Conflict on Personal Data Protection
Dear listers, See this case in twitter. A lady was carjacked, her phone stolen and mpesa transferred to other numbers by thieves. Safaricom does not want to reveal the beneficiary numbers for the criminal transactions to the registered line owner. This is despite them going to Safaricom with an OB number. https://x.com/herine_lando/status/1831366028443709797?s=46 Question: 1. Is Safaricom justified to use data protection for its reason to decline request for information? What’s the real intention of the DPA? 2. Where are consumer and data protection rights on the side of the line owner? Esp where data protection policy is in conflict with consumer interests? 3. The line infrastructure belongs to Safaricom, but who does the transaction data belong to? And how do they share the responsibilities to protect the data? 4. Are there laws to solve this situation in the interest of the customer? Do we need to amend some? Best regards. Liz. PGP ID: 0x1F3488BF
@Liz Orembo <lizorembo@kictanet.or.ke> I thought this is the work of DCI as this is a criminal matter? An OB number is insufficient to compel the MNO to provide the statement. A court order may be required. Also, I think one can easily access their statements online, which I doubt would be tampered with. But this is interesting. Waiting to hear what listers think and suggest. Thanks. On Thu, Sep 5, 2024 at 10:39 AM Liz Orembo via KICTANet < kictanet@lists.kictanet.or.ke> wrote:
Dear listers,
See this case in twitter. A lady was carjacked, her phone stolen and mpesa transferred to other numbers by thieves. Safaricom does not want to reveal the beneficiary numbers for the criminal transactions to the registered line owner. This is despite them going to Safaricom with an OB number. https://x.com/herine_lando/status/1831366028443709797?s=46
Question:
1. Is Safaricom justified to use data protection for its reason to decline request for information? What’s the real intention of the DPA?
2. Where are consumer and data protection rights on the side of the line owner? Esp where data protection policy is in conflict with consumer interests?
3. The line infrastructure belongs to Safaricom, but who does the transaction data belong to? And how do they share the responsibilities to protect the data?
4. Are there laws to solve this situation in the interest of the customer? Do we need to amend some?
Best regards. Liz.
PGP ID: 0x1F3488BF _______________________________________________ KICTANet mailing list -- kictanet@lists.kictanet.or.ke To unsubscribe send an email to kictanet-leave@lists.kictanet.or.ke Unsubscribe or change your options at: https://mm3-lists.kictanet.or.ke/mm/lists/kictanet.lists.kictanet.or.ke/
Mailing List Posts Online: https://posts.kictanet.or.ke/
Twitter: https://twitter.com/KICTANet/ Facebook: https://www.facebook.com/KICTANet/ Instagram: https://www.instagram.com/KICTANet/ LinkedIn: https://www.linkedin.com/company/kictanet/ YouTube: https://www.youtube.com/channel/UCbcLVjnPtTGBEeYLGUb2Yow/ WhatsApp Channel: https://whatsapp.com/channel/0029VaQsX4w6mYPIctLsGh1K
KICTANet is a multi-stakeholder Think Tank for people and institutions interested and involved in ICT policy and regulation. KICTANet is a catalyst for reform in the Information and Communication Technology sector. Its work is guided by four pillars of Policy Advocacy, Capacity Building, Research, and Stakeholder Engagement.
KICTANetiquette : Adhere to the same standards of acceptable behaviors online that you follow in real life: respect people's times and bandwidth, share knowledge, don't flame or abuse or personalize, respect privacy, do not spam, do not market your wares or qualifications.
PRIVACY POLICY: See https://mm3-lists.kictanet.or.ke/mm/lists/kictanet.lists.kictanet.or.ke/
KICTANet - The Power of Communities, is Kenya's premier ICT policy engagement platform.
-- Kind regards, Dr. Grace Githaiga*,* CEO@*KICTANet* <https://www.kictanet.or.ke/> @ggithaiga <http://twitter.com/ggithaiga> | LinkedIn <https://www.linkedin.com/in/gracegithaiga/> ___________________________ KICTANet.or.ke <https://kictanet.or.ke/> | Twitter <https://twitter.com/kictanet> | LinkedIn <https://www.linkedin.com/company/kictanet/> | Facebook <https://www.facebook.com/KICTANet/> | Instagram <https://www.instagram.com/kictanet/> | Youtube <https://www.youtube.com/channel/UCbcLVjnPtTGBEeYLGUb2Yow/videos> | TikTok <https://www.tiktok.com/@kictanet> KICTANet: *Transformed communities through the power of ICTs*
On Thu, Sep 5, 2024 at 10:39 AM Liz Orembo via KICTANet < kictanet@lists.kictanet.or.ke> wrote:
Dear listers,
See this case in twitter. A lady was carjacked, her phone stolen and mpesa transferred to other numbers by thieves. Safaricom does not want to reveal the beneficiary numbers for the criminal transactions to the registered line owner. This is despite them going to Safaricom with an OB number. https://x.com/herine_lando/status/1831366028443709797?s=46
I am not too conversant with the DP Act, but as long as the lady still has the number, she can use a USSD option to obtain the M-Pesa statement sent directly to her email by the system. But then what does she do with it after finding who her money was sent to? DCI. The DCI are the ones who will handle that case - which to me is a robbery with violence case. -- Best regards, Odhiambo WASHINGTON, Nairobi,KE +254 7 3200 0004/+254 7 2274 3223 In an Internet failure case, the #1 suspect is a constant: DNS. "Oh, the cruft.", egrep -v '^$|^.*#' ¯\_(ツ)_/¯ :-) [How to ask smart questions: http://www.catb.org/~esr/faqs/smart-questions.html]
Liz, 1. All phone numbers in an MPESA statement have six digits masked, for obvious reasons; if the statement is accessed illicitly, the individual unique numbers can not be determined. 2. There is both security and privacy justification for this. BUt also business case, including liability 3. The DCI can via a court order get access to the said phone numbers as part of investigation, the OB is only a record of the incident with police. Imagine a scenario where wakora wa Nairobi, grab you and transfer money to a number(s) linked to a terrorist cell, the ATU will seek/find you as the owner without having to get an OB no. - but this is their job! On Thu, Sep 5, 2024 at 11:40 AM Odhiambo Washington via KICTANet < kictanet@lists.kictanet.or.ke> wrote:
On Thu, Sep 5, 2024 at 10:39 AM Liz Orembo via KICTANet < kictanet@lists.kictanet.or.ke> wrote:
Dear listers,
See this case in twitter. A lady was carjacked, her phone stolen and mpesa transferred to other numbers by thieves. Safaricom does not want to reveal the beneficiary numbers for the criminal transactions to the registered line owner. This is despite them going to Safaricom with an OB number. https://x.com/herine_lando/status/1831366028443709797?s=46
I am not too conversant with the DP Act, but as long as the lady still has the number, she can use a USSD option to obtain the M-Pesa statement sent directly to her email by the system. But then what does she do with it after finding who her money was sent to? DCI. The DCI are the ones who will handle that case - which to me is a robbery with violence case.
-- Best regards, Odhiambo WASHINGTON, Nairobi,KE +254 7 3200 0004/+254 7 2274 3223 In an Internet failure case, the #1 suspect is a constant: DNS. "Oh, the cruft.", egrep -v '^$|^.*#' ¯\_(ツ)_/¯ :-) [How to ask smart questions: http://www.catb.org/~esr/faqs/smart-questions.html] _______________________________________________ KICTANet mailing list -- kictanet@lists.kictanet.or.ke To unsubscribe send an email to kictanet-leave@lists.kictanet.or.ke Unsubscribe or change your options at: https://mm3-lists.kictanet.or.ke/mm/lists/kictanet.lists.kictanet.or.ke/
Mailing List Posts Online: https://posts.kictanet.or.ke/
Twitter: https://twitter.com/KICTANet/ Facebook: https://www.facebook.com/KICTANet/ Instagram: https://www.instagram.com/KICTANet/ LinkedIn: https://www.linkedin.com/company/kictanet/ YouTube: https://www.youtube.com/channel/UCbcLVjnPtTGBEeYLGUb2Yow/ WhatsApp Channel: https://whatsapp.com/channel/0029VaQsX4w6mYPIctLsGh1K
KICTANet is a multi-stakeholder Think Tank for people and institutions interested and involved in ICT policy and regulation. KICTANet is a catalyst for reform in the Information and Communication Technology sector. Its work is guided by four pillars of Policy Advocacy, Capacity Building, Research, and Stakeholder Engagement.
KICTANetiquette : Adhere to the same standards of acceptable behaviors online that you follow in real life: respect people's times and bandwidth, share knowledge, don't flame or abuse or personalize, respect privacy, do not spam, do not market your wares or qualifications.
PRIVACY POLICY: See https://mm3-lists.kictanet.or.ke/mm/lists/kictanet.lists.kictanet.or.ke/
KICTANet - The Power of Communities, is Kenya's premier ICT policy engagement platform.
-- --- *Cephas O.M *
Guys I get it. And I am guessing the case here is that Safcom shared the statement, but protected personal details in the transactions. Where my point of confusion is, where are the lines drawn on ownership and responsibility for the transaction data. Remember that this data being transacted is about the client's money. Are they protecting the data because of the rights of the beneficiary of the funds? Or should they exercise transparency for the rights of the owner of the funds? The other questions about the investigative gaps between the DCI and Safaricom is, where are consumer rights here? You know this is Kenya. You report a case, get an OB, but it ends there? Who is responsible to follow up on action? Customer, DCI, Safaricom? *I was in another complicated situation two weeks ago, where my device was stolen and had data of its movement. A case of burglary where the cop were not interested in taking up. Was later told that its because I was not speaking their language.* On Thu, Sep 5, 2024 at 12:44 PM Cephas Joseph via KICTANet < kictanet@lists.kictanet.or.ke> wrote:
Liz,
1. All phone numbers in an MPESA statement have six digits masked, for obvious reasons; if the statement is accessed illicitly, the individual unique numbers can not be determined. 2. There is both security and privacy justification for this. BUt also business case, including liability 3. The DCI can via a court order get access to the said phone numbers as part of investigation, the OB is only a record of the incident with police.
Imagine a scenario where wakora wa Nairobi, grab you and transfer money to a number(s) linked to a terrorist cell, the ATU will seek/find you as the owner without having to get an OB no. - but this is their job!
On Thu, Sep 5, 2024 at 11:40 AM Odhiambo Washington via KICTANet < kictanet@lists.kictanet.or.ke> wrote:
On Thu, Sep 5, 2024 at 10:39 AM Liz Orembo via KICTANet < kictanet@lists.kictanet.or.ke> wrote:
Dear listers,
See this case in twitter. A lady was carjacked, her phone stolen and mpesa transferred to other numbers by thieves. Safaricom does not want to reveal the beneficiary numbers for the criminal transactions to the registered line owner. This is despite them going to Safaricom with an OB number. https://x.com/herine_lando/status/1831366028443709797?s=46
I am not too conversant with the DP Act, but as long as the lady still has the number, she can use a USSD option to obtain the M-Pesa statement sent directly to her email by the system. But then what does she do with it after finding who her money was sent to? DCI. The DCI are the ones who will handle that case - which to me is a robbery with violence case.
-- Best regards, Odhiambo WASHINGTON, Nairobi,KE +254 7 3200 0004/+254 7 2274 3223 In an Internet failure case, the #1 suspect is a constant: DNS. "Oh, the cruft.", egrep -v '^$|^.*#' ¯\_(ツ)_/¯ :-) [How to ask smart questions: http://www.catb.org/~esr/faqs/smart-questions.html] _______________________________________________ KICTANet mailing list -- kictanet@lists.kictanet.or.ke To unsubscribe send an email to kictanet-leave@lists.kictanet.or.ke Unsubscribe or change your options at: https://mm3-lists.kictanet.or.ke/mm/lists/kictanet.lists.kictanet.or.ke/
Mailing List Posts Online: https://posts.kictanet.or.ke/
Twitter: https://twitter.com/KICTANet/ Facebook: https://www.facebook.com/KICTANet/ Instagram: https://www.instagram.com/KICTANet/ LinkedIn: https://www.linkedin.com/company/kictanet/ YouTube: https://www.youtube.com/channel/UCbcLVjnPtTGBEeYLGUb2Yow/ WhatsApp Channel: https://whatsapp.com/channel/0029VaQsX4w6mYPIctLsGh1K
KICTANet is a multi-stakeholder Think Tank for people and institutions interested and involved in ICT policy and regulation. KICTANet is a catalyst for reform in the Information and Communication Technology sector. Its work is guided by four pillars of Policy Advocacy, Capacity Building, Research, and Stakeholder Engagement.
KICTANetiquette : Adhere to the same standards of acceptable behaviors online that you follow in real life: respect people's times and bandwidth, share knowledge, don't flame or abuse or personalize, respect privacy, do not spam, do not market your wares or qualifications.
PRIVACY POLICY: See https://mm3-lists.kictanet.or.ke/mm/lists/kictanet.lists.kictanet.or.ke/
KICTANet - The Power of Communities, is Kenya's premier ICT policy engagement platform.
--
--- *Cephas O.M *
_______________________________________________ KICTANet mailing list -- kictanet@lists.kictanet.or.ke To unsubscribe send an email to kictanet-leave@lists.kictanet.or.ke Unsubscribe or change your options at: https://mm3-lists.kictanet.or.ke/mm/lists/kictanet.lists.kictanet.or.ke/
Mailing List Posts Online: https://posts.kictanet.or.ke/
Twitter: https://twitter.com/KICTANet/ Facebook: https://www.facebook.com/KICTANet/ Instagram: https://www.instagram.com/KICTANet/ LinkedIn: https://www.linkedin.com/company/kictanet/ YouTube: https://www.youtube.com/channel/UCbcLVjnPtTGBEeYLGUb2Yow/ WhatsApp Channel: https://whatsapp.com/channel/0029VaQsX4w6mYPIctLsGh1K
KICTANet is a multi-stakeholder Think Tank for people and institutions interested and involved in ICT policy and regulation. KICTANet is a catalyst for reform in the Information and Communication Technology sector. Its work is guided by four pillars of Policy Advocacy, Capacity Building, Research, and Stakeholder Engagement.
