1831679155647152508?t= dt9dXNBxvRpP8ZLTFPkpLw&s=19
On Thu, 5 Sept 2024, 15:41 Nicodemus Nyakundi via KICTANet, < kictanet@lists.kictanet.or.ke> wrote:
Thanks Ochieng for bringing up the point.
I had the same question in mind. That, I own the SIM card and presumably all transactions occurred through my line, either as a sender or receiver. Why then am I being denied the data I helped generate (in this case data of a SIM card that's mine)?
What difference would it be if I kept a list of all the transactions - including phone numbers? Would be against the DP Act to use such a list as a reference?
Regards, *Nicodemus Nyakundi* Digital Accessibility for PWDs *KICTANet* <https://www.kictanet.or.ke/>
KICTANet.or.ke <https://kictanet.or.ke/> | LinkedIn <https://www.linkedin.com/in/nicodemus-nyakundi-68a9a587/recent-activity/all/> | X <https://x.com/NicNyakundi> | Facebook <https://www.facebook.com/KICTANet/> | Instagram <https://www.instagram.com/kictanet/> | Youtube <https://www.youtube.com/channel/UCbcLVjnPtTGBEeYLGUb2Yow/videos> | TikTok <https://www.tiktok.com/@kictanet> | WhatsApp <https://whatsapp.com/channel/0029VaQsX4w6mYPIctLsGh1K>.
On Thu, 5 Sep 2024, 14:57 Ochieng A. Ogango via KICTANet, < kictanet@lists.kictanet.or.ke> wrote:
Cephas,
Why is it that Safaricom masks numbers on the statement, yet that information comes back to the account owner when you send money.
Why do I need a court order to get information that I already have?
*Kind regards,*
*Ochieng A. Ogango*
*Advocate, LLB (Hons), CPM(M.T.I)*
On Thu, Sep 5, 2024 at 1:38 PM Cephas Joseph via KICTANet < kictanet@lists.kictanet.or.ke> wrote:
Liz,
Kenya it is, but (un)fortunately Kenya also has that standard process of Police/DCI -> Court -> Safaricom for data access. Safaricom is a data custodian hence has obligations and accountability for any persons data, (illicit) beneficiary and owner too.
Two scenarios::
1. Full transparency by Saf to the owner, with the risk of exposure for (illicit) beneficiaries. Take a case where, even innocently, one accesses the unique MPESA statement code sent via SMS and authN to your statement. With numbers in plain text, what can they do?
2. With current masking, protecting beneficiaries numbers, when one accesses the unique MPESA statement code sent via SMS and authN to your statement, the masked numbers aren't useful for them. This covers both beneficiary privacy and assures Saf accountability.
Unfortunately, Safaricom would not place the privacy burden on the customer. DPA laws shift this labor to the org, aye? The criminals are also Saf's customers, you know!
I suppose visiting an official Saf Shop, for a thorough verification of customer ID, then being issued with the specific, limited data (cell nos.) needed might be a way? Or adopt a technical means, coded MPESA statement in app, with strignest security/privacy controls (TBD)?
On Thu, Sep 5, 2024 at 1:04 PM Wilfred Omondi via KICTANet < kictanet@lists.kictanet.or.ke> wrote:
Hi Liz,
From experience, once such a case is reported to a police station, the OCS/Deputy OCS should assign a DCI officer to investigate. The DCI officer should ask the court for a warrant/court order so that he/she can present to Safaricom for cooperation during the investigation.
If you don't get such a help from the police station, you can also go directly to the DCI office in Kiambu and an investigating officer should be able to help.
All the best.