KICTANetiquette : Adhere to the same standards of acceptable behaviors online that you follow in real life: respect people's times and bandwidth, share knowledge, don't flame or abuse or personalize, respect privacy, do not spam, do not market your wares or qualifications.
PRIVACY POLICY: See https://mm3-lists.kictanet.or.ke/mm/lists/kictanet.lists.kictanet.or.ke/
KICTANet - The Power of Communities, is Kenya's premier ICT policy engagement platform.
-- Best regards. Liz. PGP ID: 0x1F3488BF
Hi Liz, From experience, once such a case is reported to a police station, the OCS/Deputy OCS should assign a DCI officer to investigate. The DCI officer should ask the court for a warrant/court order so that he/she can present to Safaricom for cooperation during the investigation. If you don't get such a help from the police station, you can also go directly to the DCI office in Kiambu and an investigating officer should be able to help. All the best. On Thu, 5 Sept 2024, 10:38 Liz Orembo via KICTANet, < kictanet@lists.kictanet.or.ke> wrote:
Dear listers,
See this case in twitter. A lady was carjacked, her phone stolen and mpesa transferred to other numbers by thieves. Safaricom does not want to reveal the beneficiary numbers for the criminal transactions to the registered line owner. This is despite them going to Safaricom with an OB number. https://x.com/herine_lando/status/1831366028443709797?s=46
Question:
1. Is Safaricom justified to use data protection for its reason to decline request for information? What’s the real intention of the DPA?
2. Where are consumer and data protection rights on the side of the line owner? Esp where data protection policy is in conflict with consumer interests?
3. The line infrastructure belongs to Safaricom, but who does the transaction data belong to? And how do they share the responsibilities to protect the data?
4. Are there laws to solve this situation in the interest of the customer? Do we need to amend some?
Best regards. Liz.
PGP ID: 0x1F3488BF _______________________________________________ KICTANet mailing list -- kictanet@lists.kictanet.or.ke To unsubscribe send an email to kictanet-leave@lists.kictanet.or.ke Unsubscribe or change your options at: https://mm3-lists.kictanet.or.ke/mm/lists/kictanet.lists.kictanet.or.ke/
Mailing List Posts Online: https://posts.kictanet.or.ke/
Twitter: https://twitter.com/KICTANet/ Facebook: https://www.facebook.com/KICTANet/ Instagram: https://www.instagram.com/KICTANet/ LinkedIn: https://www.linkedin.com/company/kictanet/ YouTube: https://www.youtube.com/channel/UCbcLVjnPtTGBEeYLGUb2Yow/ WhatsApp Channel: https://whatsapp.com/channel/0029VaQsX4w6mYPIctLsGh1K
KICTANet is a multi-stakeholder Think Tank for people and institutions interested and involved in ICT policy and regulation. KICTANet is a catalyst for reform in the Information and Communication Technology sector. Its work is guided by four pillars of Policy Advocacy, Capacity Building, Research, and Stakeholder Engagement.
KICTANetiquette : Adhere to the same standards of acceptable behaviors online that you follow in real life: respect people's times and bandwidth, share knowledge, don't flame or abuse or personalize, respect privacy, do not spam, do not market your wares or qualifications.
PRIVACY POLICY: See https://mm3-lists.kictanet.or.ke/mm/lists/kictanet.lists.kictanet.or.ke/
KICTANet - The Power of Communities, is Kenya's premier ICT policy engagement platform.
On Thu, Sep 5, 2024 at 1:03 PM Wilfred Omondi via KICTANet < kictanet@lists.kictanet.or.ke> wrote:
Hi Liz,
From experience, once such a case is reported to a police station, the OCS/Deputy OCS should assign a DCI officer to investigate. The DCI officer should ask the court for a warrant/court order so that he/she can present to Safaricom for cooperation during the investigation.
If you don't get such a help from the police station, you can also go directly to the DCI office in Kiambu and an investigating officer should be able to help.
You can go to the DCI office nearest to you. Not necessarily the HQ. -- Best regards, Odhiambo WASHINGTON, Nairobi,KE +254 7 3200 0004/+254 7 2274 3223 In an Internet failure case, the #1 suspect is a constant: DNS. "Oh, the cruft.", egrep -v '^$|^.*#' ¯\_(ツ)_/¯ :-) [How to ask smart questions: http://www.catb.org/~esr/faqs/smart-questions.html]
The best thing to do in such a synario is to report the nearest police station immediately which the lady did. On Thu, Sep 5, 2024, 1:10 PM Odhiambo Washington via KICTANet < kictanet@lists.kictanet.or.ke> wrote:
On Thu, Sep 5, 2024 at 1:03 PM Wilfred Omondi via KICTANet < kictanet@lists.kictanet.or.ke> wrote:
Hi Liz,
From experience, once such a case is reported to a police station, the OCS/Deputy OCS should assign a DCI officer to investigate. The DCI officer should ask the court for a warrant/court order so that he/she can present to Safaricom for cooperation during the investigation.
If you don't get such a help from the police station, you can also go directly to the DCI office in Kiambu and an investigating officer should be able to help.
You can go to the DCI office nearest to you. Not necessarily the HQ.
-- Best regards, Odhiambo WASHINGTON, Nairobi,KE +254 7 3200 0004/+254 7 2274 3223 In an Internet failure case, the #1 suspect is a constant: DNS. "Oh, the cruft.", egrep -v '^$|^.*#' ¯\_(ツ)_/¯ :-) [How to ask smart questions: http://www.catb.org/~esr/faqs/smart-questions.html] _______________________________________________ KICTANet mailing list -- kictanet@lists.kictanet.or.ke To unsubscribe send an email to kictanet-leave@lists.kictanet.or.ke Unsubscribe or change your options at: https://mm3-lists.kictanet.or.ke/mm/lists/kictanet.lists.kictanet.or.ke/
Mailing List Posts Online: https://posts.kictanet.or.ke/
Twitter: https://twitter.com/KICTANet/ Facebook: https://www.facebook.com/KICTANet/ Instagram: https://www.instagram.com/KICTANet/ LinkedIn: https://www.linkedin.com/company/kictanet/ YouTube: https://www.youtube.com/channel/UCbcLVjnPtTGBEeYLGUb2Yow/ WhatsApp Channel: https://whatsapp.com/channel/0029VaQsX4w6mYPIctLsGh1K
KICTANet is a multi-stakeholder Think Tank for people and institutions interested and involved in ICT policy and regulation. KICTANet is a catalyst for reform in the Information and Communication Technology sector. Its work is guided by four pillars of Policy Advocacy, Capacity Building, Research, and Stakeholder Engagement.
KICTANetiquette : Adhere to the same standards of acceptable behaviors online that you follow in real life: respect people's times and bandwidth, share knowledge, don't flame or abuse or personalize, respect privacy, do not spam, do not market your wares or qualifications.
PRIVACY POLICY: See https://mm3-lists.kictanet.or.ke/mm/lists/kictanet.lists.kictanet.or.ke/
KICTANet - The Power of Communities, is Kenya's premier ICT policy engagement platform.
Liz, Kenya it is, but (un)fortunately Kenya also has that standard process of Police/DCI -> Court -> Safaricom for data access. Safaricom is a data custodian hence has obligations and accountability for any persons data, (illicit) beneficiary and owner too. Two scenarios:: 1. Full transparency by Saf to the owner, with the risk of exposure for (illicit) beneficiaries. Take a case where, even innocently, one accesses the unique MPESA statement code sent via SMS and authN to your statement. With numbers in plain text, what can they do? 2. With current masking, protecting beneficiaries numbers, when one accesses the unique MPESA statement code sent via SMS and authN to your statement, the masked numbers aren't useful for them. This covers both beneficiary privacy and assures Saf accountability. Unfortunately, Safaricom would not place the privacy burden on the customer. DPA laws shift this labor to the org, aye? The criminals are also Saf's customers, you know! I suppose visiting an official Saf Shop, for a thorough verification of customer ID, then being issued with the specific, limited data (cell nos.) needed might be a way? Or adopt a technical means, coded MPESA statement in app, with strignest security/privacy controls (TBD)? On Thu, Sep 5, 2024 at 1:04 PM Wilfred Omondi via KICTANet < kictanet@lists.kictanet.or.ke> wrote:
Hi Liz,
From experience, once such a case is reported to a police station, the OCS/Deputy OCS should assign a DCI officer to investigate. The DCI officer should ask the court for a warrant/court order so that he/she can present to Safaricom for cooperation during the investigation.
If you don't get such a help from the police station, you can also go directly to the DCI office in Kiambu and an investigating officer should be able to help.
All the best.
On Thu, 5 Sept 2024, 10:38 Liz Orembo via KICTANet, < kictanet@lists.kictanet.or.ke> wrote:
Dear listers,
See this case in twitter. A lady was carjacked, her phone stolen and mpesa transferred to other numbers by thieves. Safaricom does not want to reveal the beneficiary numbers for the criminal transactions to the registered line owner. This is despite them going to Safaricom with an OB number. https://x.com/herine_lando/status/1831366028443709797?s=46
Question:
1. Is Safaricom justified to use data protection for its reason to decline request for information? What’s the real intention of the DPA?
2. Where are consumer and data protection rights on the side of the line owner? Esp where data protection policy is in conflict with consumer interests?
3. The line infrastructure belongs to Safaricom, but who does the transaction data belong to? And how do they share the responsibilities to protect the data?
4. Are there laws to solve this situation in the interest of the customer? Do we need to amend some?
Best regards. Liz.
PGP ID: 0x1F3488BF _______________________________________________ KICTANet mailing list -- kictanet@lists.kictanet.or.ke To unsubscribe send an email to kictanet-leave@lists.kictanet.or.ke Unsubscribe or change your options at: https://mm3-lists.kictanet.or.ke/mm/lists/kictanet.lists.kictanet.or.ke/
Mailing List Posts Online: https://posts.kictanet.or.ke/
Twitter: https://twitter.com/KICTANet/ Facebook: https://www.facebook.com/KICTANet/ Instagram: https://www.instagram.com/KICTANet/ LinkedIn: https://www.linkedin.com/company/kictanet/ YouTube: https://www.youtube.com/channel/UCbcLVjnPtTGBEeYLGUb2Yow/ WhatsApp Channel: https://whatsapp.com/channel/0029VaQsX4w6mYPIctLsGh1K
KICTANet is a multi-stakeholder Think Tank for people and institutions interested and involved in ICT policy and regulation. KICTANet is a catalyst for reform in the Information and Communication Technology sector. Its work is guided by four pillars of Policy Advocacy, Capacity Building, Research, and Stakeholder Engagement.
KICTANetiquette : Adhere to the same standards of acceptable behaviors online that you follow in real life: respect people's times and bandwidth, share knowledge, don't flame or abuse or personalize, respect privacy, do not spam, do not market your wares or qualifications.
PRIVACY POLICY: See https://mm3-lists.kictanet.or.ke/mm/lists/kictanet.lists.kictanet.or.ke/
KICTANet - The Power of Communities, is Kenya's premier ICT policy engagement platform.
_______________________________________________ KICTANet mailing list -- kictanet@lists.kictanet.or.ke To unsubscribe send an email to kictanet-leave@lists.kictanet.or.ke Unsubscribe or change your options at: https://mm3-lists.kictanet.or.ke/mm/lists/kictanet.lists.kictanet.or.ke/
Mailing List Posts Online: https://posts.kictanet.or.ke/
Twitter: https://twitter.com/KICTANet/ Facebook: https://www.facebook.com/KICTANet/ Instagram: https://www.instagram.com/KICTANet/ LinkedIn: https://www.linkedin.com/company/kictanet/ YouTube: https://www.youtube.com/channel/UCbcLVjnPtTGBEeYLGUb2Yow/ WhatsApp Channel: https://whatsapp.com/channel/0029VaQsX4w6mYPIctLsGh1K
KICTANet is a multi-stakeholder Think Tank for people and institutions interested and involved in ICT policy and regulation. KICTANet is a catalyst for reform in the Information and Communication Technology sector. Its work is guided by four pillars of Policy Advocacy, Capacity Building, Research, and Stakeholder Engagement.
KICTANetiquette : Adhere to the same standards of acceptable behaviors online that you follow in real life: respect people's times and bandwidth, share knowledge, don't flame or abuse or personalize, respect privacy, do not spam, do not market your wares or qualifications.
PRIVACY POLICY: See https://mm3-lists.kictanet.or.ke/mm/lists/kictanet.lists.kictanet.or.ke/
KICTANet - The Power of Communities, is Kenya's premier ICT policy engagement platform.
-- --- *Cephas O.M *
Cephas, Why is it that Safaricom masks numbers on the statement, yet that information comes back to the account owner when you send money. Why do I need a court order to get information that I already have? *Kind regards,* *Ochieng A. Ogango* *Advocate, LLB (Hons), CPM(M.T.I)* On Thu, Sep 5, 2024 at 1:38 PM Cephas Joseph via KICTANet < kictanet@lists.kictanet.or.ke> wrote:
Liz,
Kenya it is, but (un)fortunately Kenya also has that standard process of Police/DCI -> Court -> Safaricom for data access. Safaricom is a data custodian hence has obligations and accountability for any persons data, (illicit) beneficiary and owner too.
Two scenarios::
1. Full transparency by Saf to the owner, with the risk of exposure for (illicit) beneficiaries. Take a case where, even innocently, one accesses the unique MPESA statement code sent via SMS and authN to your statement. With numbers in plain text, what can they do?
2. With current masking, protecting beneficiaries numbers, when one accesses the unique MPESA statement code sent via SMS and authN to your statement, the masked numbers aren't useful for them. This covers both beneficiary privacy and assures Saf accountability.
Unfortunately, Safaricom would not place the privacy burden on the customer. DPA laws shift this labor to the org, aye? The criminals are also Saf's customers, you know!
I suppose visiting an official Saf Shop, for a thorough verification of customer ID, then being issued with the specific, limited data (cell nos.) needed might be a way? Or adopt a technical means, coded MPESA statement in app, with strignest security/privacy controls (TBD)?
On Thu, Sep 5, 2024 at 1:04 PM Wilfred Omondi via KICTANet < kictanet@lists.kictanet.or.ke> wrote:
Hi Liz,
From experience, once such a case is reported to a police station, the OCS/Deputy OCS should assign a DCI officer to investigate. The DCI officer should ask the court for a warrant/court order so that he/she can present to Safaricom for cooperation during the investigation.
If you don't get such a help from the police station, you can also go directly to the DCI office in Kiambu and an investigating officer should be able to help.
All the best.
On Thu, 5 Sept 2024, 10:38 Liz Orembo via KICTANet, < kictanet@lists.kictanet.or.ke> wrote:
Dear listers,
See this case in twitter. A lady was carjacked, her phone stolen and mpesa transferred to other numbers by thieves. Safaricom does not want to reveal the beneficiary numbers for the criminal transactions to the registered line owner. This is despite them going to Safaricom with an OB number. https://x.com/herine_lando/status/1831366028443709797?s=46
Question:
1. Is Safaricom justified to use data protection for its reason to decline request for information? What’s the real intention of the DPA?
2. Where are consumer and data protection rights on the side of the line owner? Esp where data protection policy is in conflict with consumer interests?
3. The line infrastructure belongs to Safaricom, but who does the transaction data belong to? And how do they share the responsibilities to protect the data?
4. Are there laws to solve this situation in the interest of the customer? Do we need to amend some?
Best regards. Liz.
PGP ID: 0x1F3488BF _______________________________________________ KICTANet mailing list -- kictanet@lists.kictanet.or.ke To unsubscribe send an email to kictanet-leave@lists.kictanet.or.ke Unsubscribe or change your options at: https://mm3-lists.kictanet.or.ke/mm/lists/kictanet.lists.kictanet.or.ke/
Mailing List Posts Online: https://posts.kictanet.or.ke/
Twitter: https://twitter.com/KICTANet/ Facebook: https://www.facebook.com/KICTANet/ Instagram: https://www.instagram.com/KICTANet/ LinkedIn: https://www.linkedin.com/company/kictanet/ YouTube: https://www.youtube.com/channel/UCbcLVjnPtTGBEeYLGUb2Yow/ WhatsApp Channel: https://whatsapp.com/channel/0029VaQsX4w6mYPIctLsGh1K
KICTANet is a multi-stakeholder Think Tank for people and institutions interested and involved in ICT policy and regulation. KICTANet is a catalyst for reform in the Information and Communication Technology sector. Its work is guided by four pillars of Policy Advocacy, Capacity Building, Research, and Stakeholder Engagement.
KICTANetiquette : Adhere to the same standards of acceptable behaviors online that you follow in real life: respect people's times and bandwidth, share knowledge, don't flame or abuse or personalize, respect privacy, do not spam, do not market your wares or qualifications.
PRIVACY POLICY: See https://mm3-lists.kictanet.or.ke/mm/lists/kictanet.lists.kictanet.or.ke/
KICTANet - The Power of Communities, is Kenya's premier ICT policy engagement platform.
_______________________________________________ KICTANet mailing list -- kictanet@lists.kictanet.or.ke To unsubscribe send an email to kictanet-leave@lists.kictanet.or.ke Unsubscribe or change your options at: https://mm3-lists.kictanet.or.ke/mm/lists/kictanet.lists.kictanet.or.ke/
Mailing List Posts Online: https://posts.kictanet.or.ke/
Twitter: https://twitter.com/KICTANet/ Facebook: https://www.facebook.com/KICTANet/ Instagram: https://www.instagram.com/KICTANet/ LinkedIn: https://www.linkedin.com/company/kictanet/ YouTube: https://www.youtube.com/channel/UCbcLVjnPtTGBEeYLGUb2Yow/ WhatsApp Channel: https://whatsapp.com/channel/0029VaQsX4w6mYPIctLsGh1K
KICTANet is a multi-stakeholder Think Tank for people and institutions interested and involved in ICT policy and regulation. KICTANet is a catalyst for reform in the Information and Communication Technology sector. Its work is guided by four pillars of Policy Advocacy, Capacity Building, Research, and Stakeholder Engagement.
KICTANetiquette : Adhere to the same standards of acceptable behaviors online that you follow in real life: respect people's times and bandwidth, share knowledge, don't flame or abuse or personalize, respect privacy, do not spam, do not market your wares or qualifications.
PRIVACY POLICY: See https://mm3-lists.kictanet.or.ke/mm/lists/kictanet.lists.kictanet.or.ke/
KICTANet - The Power of Communities, is Kenya's premier ICT policy engagement platform.
--
--- *Cephas O.M *
_______________________________________________ KICTANet mailing list -- kictanet@lists.kictanet.or.ke To unsubscribe send an email to kictanet-leave@lists.kictanet.or.ke Unsubscribe or change your options at: https://mm3-lists.kictanet.or.ke/mm/lists/kictanet.lists.kictanet.or.ke/
Mailing List Posts Online: https://posts.kictanet.or.ke/
Twitter: https://twitter.com/KICTANet/ Facebook: https://www.facebook.com/KICTANet/ Instagram: https://www.instagram.com/KICTANet/ LinkedIn: https://www.linkedin.com/company/kictanet/ YouTube: https://www.youtube.com/channel/UCbcLVjnPtTGBEeYLGUb2Yow/ WhatsApp Channel: https://whatsapp.com/channel/0029VaQsX4w6mYPIctLsGh1K
KICTANet is a multi-stakeholder Think Tank for people and institutions interested and involved in ICT policy and regulation. KICTANet is a catalyst for reform in the Information and Communication Technology sector. Its work is guided by four pillars of Policy Advocacy, Capacity Building, Research, and Stakeholder Engagement.
KICTANetiquette : Adhere to the same standards of acceptable behaviors online that you follow in real life: respect people's times and bandwidth, share knowledge, don't flame or abuse or personalize, respect privacy, do not spam, do not market your wares or qualifications.
PRIVACY POLICY: See https://mm3-lists.kictanet.or.ke/mm/lists/kictanet.lists.kictanet.or.ke/
KICTANet - The Power of Communities, is Kenya's premier ICT policy engagement platform.
Well, in this case she doesn't :) Then there are varieties of access. SMS is user privacy level - direct verification method, under user control (can delete it). MPESA statement is robustly generated from org data stores/records, issued by the org as an official asset (even if you losse the SMS, statement remains), so it will naturally have org measures applied - can't be deleted by the user in the org data store! Even so, open to hearing others thoughts. On Thu, Sep 5, 2024 at 2:57 PM Ochieng A. Ogango <aochieng260@gmail.com> wrote:
Cephas,
Why is it that Safaricom masks numbers on the statement, yet that information comes back to the account owner when you send money.
Why do I need a court order to get information that I already have?
*Kind regards,*
*Ochieng A. Ogango*
*Advocate, LLB (Hons), CPM(M.T.I)*
On Thu, Sep 5, 2024 at 1:38 PM Cephas Joseph via KICTANet < kictanet@lists.kictanet.or.ke> wrote:
Liz,
Kenya it is, but (un)fortunately Kenya also has that standard process of Police/DCI -> Court -> Safaricom for data access. Safaricom is a data custodian hence has obligations and accountability for any persons data, (illicit) beneficiary and owner too.
Two scenarios::
1. Full transparency by Saf to the owner, with the risk of exposure for (illicit) beneficiaries. Take a case where, even innocently, one accesses the unique MPESA statement code sent via SMS and authN to your statement. With numbers in plain text, what can they do?
2. With current masking, protecting beneficiaries numbers, when one accesses the unique MPESA statement code sent via SMS and authN to your statement, the masked numbers aren't useful for them. This covers both beneficiary privacy and assures Saf accountability.
Unfortunately, Safaricom would not place the privacy burden on the customer. DPA laws shift this labor to the org, aye? The criminals are also Saf's customers, you know!
I suppose visiting an official Saf Shop, for a thorough verification of customer ID, then being issued with the specific, limited data (cell nos.) needed might be a way? Or adopt a technical means, coded MPESA statement in app, with strignest security/privacy controls (TBD)?
On Thu, Sep 5, 2024 at 1:04 PM Wilfred Omondi via KICTANet < kictanet@lists.kictanet.or.ke> wrote:
Hi Liz,
From experience, once such a case is reported to a police station, the OCS/Deputy OCS should assign a DCI officer to investigate. The DCI officer should ask the court for a warrant/court order so that he/she can present to Safaricom for cooperation during the investigation.
If you don't get such a help from the police station, you can also go directly to the DCI office in Kiambu and an investigating officer should be able to help.
All the best.
On Thu, 5 Sept 2024, 10:38 Liz Orembo via KICTANet, < kictanet@lists.kictanet.or.ke> wrote:
Dear listers,
See this case in twitter. A lady was carjacked, her phone stolen and mpesa transferred to other numbers by thieves. Safaricom does not want to reveal the beneficiary numbers for the criminal transactions to the registered line owner. This is despite them going to Safaricom with an OB number. https://x.com/herine_lando/status/1831366028443709797?s=46
Question:
1. Is Safaricom justified to use data protection for its reason to decline request for information? What’s the real intention of the DPA?
2. Where are consumer and data protection rights on the side of the line owner? Esp where data protection policy is in conflict with consumer interests?
3. The line infrastructure belongs to Safaricom, but who does the transaction data belong to? And how do they share the responsibilities to protect the data?
4. Are there laws to solve this situation in the interest of the customer? Do we need to amend some?
Best regards. Liz.
PGP ID: 0x1F3488BF _______________________________________________ KICTANet mailing list -- kictanet@lists.kictanet.or.ke To unsubscribe send an email to kictanet-leave@lists.kictanet.or.ke Unsubscribe or change your options at: https://mm3-lists.kictanet.or.ke/mm/lists/kictanet.lists.kictanet.or.ke/
Mailing List Posts Online: https://posts.kictanet.or.ke/
Twitter: https://twitter.com/KICTANet/ Facebook: https://www.facebook.com/KICTANet/ Instagram: https://www.instagram.com/KICTANet/ LinkedIn: https://www.linkedin.com/company/kictanet/ YouTube: https://www.youtube.com/channel/UCbcLVjnPtTGBEeYLGUb2Yow/ WhatsApp Channel: https://whatsapp.com/channel/0029VaQsX4w6mYPIctLsGh1K
KICTANet is a multi-stakeholder Think Tank for people and institutions interested and involved in ICT policy and regulation. KICTANet is a catalyst for reform in the Information and Communication Technology sector. Its work is guided by four pillars of Policy Advocacy, Capacity Building, Research, and Stakeholder Engagement.
KICTANetiquette : Adhere to the same standards of acceptable behaviors online that you follow in real life: respect people's times and bandwidth, share knowledge, don't flame or abuse or personalize, respect privacy, do not spam, do not market your wares or qualifications.
PRIVACY POLICY: See https://mm3-lists.kictanet.or.ke/mm/lists/kictanet.lists.kictanet.or.ke/
KICTANet - The Power of Communities, is Kenya's premier ICT policy engagement platform.
_______________________________________________ KICTANet mailing list -- kictanet@lists.kictanet.or.ke To unsubscribe send an email to kictanet-leave@lists.kictanet.or.ke Unsubscribe or change your options at: https://mm3-lists.kictanet.or.ke/mm/lists/kictanet.lists.kictanet.or.ke/
Mailing List Posts Online: https://posts.kictanet.or.ke/
Twitter: https://twitter.com/KICTANet/ Facebook: https://www.facebook.com/KICTANet/ Instagram: https://www.instagram.com/KICTANet/ LinkedIn: https://www.linkedin.com/company/kictanet/ YouTube: https://www.youtube.com/channel/UCbcLVjnPtTGBEeYLGUb2Yow/ WhatsApp Channel: https://whatsapp.com/channel/0029VaQsX4w6mYPIctLsGh1K
KICTANet is a multi-stakeholder Think Tank for people and institutions interested and involved in ICT policy and regulation. KICTANet is a catalyst for reform in the Information and Communication Technology sector. Its work is guided by four pillars of Policy Advocacy, Capacity Building, Research, and Stakeholder Engagement.
KICTANetiquette : Adhere to the same standards of acceptable behaviors online that you follow in real life: respect people's times and bandwidth, share knowledge, don't flame or abuse or personalize, respect privacy, do not spam, do not market your wares or qualifications.
PRIVACY POLICY: See https://mm3-lists.kictanet.or.ke/mm/lists/kictanet.lists.kictanet.or.ke/
KICTANet - The Power of Communities, is Kenya's premier ICT policy engagement platform.
--
--- *Cephas O.M *
_______________________________________________ KICTANet mailing list -- kictanet@lists.kictanet.or.ke To unsubscribe send an email to kictanet-leave@lists.kictanet.or.ke Unsubscribe or change your options at: https://mm3-lists.kictanet.or.ke/mm/lists/kictanet.lists.kictanet.or.ke/
Mailing List Posts Online: https://posts.kictanet.or.ke/
Twitter: https://twitter.com/KICTANet/ Facebook: https://www.facebook.com/KICTANet/ Instagram: https://www.instagram.com/KICTANet/ LinkedIn: https://www.linkedin.com/company/kictanet/ YouTube: https://www.youtube.com/channel/UCbcLVjnPtTGBEeYLGUb2Yow/ WhatsApp Channel: https://whatsapp.com/channel/0029VaQsX4w6mYPIctLsGh1K
KICTANet is a multi-stakeholder Think Tank for people and institutions interested and involved in ICT policy and regulation. KICTANet is a catalyst for reform in the Information and Communication Technology sector. Its work is guided by four pillars of Policy Advocacy, Capacity Building, Research, and Stakeholder Engagement.