On Thu, 5 Sept 2024, 10:38 Liz Orembo via KICTANet, < kictanet@lists.kictanet.or.ke> wrote:
> > Dear listers, > > See this case in twitter. A lady was carjacked, her phone stolen and > mpesa transferred to other numbers by thieves. Safaricom does not want to > reveal the beneficiary numbers for the criminal transactions to the > registered line owner. This is despite them going to Safaricom with an OB > number. > https://x.com/herine_lando/status/1831366028443709797?s=46 > > Question: > > 1. Is Safaricom justified to use data protection for its reason to > decline request for information? What’s the real intention of the DPA? > > 2. Where are consumer and data protection rights on the side of the > line owner? Esp where data protection policy is in conflict with consumer > interests? > > 3. The line infrastructure belongs to Safaricom, but who does the > transaction data belong to? And how do they share the responsibilities to > protect the data? > > 4. Are there laws to solve this situation in the interest of the > customer? Do we need to amend some? > > Best regards. > Liz. > > PGP ID: 0x1F3488BF > _______________________________________________ > KICTANet mailing list -- kictanet@lists.kictanet.or.ke > To unsubscribe send an email to kictanet-leave@lists.kictanet.or.ke > Unsubscribe or change your options at: > https://mm3-lists.kictanet.or.ke/mm/lists/kictanet.lists. > kictanet.or.ke/ > > Mailing List Posts Online: https://posts.kictanet.or.ke/ > > Twitter: https://twitter.com/KICTANet/ > Facebook: https://www.facebook.com/KICTANet/ > Instagram: https://www.instagram.com/KICTANet/ > LinkedIn: https://www.linkedin.com/company/kictanet/ > YouTube: https://www.youtube.com/channel/UCbcLVjnPtTGBEeYLGUb2Yow/ > WhatsApp Channel: https://whatsapp.com/channel/ > 0029VaQsX4w6mYPIctLsGh1K > > KICTANet is a multi-stakeholder Think Tank for people and > institutions interested and involved in ICT policy and regulation. > KICTANet is a catalyst for reform in the Information and > Communication Technology sector. Its work is guided by four pillars > of Policy Advocacy, Capacity Building, Research, and Stakeholder > Engagement. > > KICTANetiquette : Adhere to the same standards of acceptable > behaviors online that you follow in real life: respect people's > times and bandwidth, share knowledge, don't flame or abuse or > personalize, respect privacy, do not spam, do not market your > wares or qualifications. > > PRIVACY POLICY: See https://mm3-lists.kictanet.or. > ke/mm/lists/kictanet.lists.kictanet.or.ke/ > > KICTANet - The Power of Communities, is Kenya's premier ICT policy > engagement platform. > _______________________________________________ KICTANet mailing list -- kictanet@lists.kictanet.or.ke To unsubscribe send an email to kictanet-leave@lists.kictanet.or.ke Unsubscribe or change your options at: https://mm3-lists.kictanet.or. ke/mm/lists/kictanet.lists.kictanet.or.ke/
Mailing List Posts Online: https://posts.kictanet.or.ke/
Twitter: https://twitter.com/KICTANet/ Facebook: https://www.facebook.com/KICTANet/ Instagram: https://www.instagram.com/KICTANet/ LinkedIn: https://www.linkedin.com/company/kictanet/ YouTube: https://www.youtube.com/channel/UCbcLVjnPtTGBEeYLGUb2Yow/ WhatsApp Channel: https://whatsapp.com/channel/ 0029VaQsX4w6mYPIctLsGh1K
KICTANet is a multi-stakeholder Think Tank for people and institutions interested and involved in ICT policy and regulation. KICTANet is a catalyst for reform in the Information and Communication Technology sector. Its work is guided by four pillars of Policy Advocacy, Capacity Building, Research, and Stakeholder Engagement.
KICTANetiquette : Adhere to the same standards of acceptable behaviors online that you follow in real life: respect people's times and bandwidth, share knowledge, don't flame or abuse or personalize, respect privacy, do not spam, do not market your wares or qualifications.
PRIVACY POLICY: See https://mm3-lists.kictanet.or. ke/mm/lists/kictanet.lists.kictanet.or.ke/
KICTANet - The Power of Communities, is Kenya's premier ICT policy engagement platform.
--
--- *Cephas O.M *
_______________________________________________ KICTANet mailing list -- kictanet@lists.kictanet.or.ke To unsubscribe send an email to kictanet-leave@lists.kictanet.or.ke Unsubscribe or change your options at: https://mm3-lists.kictanet.or. ke/mm/lists/kictanet.lists.kictanet.or.ke/
Mailing List Posts Online: https://posts.kictanet.or.ke/
Twitter: https://twitter.com/KICTANet/ Facebook: https://www.facebook.com/KICTANet/ Instagram: https://www.instagram.com/KICTANet/ LinkedIn: https://www.linkedin.com/company/kictanet/ YouTube: https://www.youtube.com/channel/UCbcLVjnPtTGBEeYLGUb2Yow/ WhatsApp Channel: https://whatsapp.com/channel/ 0029VaQsX4w6mYPIctLsGh1K
KICTANet is a multi-stakeholder Think Tank for people and institutions interested and involved in ICT policy and regulation. KICTANet is a catalyst for reform in the Information and Communication Technology sector. Its work is guided by four pillars of Policy Advocacy, Capacity Building, Research, and Stakeholder Engagement.
KICTANetiquette : Adhere to the same standards of acceptable behaviors online that you follow in real life: respect people's times and bandwidth, share knowledge, don't flame or abuse or personalize, respect privacy, do not spam, do not market your wares or qualifications.
PRIVACY POLICY: See https://mm3-lists.kictanet.or. ke/mm/lists/kictanet.lists.kictanet.or.ke/
KICTANet - The Power of Communities, is Kenya's premier ICT policy engagement platform.