KICTANetiquette : Adhere to the same standards of acceptable behaviors online that you follow in real life: respect people's times and bandwidth, share knowledge, don't flame or abuse or personalize, respect privacy, do not spam, do not market your wares or qualifications.
PRIVACY POLICY: See https://mm3-lists.kictanet.or.ke/mm/lists/kictanet.lists.kictanet.or.ke/
KICTANet - The Power of Communities, is Kenya's premier ICT policy engagement platform.
-- --- *Cephas O.M *
Thanks Ochieng for bringing up the point. I had the same question in mind. That, I own the SIM card and presumably all transactions occurred through my line, either as a sender or receiver. Why then am I being denied the data I helped generate (in this case data of a SIM card that's mine)? What difference would it be if I kept a list of all the transactions - including phone numbers? Would be against the DP Act to use such a list as a reference? Regards, *Nicodemus Nyakundi* Digital Accessibility for PWDs *KICTANet* <https://www.kictanet.or.ke/> KICTANet.or.ke <https://kictanet.or.ke/> | LinkedIn <https://www.linkedin.com/in/nicodemus-nyakundi-68a9a587/recent-activity/all/> | X <https://x.com/NicNyakundi> | Facebook <https://www.facebook.com/KICTANet/> | Instagram <https://www.instagram.com/kictanet/> | Youtube <https://www.youtube.com/channel/UCbcLVjnPtTGBEeYLGUb2Yow/videos> | TikTok <https://www.tiktok.com/@kictanet> | WhatsApp <https://whatsapp.com/channel/0029VaQsX4w6mYPIctLsGh1K>. On Thu, 5 Sep 2024, 14:57 Ochieng A. Ogango via KICTANet, < kictanet@lists.kictanet.or.ke> wrote:
Cephas,
Why is it that Safaricom masks numbers on the statement, yet that information comes back to the account owner when you send money.
Why do I need a court order to get information that I already have?
*Kind regards,*
*Ochieng A. Ogango*
*Advocate, LLB (Hons), CPM(M.T.I)*
On Thu, Sep 5, 2024 at 1:38 PM Cephas Joseph via KICTANet < kictanet@lists.kictanet.or.ke> wrote:
Liz,
Kenya it is, but (un)fortunately Kenya also has that standard process of Police/DCI -> Court -> Safaricom for data access. Safaricom is a data custodian hence has obligations and accountability for any persons data, (illicit) beneficiary and owner too.
Two scenarios::
1. Full transparency by Saf to the owner, with the risk of exposure for (illicit) beneficiaries. Take a case where, even innocently, one accesses the unique MPESA statement code sent via SMS and authN to your statement. With numbers in plain text, what can they do?
2. With current masking, protecting beneficiaries numbers, when one accesses the unique MPESA statement code sent via SMS and authN to your statement, the masked numbers aren't useful for them. This covers both beneficiary privacy and assures Saf accountability.
Unfortunately, Safaricom would not place the privacy burden on the customer. DPA laws shift this labor to the org, aye? The criminals are also Saf's customers, you know!
I suppose visiting an official Saf Shop, for a thorough verification of customer ID, then being issued with the specific, limited data (cell nos.) needed might be a way? Or adopt a technical means, coded MPESA statement in app, with strignest security/privacy controls (TBD)?
On Thu, Sep 5, 2024 at 1:04 PM Wilfred Omondi via KICTANet < kictanet@lists.kictanet.or.ke> wrote:
Hi Liz,
From experience, once such a case is reported to a police station, the OCS/Deputy OCS should assign a DCI officer to investigate. The DCI officer should ask the court for a warrant/court order so that he/she can present to Safaricom for cooperation during the investigation.
If you don't get such a help from the police station, you can also go directly to the DCI office in Kiambu and an investigating officer should be able to help.
All the best.
On Thu, 5 Sept 2024, 10:38 Liz Orembo via KICTANet, < kictanet@lists.kictanet.or.ke> wrote:
Dear listers,
See this case in twitter. A lady was carjacked, her phone stolen and mpesa transferred to other numbers by thieves. Safaricom does not want to reveal the beneficiary numbers for the criminal transactions to the registered line owner. This is despite them going to Safaricom with an OB number. https://x.com/herine_lando/status/1831366028443709797?s=46
Question:
1. Is Safaricom justified to use data protection for its reason to decline request for information? What’s the real intention of the DPA?
2. Where are consumer and data protection rights on the side of the line owner? Esp where data protection policy is in conflict with consumer interests?
3. The line infrastructure belongs to Safaricom, but who does the transaction data belong to? And how do they share the responsibilities to protect the data?
4. Are there laws to solve this situation in the interest of the customer? Do we need to amend some?
Best regards. Liz.
PGP ID: 0x1F3488BF _______________________________________________ KICTANet mailing list -- kictanet@lists.kictanet.or.ke To unsubscribe send an email to kictanet-leave@lists.kictanet.or.ke Unsubscribe or change your options at: https://mm3-lists.kictanet.or.ke/mm/lists/kictanet.lists.kictanet.or.ke/
Mailing List Posts Online: https://posts.kictanet.or.ke/
Twitter: https://twitter.com/KICTANet/ Facebook: https://www.facebook.com/KICTANet/ Instagram: https://www.instagram.com/KICTANet/ LinkedIn: https://www.linkedin.com/company/kictanet/ YouTube: https://www.youtube.com/channel/UCbcLVjnPtTGBEeYLGUb2Yow/ WhatsApp Channel: https://whatsapp.com/channel/0029VaQsX4w6mYPIctLsGh1K
KICTANet is a multi-stakeholder Think Tank for people and institutions interested and involved in ICT policy and regulation. KICTANet is a catalyst for reform in the Information and Communication Technology sector. Its work is guided by four pillars of Policy Advocacy, Capacity Building, Research, and Stakeholder Engagement.
KICTANetiquette : Adhere to the same standards of acceptable behaviors online that you follow in real life: respect people's times and bandwidth, share knowledge, don't flame or abuse or personalize, respect privacy, do not spam, do not market your wares or qualifications.
PRIVACY POLICY: See https://mm3-lists.kictanet.or.ke/mm/lists/kictanet.lists.kictanet.or.ke/
KICTANet - The Power of Communities, is Kenya's premier ICT policy engagement platform.
_______________________________________________ KICTANet mailing list -- kictanet@lists.kictanet.or.ke To unsubscribe send an email to kictanet-leave@lists.kictanet.or.ke Unsubscribe or change your options at: https://mm3-lists.kictanet.or.ke/mm/lists/kictanet.lists.kictanet.or.ke/
Mailing List Posts Online: https://posts.kictanet.or.ke/
Twitter: https://twitter.com/KICTANet/ Facebook: https://www.facebook.com/KICTANet/ Instagram: https://www.instagram.com/KICTANet/ LinkedIn: https://www.linkedin.com/company/kictanet/ YouTube: https://www.youtube.com/channel/UCbcLVjnPtTGBEeYLGUb2Yow/ WhatsApp Channel: https://whatsapp.com/channel/0029VaQsX4w6mYPIctLsGh1K
KICTANet is a multi-stakeholder Think Tank for people and institutions interested and involved in ICT policy and regulation. KICTANet is a catalyst for reform in the Information and Communication Technology sector. Its work is guided by four pillars of Policy Advocacy, Capacity Building, Research, and Stakeholder Engagement.
KICTANetiquette : Adhere to the same standards of acceptable behaviors online that you follow in real life: respect people's times and bandwidth, share knowledge, don't flame or abuse or personalize, respect privacy, do not spam, do not market your wares or qualifications.
PRIVACY POLICY: See https://mm3-lists.kictanet.or.ke/mm/lists/kictanet.lists.kictanet.or.ke/
KICTANet - The Power of Communities, is Kenya's premier ICT policy engagement platform.
--
--- *Cephas O.M *
_______________________________________________ KICTANet mailing list -- kictanet@lists.kictanet.or.ke To unsubscribe send an email to kictanet-leave@lists.kictanet.or.ke Unsubscribe or change your options at: https://mm3-lists.kictanet.or.ke/mm/lists/kictanet.lists.kictanet.or.ke/
Mailing List Posts Online: https://posts.kictanet.or.ke/
Twitter: https://twitter.com/KICTANet/ Facebook: https://www.facebook.com/KICTANet/ Instagram: https://www.instagram.com/KICTANet/ LinkedIn: https://www.linkedin.com/company/kictanet/ YouTube: https://www.youtube.com/channel/UCbcLVjnPtTGBEeYLGUb2Yow/ WhatsApp Channel: https://whatsapp.com/channel/0029VaQsX4w6mYPIctLsGh1K
KICTANet is a multi-stakeholder Think Tank for people and institutions interested and involved in ICT policy and regulation. KICTANet is a catalyst for reform in the Information and Communication Technology sector. Its work is guided by four pillars of Policy Advocacy, Capacity Building, Research, and Stakeholder Engagement.
KICTANetiquette : Adhere to the same standards of acceptable behaviors online that you follow in real life: respect people's times and bandwidth, share knowledge, don't flame or abuse or personalize, respect privacy, do not spam, do not market your wares or qualifications.
PRIVACY POLICY: See https://mm3-lists.kictanet.or.ke/mm/lists/kictanet.lists.kictanet.or.ke/
KICTANet - The Power of Communities, is Kenya's premier ICT policy engagement platform.
_______________________________________________ KICTANet mailing list -- kictanet@lists.kictanet.or.ke To unsubscribe send an email to kictanet-leave@lists.kictanet.or.ke Unsubscribe or change your options at: https://mm3-lists.kictanet.or.ke/mm/lists/kictanet.lists.kictanet.or.ke/
Mailing List Posts Online: https://posts.kictanet.or.ke/
Twitter: https://twitter.com/KICTANet/ Facebook: https://www.facebook.com/KICTANet/ Instagram: https://www.instagram.com/KICTANet/ LinkedIn: https://www.linkedin.com/company/kictanet/ YouTube: https://www.youtube.com/channel/UCbcLVjnPtTGBEeYLGUb2Yow/ WhatsApp Channel: https://whatsapp.com/channel/0029VaQsX4w6mYPIctLsGh1K
KICTANet is a multi-stakeholder Think Tank for people and institutions interested and involved in ICT policy and regulation. KICTANet is a catalyst for reform in the Information and Communication Technology sector. Its work is guided by four pillars of Policy Advocacy, Capacity Building, Research, and Stakeholder Engagement.
KICTANetiquette : Adhere to the same standards of acceptable behaviors online that you follow in real life: respect people's times and bandwidth, share knowledge, don't flame or abuse or personalize, respect privacy, do not spam, do not market your wares or qualifications.
PRIVACY POLICY: See https://mm3-lists.kictanet.or.ke/mm/lists/kictanet.lists.kictanet.or.ke/
KICTANet - The Power of Communities, is Kenya's premier ICT policy engagement platform.
Interesting development; because Safaricom has just called the complainant's mother. Isn't that the real breach? 😊 https://x.com/herine_lando/status/1831679155647152508?t=dt9dXNBxvRpP8ZLTFPkpLw&s=19 On Thu, 5 Sept 2024, 15:41 Nicodemus Nyakundi via KICTANet, < kictanet@lists.kictanet.or.ke> wrote:
Thanks Ochieng for bringing up the point.
I had the same question in mind. That, I own the SIM card and presumably all transactions occurred through my line, either as a sender or receiver. Why then am I being denied the data I helped generate (in this case data of a SIM card that's mine)?
What difference would it be if I kept a list of all the transactions - including phone numbers? Would be against the DP Act to use such a list as a reference?
Regards, *Nicodemus Nyakundi* Digital Accessibility for PWDs *KICTANet* <https://www.kictanet.or.ke/>
KICTANet.or.ke <https://kictanet.or.ke/> | LinkedIn <https://www.linkedin.com/in/nicodemus-nyakundi-68a9a587/recent-activity/all/> | X <https://x.com/NicNyakundi> | Facebook <https://www.facebook.com/KICTANet/> | Instagram <https://www.instagram.com/kictanet/> | Youtube <https://www.youtube.com/channel/UCbcLVjnPtTGBEeYLGUb2Yow/videos> | TikTok <https://www.tiktok.com/@kictanet> | WhatsApp <https://whatsapp.com/channel/0029VaQsX4w6mYPIctLsGh1K>.
On Thu, 5 Sep 2024, 14:57 Ochieng A. Ogango via KICTANet, < kictanet@lists.kictanet.or.ke> wrote:
Cephas,
Why is it that Safaricom masks numbers on the statement, yet that information comes back to the account owner when you send money.
Why do I need a court order to get information that I already have?
*Kind regards,*
*Ochieng A. Ogango*
*Advocate, LLB (Hons), CPM(M.T.I)*
On Thu, Sep 5, 2024 at 1:38 PM Cephas Joseph via KICTANet < kictanet@lists.kictanet.or.ke> wrote:
Liz,
Kenya it is, but (un)fortunately Kenya also has that standard process of Police/DCI -> Court -> Safaricom for data access. Safaricom is a data custodian hence has obligations and accountability for any persons data, (illicit) beneficiary and owner too.
Two scenarios::
1. Full transparency by Saf to the owner, with the risk of exposure for (illicit) beneficiaries. Take a case where, even innocently, one accesses the unique MPESA statement code sent via SMS and authN to your statement. With numbers in plain text, what can they do?
2. With current masking, protecting beneficiaries numbers, when one accesses the unique MPESA statement code sent via SMS and authN to your statement, the masked numbers aren't useful for them. This covers both beneficiary privacy and assures Saf accountability.
Unfortunately, Safaricom would not place the privacy burden on the customer. DPA laws shift this labor to the org, aye? The criminals are also Saf's customers, you know!
I suppose visiting an official Saf Shop, for a thorough verification of customer ID, then being issued with the specific, limited data (cell nos.) needed might be a way? Or adopt a technical means, coded MPESA statement in app, with strignest security/privacy controls (TBD)?
On Thu, Sep 5, 2024 at 1:04 PM Wilfred Omondi via KICTANet < kictanet@lists.kictanet.or.ke> wrote:
Hi Liz,
From experience, once such a case is reported to a police station, the OCS/Deputy OCS should assign a DCI officer to investigate. The DCI officer should ask the court for a warrant/court order so that he/she can present to Safaricom for cooperation during the investigation.
If you don't get such a help from the police station, you can also go directly to the DCI office in Kiambu and an investigating officer should be able to help.
All the best.
On Thu, 5 Sept 2024, 10:38 Liz Orembo via KICTANet, < kictanet@lists.kictanet.or.ke> wrote:
Dear listers,
See this case in twitter. A lady was carjacked, her phone stolen and mpesa transferred to other numbers by thieves. Safaricom does not want to reveal the beneficiary numbers for the criminal transactions to the registered line owner. This is despite them going to Safaricom with an OB number. https://x.com/herine_lando/status/1831366028443709797?s=46
Question:
1. Is Safaricom justified to use data protection for its reason to decline request for information? What’s the real intention of the DPA?
2. Where are consumer and data protection rights on the side of the line owner? Esp where data protection policy is in conflict with consumer interests?
3. The line infrastructure belongs to Safaricom, but who does the transaction data belong to? And how do they share the responsibilities to protect the data?
4. Are there laws to solve this situation in the interest of the customer? Do we need to amend some?
Best regards. Liz.
PGP ID: 0x1F3488BF _______________________________________________ KICTANet mailing list -- kictanet@lists.kictanet.or.ke To unsubscribe send an email to kictanet-leave@lists.kictanet.or.ke Unsubscribe or change your options at: https://mm3-lists.kictanet.or.ke/mm/lists/kictanet.lists.kictanet.or.ke/
Mailing List Posts Online: https://posts.kictanet.or.ke/
Twitter: https://twitter.com/KICTANet/ Facebook: https://www.facebook.com/KICTANet/ Instagram: https://www.instagram.com/KICTANet/ LinkedIn: https://www.linkedin.com/company/kictanet/ YouTube: https://www.youtube.com/channel/UCbcLVjnPtTGBEeYLGUb2Yow/ WhatsApp Channel: https://whatsapp.com/channel/0029VaQsX4w6mYPIctLsGh1K
KICTANet is a multi-stakeholder Think Tank for people and institutions interested and involved in ICT policy and regulation. KICTANet is a catalyst for reform in the Information and Communication Technology sector. Its work is guided by four pillars of Policy Advocacy, Capacity Building, Research, and Stakeholder Engagement.
KICTANetiquette : Adhere to the same standards of acceptable behaviors online that you follow in real life: respect people's times and bandwidth, share knowledge, don't flame or abuse or personalize, respect privacy, do not spam, do not market your wares or qualifications.
PRIVACY POLICY: See https://mm3-lists.kictanet.or.ke/mm/lists/kictanet.lists.kictanet.or.ke/
KICTANet - The Power of Communities, is Kenya's premier ICT policy engagement platform.
_______________________________________________ KICTANet mailing list -- kictanet@lists.kictanet.or.ke To unsubscribe send an email to kictanet-leave@lists.kictanet.or.ke Unsubscribe or change your options at: https://mm3-lists.kictanet.or.ke/mm/lists/kictanet.lists.kictanet.or.ke/
Mailing List Posts Online: https://posts.kictanet.or.ke/
Twitter: https://twitter.com/KICTANet/ Facebook: https://www.facebook.com/KICTANet/ Instagram: https://www.instagram.com/KICTANet/ LinkedIn: https://www.linkedin.com/company/kictanet/ YouTube: https://www.youtube.com/channel/UCbcLVjnPtTGBEeYLGUb2Yow/ WhatsApp Channel: https://whatsapp.com/channel/0029VaQsX4w6mYPIctLsGh1K
KICTANet is a multi-stakeholder Think Tank for people and institutions interested and involved in ICT policy and regulation. KICTANet is a catalyst for reform in the Information and Communication Technology sector. Its work is guided by four pillars of Policy Advocacy, Capacity Building, Research, and Stakeholder Engagement.
KICTANetiquette : Adhere to the same standards of acceptable behaviors online that you follow in real life: respect people's times and bandwidth, share knowledge, don't flame or abuse or personalize, respect privacy, do not spam, do not market your wares or qualifications.
PRIVACY POLICY: See https://mm3-lists.kictanet.or.ke/mm/lists/kictanet.lists.kictanet.or.ke/
KICTANet - The Power of Communities, is Kenya's premier ICT policy engagement platform.
--
--- *Cephas O.M *
_______________________________________________ KICTANet mailing list -- kictanet@lists.kictanet.or.ke To unsubscribe send an email to kictanet-leave@lists.kictanet.or.ke Unsubscribe or change your options at: https://mm3-lists.kictanet.or.ke/mm/lists/kictanet.lists.kictanet.or.ke/
Mailing List Posts Online: https://posts.kictanet.or.ke/
Twitter: https://twitter.com/KICTANet/ Facebook: https://www.facebook.com/KICTANet/ Instagram: https://www.instagram.com/KICTANet/ LinkedIn: https://www.linkedin.com/company/kictanet/ YouTube: https://www.youtube.com/channel/UCbcLVjnPtTGBEeYLGUb2Yow/ WhatsApp Channel: https://whatsapp.com/channel/0029VaQsX4w6mYPIctLsGh1K
KICTANet is a multi-stakeholder Think Tank for people and institutions interested and involved in ICT policy and regulation. KICTANet is a catalyst for reform in the Information and Communication Technology sector. Its work is guided by four pillars of Policy Advocacy, Capacity Building, Research, and Stakeholder Engagement.
KICTANetiquette : Adhere to the same standards of acceptable behaviors online that you follow in real life: respect people's times and bandwidth, share knowledge, don't flame or abuse or personalize, respect privacy, do not spam, do not market your wares or qualifications.
PRIVACY POLICY: See https://mm3-lists.kictanet.or.ke/mm/lists/kictanet.lists.kictanet.or.ke/
KICTANet - The Power of Communities, is Kenya's premier ICT policy engagement platform.
_______________________________________________ KICTANet mailing list -- kictanet@lists.kictanet.or.ke To unsubscribe send an email to kictanet-leave@lists.kictanet.or.ke Unsubscribe or change your options at: https://mm3-lists.kictanet.or.ke/mm/lists/kictanet.lists.kictanet.or.ke/
Mailing List Posts Online: https://posts.kictanet.or.ke/
Twitter: https://twitter.com/KICTANet/ Facebook: https://www.facebook.com/KICTANet/ Instagram: https://www.instagram.com/KICTANet/ LinkedIn: https://www.linkedin.com/company/kictanet/ YouTube: https://www.youtube.com/channel/UCbcLVjnPtTGBEeYLGUb2Yow/ WhatsApp Channel: https://whatsapp.com/channel/0029VaQsX4w6mYPIctLsGh1K
KICTANet is a multi-stakeholder Think Tank for people and institutions interested and involved in ICT policy and regulation. KICTANet is a catalyst for reform in the Information and Communication Technology sector. Its work is guided by four pillars of Policy Advocacy, Capacity Building, Research, and Stakeholder Engagement.
KICTANetiquette : Adhere to the same standards of acceptable behaviors online that you follow in real life: respect people's times and bandwidth, share knowledge, don't flame or abuse or personalize, respect privacy, do not spam, do not market your wares or qualifications.
PRIVACY POLICY: See https://mm3-lists.kictanet.or.ke/mm/lists/kictanet.lists.kictanet.or.ke/
KICTANet - The Power of Communities, is Kenya's premier ICT policy engagement platform.
_______________________________________________ KICTANet mailing list -- kictanet@lists.kictanet.or.ke To unsubscribe send an email to kictanet-leave@lists.kictanet.or.ke Unsubscribe or change your options at: https://mm3-lists.kictanet.or.ke/mm/lists/kictanet.lists.kictanet.or.ke/
Mailing List Posts Online: https://posts.kictanet.or.ke/
Twitter: https://twitter.com/KICTANet/ Facebook: https://www.facebook.com/KICTANet/ Instagram: https://www.instagram.com/KICTANet/ LinkedIn: https://www.linkedin.com/company/kictanet/ YouTube: https://www.youtube.com/channel/UCbcLVjnPtTGBEeYLGUb2Yow/ WhatsApp Channel: https://whatsapp.com/channel/0029VaQsX4w6mYPIctLsGh1K
KICTANet is a multi-stakeholder Think Tank for people and institutions interested and involved in ICT policy and regulation. KICTANet is a catalyst for reform in the Information and Communication Technology sector. Its work is guided by four pillars of Policy Advocacy, Capacity Building, Research, and Stakeholder Engagement.
KICTANetiquette : Adhere to the same standards of acceptable behaviors online that you follow in real life: respect people's times and bandwidth, share knowledge, don't flame or abuse or personalize, respect privacy, do not spam, do not market your wares or qualifications.
PRIVACY POLICY: See https://mm3-lists.kictanet.or.ke/mm/lists/kictanet.lists.kictanet.or.ke/
KICTANet - The Power of Communities, is Kenya's premier ICT policy engagement platform.
Surely you want to believe such a tweet, don't you think she out to spew the idea of an alleged breach!! *Kind regards,* *Ochieng A. Ogango* *Advocate, LLB (Hons), CPM(M.T.I)* On Thu, Sep 5, 2024 at 4:24 PM Florence Awino via KICTANet < kictanet@lists.kictanet.or.ke> wrote:
Interesting development; because Safaricom has just called the complainant's mother. Isn't that the real breach? 😊
https://x.com/herine_lando/status/1831679155647152508?t=dt9dXNBxvRpP8ZLTFPkpLw&s=19
On Thu, 5 Sept 2024, 15:41 Nicodemus Nyakundi via KICTANet, < kictanet@lists.kictanet.or.ke> wrote:
Thanks Ochieng for bringing up the point.
I had the same question in mind. That, I own the SIM card and presumably all transactions occurred through my line, either as a sender or receiver. Why then am I being denied the data I helped generate (in this case data of a SIM card that's mine)?
What difference would it be if I kept a list of all the transactions - including phone numbers? Would be against the DP Act to use such a list as a reference?
Regards, *Nicodemus Nyakundi* Digital Accessibility for PWDs *KICTANet* <https://www.kictanet.or.ke/>
KICTANet.or.ke <https://kictanet.or.ke/> | LinkedIn <https://www.linkedin.com/in/nicodemus-nyakundi-68a9a587/recent-activity/all/> | X <https://x.com/NicNyakundi> | Facebook <https://www.facebook.com/KICTANet/> | Instagram <https://www.instagram.com/kictanet/> | Youtube <https://www.youtube.com/channel/UCbcLVjnPtTGBEeYLGUb2Yow/videos> | TikTok <https://www.tiktok.com/@kictanet> | WhatsApp <https://whatsapp.com/channel/0029VaQsX4w6mYPIctLsGh1K>.
On Thu, 5 Sep 2024, 14:57 Ochieng A. Ogango via KICTANet, < kictanet@lists.kictanet.or.ke> wrote:
Cephas,
Why is it that Safaricom masks numbers on the statement, yet that information comes back to the account owner when you send money.
Why do I need a court order to get information that I already have?
*Kind regards,*
*Ochieng A. Ogango*
*Advocate, LLB (Hons), CPM(M.T.I)*
On Thu, Sep 5, 2024 at 1:38 PM Cephas Joseph via KICTANet < kictanet@lists.kictanet.or.ke> wrote:
Liz,
Kenya it is, but (un)fortunately Kenya also has that standard process of Police/DCI -> Court -> Safaricom for data access. Safaricom is a data custodian hence has obligations and accountability for any persons data, (illicit) beneficiary and owner too.
Two scenarios::
1. Full transparency by Saf to the owner, with the risk of exposure for (illicit) beneficiaries. Take a case where, even innocently, one accesses the unique MPESA statement code sent via SMS and authN to your statement. With numbers in plain text, what can they do?
2. With current masking, protecting beneficiaries numbers, when one accesses the unique MPESA statement code sent via SMS and authN to your statement, the masked numbers aren't useful for them. This covers both beneficiary privacy and assures Saf accountability.
Unfortunately, Safaricom would not place the privacy burden on the customer. DPA laws shift this labor to the org, aye? The criminals are also Saf's customers, you know!
I suppose visiting an official Saf Shop, for a thorough verification of customer ID, then being issued with the specific, limited data (cell nos.) needed might be a way? Or adopt a technical means, coded MPESA statement in app, with strignest security/privacy controls (TBD)?
On Thu, Sep 5, 2024 at 1:04 PM Wilfred Omondi via KICTANet < kictanet@lists.kictanet.or.ke> wrote:
Hi Liz,
From experience, once such a case is reported to a police station, the OCS/Deputy OCS should assign a DCI officer to investigate. The DCI officer should ask the court for a warrant/court order so that he/she can present to Safaricom for cooperation during the investigation.
If you don't get such a help from the police station, you can also go directly to the DCI office in Kiambu and an investigating officer should be able to help.
All the best.
On Thu, 5 Sept 2024, 10:38 Liz Orembo via KICTANet, < kictanet@lists.kictanet.or.ke> wrote:
Dear listers,
See this case in twitter. A lady was carjacked, her phone stolen and mpesa transferred to other numbers by thieves. Safaricom does not want to reveal the beneficiary numbers for the criminal transactions to the registered line owner. This is despite them going to Safaricom with an OB number. https://x.com/herine_lando/status/1831366028443709797?s=46
Question:
1. Is Safaricom justified to use data protection for its reason to decline request for information? What’s the real intention of the DPA?