_______________________________________________ KICTANet mailing list -- kictanet@lists.kictanet.or.ke To unsubscribe send an email to kictanet-leave@lists.kictanet.or.ke Unsubscribe or change your options at: https://mm3-lists.kictanet.or. ke/mm/lists/kictanet.lists.kictanet.or.ke/
Mailing List Posts Online: https://posts.kictanet.or.ke/
Twitter: https://twitter.com/KICTANet/ Facebook: https://www.facebook.com/KICTANet/ Instagram: https://www.instagram.com/KICTANet/ LinkedIn: https://www.linkedin.com/company/kictanet/ YouTube: https://www.youtube.com/channel/UCbcLVjnPtTGBEeYLGUb2Yow/ WhatsApp Channel: https://whatsapp.com/channel/0029VaQsX4w6mYPIctLsGh1K
KICTANet is a multi-stakeholder Think Tank for people and institutions interested and involved in ICT policy and regulation. KICTANet is a catalyst for reform in the Information and Communication Technology sector. Its work is guided by four pillars of Policy Advocacy, Capacity Building, Research, and Stakeholder Engagement.
KICTANetiquette : Adhere to the same standards of acceptable behaviors online that you follow in real life: respect people's times and bandwidth, share knowledge, don't flame or abuse or personalize, respect privacy, do not spam, do not market your wares or qualifications.
PRIVACY POLICY: See https://mm3-lists.kictanet.or. ke/mm/lists/kictanet.lists.kictanet.or.ke/
KICTANet - The Power of Communities, is Kenya's premier ICT policy engagement platform.
_______________________________________________ KICTANet mailing list -- kictanet@lists.kictanet.or.ke To unsubscribe send an email to kictanet-leave@lists.kictanet.or.ke Unsubscribe or change your options at: https://mm3-lists.kictanet.or. ke/mm/lists/kictanet.lists.kictanet.or.ke/
Mailing List Posts Online: https://posts.kictanet.or.ke/
Twitter: https://twitter.com/KICTANet/ Facebook: https://www.facebook.com/KICTANet/ Instagram: https://www.instagram.com/KICTANet/ LinkedIn: https://www.linkedin.com/company/kictanet/ YouTube: https://www.youtube.com/channel/UCbcLVjnPtTGBEeYLGUb2Yow/ WhatsApp Channel: https://whatsapp.com/channel/0029VaQsX4w6mYPIctLsGh1K
KICTANet is a multi-stakeholder Think Tank for people and institutions interested and involved in ICT policy and regulation. KICTANet is a catalyst for reform in the Information and Communication Technology sector. Its work is guided by four pillars of Policy Advocacy, Capacity Building, Research, and Stakeholder Engagement.
KICTANetiquette : Adhere to the same standards of acceptable behaviors online that you follow in real life: respect people's times and bandwidth, share knowledge, don't flame or abuse or personalize, respect privacy, do not spam, do not market your wares or qualifications.
PRIVACY POLICY: See https://mm3-lists.kictanet.or. ke/mm/lists/kictanet.lists.kictanet.or.ke/
KICTANet - The Power of Communities, is Kenya's premier ICT policy engagement platform.
_______________________________________________ KICTANet mailing list -- kictanet@lists.kictanet.or.ke To unsubscribe send an email to kictanet-leave@lists.kictanet.or.ke Unsubscribe or change your options at: https://mm3-lists.kictanet.or. ke/mm/lists/kictanet.lists.kictanet.or.ke/
Mailing List Posts Online: https://posts.kictanet.or.ke/
Twitter: https://twitter.com/KICTANet/ Facebook: https://www.facebook.com/KICTANet/ Instagram: https://www.instagram.com/KICTANet/ LinkedIn: https://www.linkedin.com/company/kictanet/ YouTube: https://www.youtube.com/channel/UCbcLVjnPtTGBEeYLGUb2Yow/ WhatsApp Channel: https://whatsapp.com/channel/0029VaQsX4w6mYPIctLsGh1K
KICTANet is a multi-stakeholder Think Tank for people and institutions interested and involved in ICT policy and regulation. KICTANet is a catalyst for reform in the Information and Communication Technology sector. Its work is guided by four pillars of Policy Advocacy, Capacity Building, Research, and Stakeholder Engagement.
KICTANetiquette : Adhere to the same standards of acceptable behaviors online that you follow in real life: respect people's times and bandwidth, share knowledge, don't flame or abuse or personalize, respect privacy, do not spam, do not market your wares or qualifications.
PRIVACY POLICY: See https://mm3-lists.kictanet.or. ke/mm/lists/kictanet.lists.kictanet.or.ke/
KICTANet - The Power of Communities, is Kenya's premier ICT policy engagement platform.
-- Grace Mutung'u Skype: gracebomu @Bomu PGP ID : 807F57ACF469B0BB