2. Where are consumer and data protection rights on the side of the line owner? Esp where data protection policy is in conflict with consumer interests?
3. The line infrastructure belongs to Safaricom, but who does the transaction data belong to? And how do they share the responsibilities to protect the data?
4. Are there laws to solve this situation in the interest of the customer? Do we need to amend some?
Best regards. Liz.
PGP ID: 0x1F3488BF _______________________________________________ KICTANet mailing list -- kictanet@lists.kictanet.or.ke To unsubscribe send an email to kictanet-leave@lists.kictanet.or.ke Unsubscribe or change your options at: https://mm3-lists.kictanet.or.ke/mm/lists/kictanet.lists.kictanet.or.ke/
Mailing List Posts Online: https://posts.kictanet.or.ke/
Twitter: https://twitter.com/KICTANet/ Facebook: https://www.facebook.com/KICTANet/ Instagram: https://www.instagram.com/KICTANet/ LinkedIn: https://www.linkedin.com/company/kictanet/ YouTube: https://www.youtube.com/channel/UCbcLVjnPtTGBEeYLGUb2Yow/ WhatsApp Channel: https://whatsapp.com/channel/0029VaQsX4w6mYPIctLsGh1K
KICTANet is a multi-stakeholder Think Tank for people and institutions interested and involved in ICT policy and regulation. KICTANet is a catalyst for reform in the Information and Communication Technology sector. Its work is guided by four pillars of Policy Advocacy, Capacity Building, Research, and Stakeholder Engagement.
KICTANetiquette : Adhere to the same standards of acceptable behaviors online that you follow in real life: respect people's times and bandwidth, share knowledge, don't flame or abuse or personalize, respect privacy, do not spam, do not market your wares or qualifications.
PRIVACY POLICY: See https://mm3-lists.kictanet.or.ke/mm/lists/kictanet.lists.kictanet.or.ke/
KICTANet - The Power of Communities, is Kenya's premier ICT policy engagement platform.
_______________________________________________ KICTANet mailing list -- kictanet@lists.kictanet.or.ke To unsubscribe send an email to kictanet-leave@lists.kictanet.or.ke Unsubscribe or change your options at: https://mm3-lists.kictanet.or.ke/mm/lists/kictanet.lists.kictanet.or.ke/
Mailing List Posts Online: https://posts.kictanet.or.ke/
Twitter: https://twitter.com/KICTANet/ Facebook: https://www.facebook.com/KICTANet/ Instagram: https://www.instagram.com/KICTANet/ LinkedIn: https://www.linkedin.com/company/kictanet/ YouTube: https://www.youtube.com/channel/UCbcLVjnPtTGBEeYLGUb2Yow/ WhatsApp Channel: https://whatsapp.com/channel/0029VaQsX4w6mYPIctLsGh1K
KICTANet is a multi-stakeholder Think Tank for people and institutions interested and involved in ICT policy and regulation. KICTANet is a catalyst for reform in the Information and Communication Technology sector. Its work is guided by four pillars of Policy Advocacy, Capacity Building, Research, and Stakeholder Engagement.
KICTANetiquette : Adhere to the same standards of acceptable behaviors online that you follow in real life: respect people's times and bandwidth, share knowledge, don't flame or abuse or personalize, respect privacy, do not spam, do not market your wares or qualifications.
PRIVACY POLICY: See https://mm3-lists.kictanet.or.ke/mm/lists/kictanet.lists.kictanet.or.ke/
KICTANet - The Power of Communities, is Kenya's premier ICT policy engagement platform.
--
--- *Cephas O.M *
_______________________________________________ KICTANet mailing list -- kictanet@lists.kictanet.or.ke To unsubscribe send an email to kictanet-leave@lists.kictanet.or.ke Unsubscribe or change your options at: https://mm3-lists.kictanet.or.ke/mm/lists/kictanet.lists.kictanet.or.ke/
Mailing List Posts Online: https://posts.kictanet.or.ke/
Twitter: https://twitter.com/KICTANet/ Facebook: https://www.facebook.com/KICTANet/ Instagram: https://www.instagram.com/KICTANet/ LinkedIn: https://www.linkedin.com/company/kictanet/ YouTube: https://www.youtube.com/channel/UCbcLVjnPtTGBEeYLGUb2Yow/ WhatsApp Channel: https://whatsapp.com/channel/0029VaQsX4w6mYPIctLsGh1K
KICTANet is a multi-stakeholder Think Tank for people and institutions interested and involved in ICT policy and regulation. KICTANet is a catalyst for reform in the Information and Communication Technology sector. Its work is guided by four pillars of Policy Advocacy, Capacity Building, Research, and Stakeholder Engagement.
KICTANetiquette : Adhere to the same standards of acceptable behaviors online that you follow in real life: respect people's times and bandwidth, share knowledge, don't flame or abuse or personalize, respect privacy, do not spam, do not market your wares or qualifications.
PRIVACY POLICY: See https://mm3-lists.kictanet.or.ke/mm/lists/kictanet.lists.kictanet.or.ke/
KICTANet - The Power of Communities, is Kenya's premier ICT policy engagement platform.
_______________________________________________ KICTANet mailing list -- kictanet@lists.kictanet.or.ke To unsubscribe send an email to kictanet-leave@lists.kictanet.or.ke Unsubscribe or change your options at: https://mm3-lists.kictanet.or.ke/mm/lists/kictanet.lists.kictanet.or.ke/
Mailing List Posts Online: https://posts.kictanet.or.ke/
Twitter: https://twitter.com/KICTANet/ Facebook: https://www.facebook.com/KICTANet/ Instagram: https://www.instagram.com/KICTANet/ LinkedIn: https://www.linkedin.com/company/kictanet/ YouTube: https://www.youtube.com/channel/UCbcLVjnPtTGBEeYLGUb2Yow/ WhatsApp Channel: https://whatsapp.com/channel/0029VaQsX4w6mYPIctLsGh1K
KICTANet is a multi-stakeholder Think Tank for people and institutions interested and involved in ICT policy and regulation. KICTANet is a catalyst for reform in the Information and Communication Technology sector. Its work is guided by four pillars of Policy Advocacy, Capacity Building, Research, and Stakeholder Engagement.
KICTANetiquette : Adhere to the same standards of acceptable behaviors online that you follow in real life: respect people's times and bandwidth, share knowledge, don't flame or abuse or personalize, respect privacy, do not spam, do not market your wares or qualifications.
PRIVACY POLICY: See https://mm3-lists.kictanet.or.ke/mm/lists/kictanet.lists.kictanet.or.ke/
KICTANet - The Power of Communities, is Kenya's premier ICT policy engagement platform.
_______________________________________________ KICTANet mailing list -- kictanet@lists.kictanet.or.ke To unsubscribe send an email to kictanet-leave@lists.kictanet.or.ke Unsubscribe or change your options at: https://mm3-lists.kictanet.or.ke/mm/lists/kictanet.lists.kictanet.or.ke/
Mailing List Posts Online: https://posts.kictanet.or.ke/
Twitter: https://twitter.com/KICTANet/ Facebook: https://www.facebook.com/KICTANet/ Instagram: https://www.instagram.com/KICTANet/ LinkedIn: https://www.linkedin.com/company/kictanet/ YouTube: https://www.youtube.com/channel/UCbcLVjnPtTGBEeYLGUb2Yow/ WhatsApp Channel: https://whatsapp.com/channel/0029VaQsX4w6mYPIctLsGh1K
KICTANet is a multi-stakeholder Think Tank for people and institutions interested and involved in ICT policy and regulation. KICTANet is a catalyst for reform in the Information and Communication Technology sector. Its work is guided by four pillars of Policy Advocacy, Capacity Building, Research, and Stakeholder Engagement.
KICTANetiquette : Adhere to the same standards of acceptable behaviors online that you follow in real life: respect people's times and bandwidth, share knowledge, don't flame or abuse or personalize, respect privacy, do not spam, do not market your wares or qualifications.
PRIVACY POLICY: See https://mm3-lists.kictanet.or.ke/mm/lists/kictanet.lists.kictanet.or.ke/
KICTANet - The Power of Communities, is Kenya's premier ICT policy engagement platform.
_______________________________________________ KICTANet mailing list -- kictanet@lists.kictanet.or.ke To unsubscribe send an email to kictanet-leave@lists.kictanet.or.ke Unsubscribe or change your options at: https://mm3-lists.kictanet.or.ke/mm/lists/kictanet.lists.kictanet.or.ke/
Mailing List Posts Online: https://posts.kictanet.or.ke/
Twitter: https://twitter.com/KICTANet/ Facebook: https://www.facebook.com/KICTANet/ Instagram: https://www.instagram.com/KICTANet/ LinkedIn: https://www.linkedin.com/company/kictanet/ YouTube: https://www.youtube.com/channel/UCbcLVjnPtTGBEeYLGUb2Yow/ WhatsApp Channel: https://whatsapp.com/channel/0029VaQsX4w6mYPIctLsGh1K
KICTANet is a multi-stakeholder Think Tank for people and institutions interested and involved in ICT policy and regulation. KICTANet is a catalyst for reform in the Information and Communication Technology sector. Its work is guided by four pillars of Policy Advocacy, Capacity Building, Research, and Stakeholder Engagement.
KICTANetiquette : Adhere to the same standards of acceptable behaviors online that you follow in real life: respect people's times and bandwidth, share knowledge, don't flame or abuse or personalize, respect privacy, do not spam, do not market your wares or qualifications.
PRIVACY POLICY: See https://mm3-lists.kictanet.or.ke/mm/lists/kictanet.lists.kictanet.or.ke/
KICTANet - The Power of Communities, is Kenya's premier ICT policy engagement platform.
How does Safaricom handle data subject rights? Doesn’t every customer of theirs have a right to information about their transactions, similar to bank statements? Masking of important information like where a customer’s phone sent money to seems contrary to the right to information. On Thursday 5 September 2024, Ochieng A. Ogango via KICTANet < kictanet@lists.kictanet.or.ke> wrote:
Surely you want to believe such a tweet, don't you think she out to spew the idea of an alleged breach!!
*Kind regards,*
*Ochieng A. Ogango*
*Advocate, LLB (Hons), CPM(M.T.I)*
On Thu, Sep 5, 2024 at 4:24 PM Florence Awino via KICTANet < kictanet@lists.kictanet.or.ke> wrote:
Interesting development; because Safaricom has just called the complainant's mother. Isn't that the real breach? 😊
https://x.com/herine_lando/status/1831679155647152508?t= dt9dXNBxvRpP8ZLTFPkpLw&s=19
On Thu, 5 Sept 2024, 15:41 Nicodemus Nyakundi via KICTANet, < kictanet@lists.kictanet.or.ke> wrote:
Thanks Ochieng for bringing up the point.
I had the same question in mind. That, I own the SIM card and presumably all transactions occurred through my line, either as a sender or receiver. Why then am I being denied the data I helped generate (in this case data of a SIM card that's mine)?
What difference would it be if I kept a list of all the transactions - including phone numbers? Would be against the DP Act to use such a list as a reference?
Regards, *Nicodemus Nyakundi* Digital Accessibility for PWDs *KICTANet* <https://www.kictanet.or.ke/>
KICTANet.or.ke <https://kictanet.or.ke/> | LinkedIn <https://www.linkedin.com/in/nicodemus-nyakundi-68a9a587/recent-activity/all/> | X <https://x.com/NicNyakundi> | Facebook <https://www.facebook.com/KICTANet/> | Instagram <https://www.instagram.com/kictanet/> | Youtube <https://www.youtube.com/channel/UCbcLVjnPtTGBEeYLGUb2Yow/videos> | TikTok <https://www.tiktok.com/@kictanet> | WhatsApp <https://whatsapp.com/channel/0029VaQsX4w6mYPIctLsGh1K>.
On Thu, 5 Sep 2024, 14:57 Ochieng A. Ogango via KICTANet, < kictanet@lists.kictanet.or.ke> wrote:
Cephas,
Why is it that Safaricom masks numbers on the statement, yet that information comes back to the account owner when you send money.
Why do I need a court order to get information that I already have?
*Kind regards,*
*Ochieng A. Ogango*
*Advocate, LLB (Hons), CPM(M.T.I)*
On Thu, Sep 5, 2024 at 1:38 PM Cephas Joseph via KICTANet < kictanet@lists.kictanet.or.ke> wrote:
Liz,
Kenya it is, but (un)fortunately Kenya also has that standard process of Police/DCI -> Court -> Safaricom for data access. Safaricom is a data custodian hence has obligations and accountability for any persons data, (illicit) beneficiary and owner too.
Two scenarios::
1. Full transparency by Saf to the owner, with the risk of exposure for (illicit) beneficiaries. Take a case where, even innocently, one accesses the unique MPESA statement code sent via SMS and authN to your statement. With numbers in plain text, what can they do?
2. With current masking, protecting beneficiaries numbers, when one accesses the unique MPESA statement code sent via SMS and authN to your statement, the masked numbers aren't useful for them. This covers both beneficiary privacy and assures Saf accountability.
Unfortunately, Safaricom would not place the privacy burden on the customer. DPA laws shift this labor to the org, aye? The criminals are also Saf's customers, you know!
I suppose visiting an official Saf Shop, for a thorough verification of customer ID, then being issued with the specific, limited data (cell nos.) needed might be a way? Or adopt a technical means, coded MPESA statement in app, with strignest security/privacy controls (TBD)?
On Thu, Sep 5, 2024 at 1:04 PM Wilfred Omondi via KICTANet < kictanet@lists.kictanet.or.ke> wrote:
Hi Liz,
From experience, once such a case is reported to a police station, the OCS/Deputy OCS should assign a DCI officer to investigate. The DCI officer should ask the court for a warrant/court order so that he/she can present to Safaricom for cooperation during the investigation.
If you don't get such a help from the police station, you can also go directly to the DCI office in Kiambu and an investigating officer should be able to help.
All the best.
On Thu, 5 Sept 2024, 10:38 Liz Orembo via KICTANet, < kictanet@lists.kictanet.or.ke> wrote:
> > Dear listers, > > See this case in twitter. A lady was carjacked, her phone stolen and > mpesa transferred to other numbers by thieves. Safaricom does not want to > reveal the beneficiary numbers for the criminal transactions to the > registered line owner. This is despite them going to Safaricom with an OB > number. > https://x.com/herine_lando/status/1831366028443709797?s=46 > > Question: > > 1. Is Safaricom justified to use data protection for its reason to > decline request for information? What’s the real intention of the DPA? > > 2. Where are consumer and data protection rights on the side of the > line owner? Esp where data protection policy is in conflict with consumer > interests? > > 3. The line infrastructure belongs to Safaricom, but who does the > transaction data belong to? And how do they share the responsibilities to > protect the data? > > 4. Are there laws to solve this situation in the interest of the > customer? Do we need to amend some? > > Best regards. > Liz. > > PGP ID: 0x1F3488BF > _______________________________________________ > KICTANet mailing list -- kictanet@lists.kictanet.or.ke > To unsubscribe send an email to kictanet-leave@lists.kictanet.or.ke > Unsubscribe or change your options at: > https://mm3-lists.kictanet.or.ke/mm/lists/kictanet.lists. > kictanet.or.ke/ > > Mailing List Posts Online: https://posts.kictanet.or.ke/ > > Twitter: https://twitter.com/KICTANet/ > Facebook: https://www.facebook.com/KICTANet/ > Instagram: https://www.instagram.com/KICTANet/ > LinkedIn: https://www.linkedin.com/company/kictanet/ > YouTube: https://www.youtube.com/channel/UCbcLVjnPtTGBEeYLGUb2Yow/ > WhatsApp Channel: https://whatsapp.com/channel/ > 0029VaQsX4w6mYPIctLsGh1K > > KICTANet is a multi-stakeholder Think Tank for people and > institutions interested and involved in ICT policy and regulation. > KICTANet is a catalyst for reform in the Information and > Communication Technology sector. Its work is guided by four pillars > of Policy Advocacy, Capacity Building, Research, and Stakeholder > Engagement. > > KICTANetiquette : Adhere to the same standards of acceptable > behaviors online that you follow in real life: respect people's > times and bandwidth, share knowledge, don't flame or abuse or > personalize, respect privacy, do not spam, do not market your > wares or qualifications. > > PRIVACY POLICY: See https://mm3-lists.kictanet.or. > ke/mm/lists/kictanet.lists.kictanet.or.ke/ > > KICTANet - The Power of Communities, is Kenya's premier ICT policy > engagement platform. > _______________________________________________ KICTANet mailing list -- kictanet@lists.kictanet.or.ke To unsubscribe send an email to kictanet-leave@lists.kictanet.or.ke Unsubscribe or change your options at: https://mm3-lists.kictanet.or. ke/mm/lists/kictanet.lists.kictanet.or.ke/
Mailing List Posts Online: https://posts.kictanet.or.ke/
Twitter: https://twitter.com/KICTANet/ Facebook: https://www.facebook.com/KICTANet/ Instagram: https://www.instagram.com/KICTANet/ LinkedIn: https://www.linkedin.com/company/kictanet/ YouTube: https://www.youtube.com/channel/UCbcLVjnPtTGBEeYLGUb2Yow/ WhatsApp Channel: https://whatsapp.com/channel/ 0029VaQsX4w6mYPIctLsGh1K
KICTANet is a multi-stakeholder Think Tank for people and institutions interested and involved in ICT policy and regulation. KICTANet is a catalyst for reform in the Information and Communication Technology sector. Its work is guided by four pillars of Policy Advocacy, Capacity Building, Research, and Stakeholder Engagement.
KICTANetiquette : Adhere to the same standards of acceptable behaviors online that you follow in real life: respect people's times and bandwidth, share knowledge, don't flame or abuse or personalize, respect privacy, do not spam, do not market your wares or qualifications.
PRIVACY POLICY: See https://mm3-lists.kictanet.or. ke/mm/lists/kictanet.lists.kictanet.or.ke/
KICTANet - The Power of Communities, is Kenya's premier ICT policy engagement platform.
--
--- *Cephas O.M *
_______________________________________________ KICTANet mailing list -- kictanet@lists.kictanet.or.ke To unsubscribe send an email to kictanet-leave@lists.kictanet.or.ke Unsubscribe or change your options at: https://mm3-lists.kictanet.or. ke/mm/lists/kictanet.lists.kictanet.or.ke/
Mailing List Posts Online: https://posts.kictanet.or.ke/
Twitter: https://twitter.com/KICTANet/ Facebook: https://www.facebook.com/KICTANet/ Instagram: https://www.instagram.com/KICTANet/ LinkedIn: https://www.linkedin.com/company/kictanet/ YouTube: https://www.youtube.com/channel/UCbcLVjnPtTGBEeYLGUb2Yow/ WhatsApp Channel: https://whatsapp.com/channel/ 0029VaQsX4w6mYPIctLsGh1K
KICTANet is a multi-stakeholder Think Tank for people and institutions interested and involved in ICT policy and regulation. KICTANet is a catalyst for reform in the Information and Communication Technology sector. Its work is guided by four pillars of Policy Advocacy, Capacity Building, Research, and Stakeholder Engagement.
KICTANetiquette : Adhere to the same standards of acceptable behaviors online that you follow in real life: respect people's times and bandwidth, share knowledge, don't flame or abuse or personalize, respect privacy, do not spam, do not market your wares or qualifications.
PRIVACY POLICY: See https://mm3-lists.kictanet.or. ke/mm/lists/kictanet.lists.kictanet.or.ke/
KICTANet - The Power of Communities, is Kenya's premier ICT policy engagement platform.
_______________________________________________ KICTANet mailing list -- kictanet@lists.kictanet.or.ke To unsubscribe send an email to kictanet-leave@lists.kictanet.or.ke Unsubscribe or change your options at: https://mm3-lists.kictanet.or. ke/mm/lists/kictanet.lists.kictanet.or.ke/
Mailing List Posts Online: https://posts.kictanet.or.ke/
Twitter: https://twitter.com/KICTANet/ Facebook: https://www.facebook.com/KICTANet/ Instagram: https://www.instagram.com/KICTANet/ LinkedIn: https://www.linkedin.com/company/kictanet/ YouTube: https://www.youtube.com/channel/UCbcLVjnPtTGBEeYLGUb2Yow/ WhatsApp Channel: https://whatsapp.com/channel/0029VaQsX4w6mYPIctLsGh1K
KICTANet is a multi-stakeholder Think Tank for people and institutions interested and involved in ICT policy and regulation. KICTANet is a catalyst for reform in the Information and Communication Technology sector. Its work is guided by four pillars of Policy Advocacy, Capacity Building, Research, and Stakeholder Engagement.
KICTANetiquette : Adhere to the same standards of acceptable behaviors online that you follow in real life: respect people's times and bandwidth, share knowledge, don't flame or abuse or personalize, respect privacy, do not spam, do not market your wares or qualifications.
PRIVACY POLICY: See https://mm3-lists.kictanet.or. ke/mm/lists/kictanet.lists.kictanet.or.ke/
KICTANet - The Power of Communities, is Kenya's premier ICT policy engagement platform.
_______________________________________________ KICTANet mailing list -- kictanet@lists.kictanet.or.ke To unsubscribe send an email to kictanet-leave@lists.kictanet.or.ke Unsubscribe or change your options at: https://mm3-lists.kictanet.or. ke/mm/lists/kictanet.lists.kictanet.or.ke/
Mailing List Posts Online: https://posts.kictanet.or.ke/
Twitter: https://twitter.com/KICTANet/ Facebook: https://www.facebook.com/KICTANet/ Instagram: https://www.instagram.com/KICTANet/ LinkedIn: https://www.linkedin.com/company/kictanet/ YouTube: https://www.youtube.com/channel/UCbcLVjnPtTGBEeYLGUb2Yow/ WhatsApp Channel: https://whatsapp.com/channel/0029VaQsX4w6mYPIctLsGh1K
KICTANet is a multi-stakeholder Think Tank for people and institutions interested and involved in ICT policy and regulation. KICTANet is a catalyst for reform in the Information and Communication Technology sector. Its work is guided by four pillars of Policy Advocacy, Capacity Building, Research, and Stakeholder Engagement.
KICTANetiquette : Adhere to the same standards of acceptable behaviors online that you follow in real life: respect people's times and bandwidth, share knowledge, don't flame or abuse or personalize, respect privacy, do not spam, do not market your wares or qualifications.
PRIVACY POLICY: See https://mm3-lists.kictanet.or. ke/mm/lists/kictanet.lists.kictanet.or.ke/
KICTANet - The Power of Communities, is Kenya's premier ICT policy engagement platform.
_______________________________________________ KICTANet mailing list -- kictanet@lists.kictanet.or.ke To unsubscribe send an email to kictanet-leave@lists.kictanet.or.ke Unsubscribe or change your options at: https://mm3-lists.kictanet.or. ke/mm/lists/kictanet.lists.kictanet.or.ke/
Mailing List Posts Online: https://posts.kictanet.or.ke/
Twitter: https://twitter.com/KICTANet/ Facebook: https://www.facebook.com/KICTANet/ Instagram: https://www.instagram.com/KICTANet/ LinkedIn: https://www.linkedin.com/company/kictanet/ YouTube: https://www.youtube.com/channel/UCbcLVjnPtTGBEeYLGUb2Yow/ WhatsApp Channel: https://whatsapp.com/channel/0029VaQsX4w6mYPIctLsGh1K
KICTANet is a multi-stakeholder Think Tank for people and institutions interested and involved in ICT policy and regulation. KICTANet is a catalyst for reform in the Information and Communication Technology sector. Its work is guided by four pillars of Policy Advocacy, Capacity Building, Research, and Stakeholder Engagement.
KICTANetiquette : Adhere to the same standards of acceptable behaviors online that you follow in real life: respect people's times and bandwidth, share knowledge, don't flame or abuse or personalize, respect privacy, do not spam, do not market your wares or qualifications.
PRIVACY POLICY: See https://mm3-lists.kictanet.or. ke/mm/lists/kictanet.lists.kictanet.or.ke/
KICTANet - The Power of Communities, is Kenya's premier ICT policy engagement platform.
-- Grace Mutung'u Skype: gracebomu @Bomu PGP ID : 807F57ACF469B0BB
Nic, Do you own the sim card or are a custodian of the Simcard, English is not my tongue. Regards On Thu, Sep 5, 2024 at 3:41 PM Nicodemus Nyakundi via KICTANet < kictanet@lists.kictanet.or.ke> wrote:
Thanks Ochieng for bringing up the point.
I had the same question in mind. That, I own the SIM card and presumably all transactions occurred through my line, either as a sender or receiver. Why then am I being denied the data I helped generate (in this case data of a SIM card that's mine)?
What difference would it be if I kept a list of all the transactions - including phone numbers? Would be against the DP Act to use such a list as a reference?
Regards, *Nicodemus Nyakundi* Digital Accessibility for PWDs *KICTANet* <https://www.kictanet.or.ke/>
KICTANet.or.ke <https://kictanet.or.ke/> | LinkedIn <https://www.linkedin.com/in/nicodemus-nyakundi-68a9a587/recent-activity/all/> | X <https://x.com/NicNyakundi> | Facebook <https://www.facebook.com/KICTANet/> | Instagram <https://www.instagram.com/kictanet/> | Youtube <https://www.youtube.com/channel/UCbcLVjnPtTGBEeYLGUb2Yow/videos> | TikTok <https://www.tiktok.com/@kictanet> | WhatsApp <https://whatsapp.com/channel/0029VaQsX4w6mYPIctLsGh1K>.
On Thu, 5 Sep 2024, 14:57 Ochieng A. Ogango via KICTANet, < kictanet@lists.kictanet.or.ke> wrote:
Cephas,
Why is it that Safaricom masks numbers on the statement, yet that information comes back to the account owner when you send money.
Why do I need a court order to get information that I already have?
*Kind regards,*
*Ochieng A. Ogango*
*Advocate, LLB (Hons), CPM(M.T.I)*
On Thu, Sep 5, 2024 at 1:38 PM Cephas Joseph via KICTANet < kictanet@lists.kictanet.or.ke> wrote:
Liz,
Kenya it is, but (un)fortunately Kenya also has that standard process of Police/DCI -> Court -> Safaricom for data access. Safaricom is a data custodian hence has obligations and accountability for any persons data, (illicit) beneficiary and owner too.
Two scenarios::
1. Full transparency by Saf to the owner, with the risk of exposure for (illicit) beneficiaries. Take a case where, even innocently, one accesses the unique MPESA statement code sent via SMS and authN to your statement. With numbers in plain text, what can they do?
2. With current masking, protecting beneficiaries numbers, when one accesses the unique MPESA statement code sent via SMS and authN to your statement, the masked numbers aren't useful for them. This covers both beneficiary privacy and assures Saf accountability.
Unfortunately, Safaricom would not place the privacy burden on the customer. DPA laws shift this labor to the org, aye? The criminals are also Saf's customers, you know!
I suppose visiting an official Saf Shop, for a thorough verification of customer ID, then being issued with the specific, limited data (cell nos.) needed might be a way? Or adopt a technical means, coded MPESA statement in app, with strignest security/privacy controls (TBD)?
On Thu, Sep 5, 2024 at 1:04 PM Wilfred Omondi via KICTANet < kictanet@lists.kictanet.or.ke> wrote:
Hi Liz,
From experience, once such a case is reported to a police station, the OCS/Deputy OCS should assign a DCI officer to investigate. The DCI officer should ask the court for a warrant/court order so that he/she can present to Safaricom for cooperation during the investigation.
If you don't get such a help from the police station, you can also go directly to the DCI office in Kiambu and an investigating officer should be able to help.
All the best.
On Thu, 5 Sept 2024, 10:38 Liz Orembo via KICTANet, < kictanet@lists.kictanet.or.ke> wrote:
Dear listers,
See this case in twitter. A lady was carjacked, her phone stolen and mpesa transferred to other numbers by thieves. Safaricom does not want to reveal the beneficiary numbers for the criminal transactions to the registered line owner. This is despite them going to Safaricom with an OB number. https://x.com/herine_lando/status/1831366028443709797?s=46
Question:
1. Is Safaricom justified to use data protection for its reason to decline request for information? What’s the real intention of the DPA?
2. Where are consumer and data protection rights on the side of the line owner? Esp where data protection policy is in conflict with consumer interests?
3. The line infrastructure belongs to Safaricom, but who does the transaction data belong to? And how do they share the responsibilities to protect the data?
4. Are there laws to solve this situation in the interest of the customer? Do we need to amend some?
Best regards. Liz.
PGP ID: 0x1F3488BF _______________________________________________ KICTANet mailing list -- kictanet@lists.kictanet.or.ke To unsubscribe send an email to kictanet-leave@lists.kictanet.or.ke Unsubscribe or change your options at: https://mm3-lists.kictanet.or.ke/mm/lists/kictanet.lists.kictanet.or.ke/
Mailing List Posts Online: https://posts.kictanet.or.ke/
Twitter: https://twitter.com/KICTANet/ Facebook: https://www.facebook.com/KICTANet/ Instagram: https://www.instagram.com/KICTANet/ LinkedIn: https://www.linkedin.com/company/kictanet/ YouTube: https://www.youtube.com/channel/UCbcLVjnPtTGBEeYLGUb2Yow/ WhatsApp Channel: https://whatsapp.com/channel/0029VaQsX4w6mYPIctLsGh1K
KICTANet is a multi-stakeholder Think Tank for people and institutions interested and involved in ICT policy and regulation. KICTANet is a catalyst for reform in the Information and Communication Technology sector. Its work is guided by four pillars of Policy Advocacy, Capacity Building, Research, and Stakeholder Engagement.
KICTANetiquette : Adhere to the same standards of acceptable behaviors online that you follow in real life: respect people's times and bandwidth, share knowledge, don't flame or abuse or personalize, respect privacy, do not spam, do not market your wares or qualifications.
PRIVACY POLICY: See https://mm3-lists.kictanet.or.ke/mm/lists/kictanet.lists.kictanet.or.ke/
KICTANet - The Power of Communities, is Kenya's premier ICT policy engagement platform.
_______________________________________________ KICTANet mailing list -- kictanet@lists.kictanet.or.ke To unsubscribe send an email to kictanet-leave@lists.kictanet.or.ke Unsubscribe or change your options at: https://mm3-lists.kictanet.or.ke/mm/lists/kictanet.lists.kictanet.or.ke/
Mailing List Posts Online: https://posts.kictanet.or.ke/
Twitter: https://twitter.com/KICTANet/ Facebook: https://www.facebook.com/KICTANet/ Instagram: https://www.instagram.com/KICTANet/ LinkedIn: https://www.linkedin.com/company/kictanet/ YouTube: https://www.youtube.com/channel/UCbcLVjnPtTGBEeYLGUb2Yow/ WhatsApp Channel: https://whatsapp.com/channel/0029VaQsX4w6mYPIctLsGh1K
KICTANet is a multi-stakeholder Think Tank for people and institutions interested and involved in ICT policy and regulation. KICTANet is a catalyst for reform in the Information and Communication Technology sector. Its work is guided by four pillars of Policy Advocacy, Capacity Building, Research, and Stakeholder Engagement.
KICTANetiquette : Adhere to the same standards of acceptable behaviors online that you follow in real life: respect people's times and bandwidth, share knowledge, don't flame or abuse or personalize, respect privacy, do not spam, do not market your wares or qualifications.
PRIVACY POLICY: See https://mm3-lists.kictanet.or.ke/mm/lists/kictanet.lists.kictanet.or.ke/
KICTANet - The Power of Communities, is Kenya's premier ICT policy engagement platform.
--
--- *Cephas O.M *
_______________________________________________ KICTANet mailing list -- kictanet@lists.kictanet.or.ke To unsubscribe send an email to kictanet-leave@lists.kictanet.or.ke Unsubscribe or change your options at: https://mm3-lists.kictanet.or.ke/mm/lists/kictanet.lists.kictanet.or.ke/
Mailing List Posts Online: https://posts.kictanet.or.ke/
Twitter: https://twitter.com/KICTANet/ Facebook: https://www.facebook.com/KICTANet/ Instagram: https://www.instagram.com/KICTANet/ LinkedIn: https://www.linkedin.com/company/kictanet/ YouTube: https://www.youtube.com/channel/UCbcLVjnPtTGBEeYLGUb2Yow/ WhatsApp Channel: https://whatsapp.com/channel/0029VaQsX4w6mYPIctLsGh1K
KICTANet is a multi-stakeholder Think Tank for people and institutions interested and involved in ICT policy and regulation. KICTANet is a catalyst for reform in the Information and Communication Technology sector. Its work is guided by four pillars of Policy Advocacy, Capacity Building, Research, and Stakeholder Engagement.
KICTANetiquette : Adhere to the same standards of acceptable behaviors online that you follow in real life: respect people's times and bandwidth, share knowledge, don't flame or abuse or personalize, respect privacy, do not spam, do not market your wares or qualifications.
PRIVACY POLICY: See https://mm3-lists.kictanet.or.ke/mm/lists/kictanet.lists.kictanet.or.ke/
KICTANet - The Power of Communities, is Kenya's premier ICT policy engagement platform.
_______________________________________________ KICTANet mailing list -- kictanet@lists.kictanet.or.ke To unsubscribe send an email to kictanet-leave@lists.kictanet.or.ke Unsubscribe or change your options at: https://mm3-lists.kictanet.or.ke/mm/lists/kictanet.lists.kictanet.or.ke/
Mailing List Posts Online: https://posts.kictanet.or.ke/
Twitter: https://twitter.com/KICTANet/ Facebook: https://www.facebook.com/KICTANet/ Instagram: https://www.instagram.com/KICTANet/ LinkedIn: https://www.linkedin.com/company/kictanet/ YouTube: https://www.youtube.com/channel/UCbcLVjnPtTGBEeYLGUb2Yow/ WhatsApp Channel: https://whatsapp.com/channel/0029VaQsX4w6mYPIctLsGh1K
KICTANet is a multi-stakeholder Think Tank for people and institutions interested and involved in ICT policy and regulation. KICTANet is a catalyst for reform in the Information and Communication Technology sector. Its work is guided by four pillars of Policy Advocacy, Capacity Building, Research, and Stakeholder Engagement.
KICTANetiquette : Adhere to the same standards of acceptable behaviors online that you follow in real life: respect people's times and bandwidth, share knowledge, don't flame or abuse or personalize, respect privacy, do not spam, do not market your wares or qualifications.
PRIVACY POLICY: See https://mm3-lists.kictanet.or.ke/mm/lists/kictanet.lists.kictanet.or.ke/
KICTANet - The Power of Communities, is Kenya's premier ICT policy engagement platform.
_______________________________________________ KICTANet mailing list -- kictanet@lists.kictanet.or.ke To unsubscribe send an email to kictanet-leave@lists.kictanet.or.ke Unsubscribe or change your options at: https://mm3-lists.kictanet.or.ke/mm/lists/kictanet.lists.kictanet.or.ke/
Mailing List Posts Online: https://posts.kictanet.or.ke/
Twitter: https://twitter.com/KICTANet/ Facebook: https://www.facebook.com/KICTANet/ Instagram: https://www.instagram.com/KICTANet/ LinkedIn: https://www.linkedin.com/company/kictanet/ YouTube: https://www.youtube.com/channel/UCbcLVjnPtTGBEeYLGUb2Yow/ WhatsApp Channel: https://whatsapp.com/channel/0029VaQsX4w6mYPIctLsGh1K
KICTANet is a multi-stakeholder Think Tank for people and institutions interested and involved in ICT policy and regulation. KICTANet is a catalyst for reform in the Information and Communication Technology sector. Its work is guided by four pillars of Policy Advocacy, Capacity Building, Research, and Stakeholder Engagement.
KICTANetiquette : Adhere to the same standards of acceptable behaviors online that you follow in real life: respect people's times and bandwidth, share knowledge, don't flame or abuse or personalize, respect privacy, do not spam, do not market your wares or qualifications.
PRIVACY POLICY: See https://mm3-lists.kictanet.or.ke/mm/lists/kictanet.lists.kictanet.or.ke/
KICTANet - The Power of Communities, is Kenya's premier ICT policy engagement platform.
-- *Barrack Otieno* *Trustee* *Kenya ICT Action Network (KICTAnet)* *Skype:barrack.otieno* *+254721325277* *https://www.linkedin.com/in/barrack-otieno-2101262b/ <https://www.linkedin.com/in/barrack-otieno-2101262b/>* *www.kictanet.or.ke <http://www.kictanet.or.ke>*
Guys This is actually very simple:- My sister was Carjacked a few days ago Robbed off everything like everything Tell me why @SafaricomPLC <https://x.com/SafaricomPLC> You are refusing to give us complete mpesa statements of the monies that was sent to unknown numbers !!? I sympathize with the situation above. Unfortunately, the fact of the matter is that Safaricom can't just give out information about its customers - even the criminal type. This will create a very dangerous precedent. There is a reason there are processes for this. - Report to the police, OB Number, and Police to follow through to get the details from Safaricom, investigations, arrest, court, etc. Safaricom simply can't give me the number or details of any client simply by asking for it. Whatever the reason. Regards *Ali Hussein* Fintech | Digital Transformation Tel: +254 713 601113 Twitter: @AliHKassim LinkedIn: Ali's Profile <http://ke.linkedin.com/in/alihkassim> <http://ke.linkedin.com/in/alihkassim> Any information of a personal nature expressed in this email are purely mine and do not necessarily reflect the official positions of the organizations that I work with. On Thu, Sep 5, 2024 at 2:57 PM Ochieng A. Ogango via KICTANet < kictanet@lists.kictanet.or.ke> wrote:
Cephas,
Why is it that Safaricom masks numbers on the statement, yet that information comes back to the account owner when you send money.
Why do I need a court order to get information that I already have?
*Kind regards,*
*Ochieng A. Ogango*
*Advocate, LLB (Hons), CPM(M.T.I)*
On Thu, Sep 5, 2024 at 1:38 PM Cephas Joseph via KICTANet < kictanet@lists.kictanet.or.ke> wrote:
Liz,
Kenya it is, but (un)fortunately Kenya also has that standard process of Police/DCI -> Court -> Safaricom for data access. Safaricom is a data custodian hence has obligations and accountability for any persons data, (illicit) beneficiary and owner too.
Two scenarios::
1. Full transparency by Saf to the owner, with the risk of exposure for (illicit) beneficiaries. Take a case where, even innocently, one accesses the unique MPESA statement code sent via SMS and authN to your statement. With numbers in plain text, what can they do?
2. With current masking, protecting beneficiaries numbers, when one accesses the unique MPESA statement code sent via SMS and authN to your statement, the masked numbers aren't useful for them. This covers both beneficiary privacy and assures Saf accountability.
Unfortunately, Safaricom would not place the privacy burden on the customer. DPA laws shift this labor to the org, aye? The criminals are also Saf's customers, you know!
I suppose visiting an official Saf Shop, for a thorough verification of customer ID, then being issued with the specific, limited data (cell nos.) needed might be a way? Or adopt a technical means, coded MPESA statement in app, with strignest security/privacy controls (TBD)?
On Thu, Sep 5, 2024 at 1:04 PM Wilfred Omondi via KICTANet < kictanet@lists.kictanet.or.ke> wrote:
Hi Liz,
From experience, once such a case is reported to a police station, the OCS/Deputy OCS should assign a DCI officer to investigate. The DCI officer should ask the court for a warrant/court order so that he/she can present to Safaricom for cooperation during the investigation.
If you don't get such a help from the police station, you can also go directly to the DCI office in Kiambu and an investigating officer should be able to help.
All the best.
On Thu, 5 Sept 2024, 10:38 Liz Orembo via KICTANet, < kictanet@lists.kictanet.or.ke> wrote:
Dear listers,
See this case in twitter. A lady was carjacked, her phone stolen and mpesa transferred to other numbers by thieves. Safaricom does not want to reveal the beneficiary numbers for the criminal transactions to the registered line owner. This is despite them going to Safaricom with an OB number. https://x.com/herine_lando/status/1831366028443709797?s=46
Question:
1. Is Safaricom justified to use data protection for its reason to decline request for information? What’s the real intention of the DPA?
2. Where are consumer and data protection rights on the side of the line owner? Esp where data protection policy is in conflict with consumer interests?
3. The line infrastructure belongs to Safaricom, but who does the transaction data belong to? And how do they share the responsibilities to protect the data?
4. Are there laws to solve this situation in the interest of the customer? Do we need to amend some?
Best regards. Liz.
PGP ID: 0x1F3488BF _______________________________________________ KICTANet mailing list -- kictanet@lists.kictanet.or.ke To unsubscribe send an email to kictanet-leave@lists.kictanet.or.ke Unsubscribe or change your options at: https://mm3-lists.kictanet.or.ke/mm/lists/kictanet.lists.kictanet.or.ke/
Mailing List Posts Online: https://posts.kictanet.or.ke/
Twitter: https://twitter.com/KICTANet/ Facebook: https://www.facebook.com/KICTANet/ Instagram: https://www.instagram.com/KICTANet/ LinkedIn: https://www.linkedin.com/company/kictanet/ YouTube: https://www.youtube.com/channel/UCbcLVjnPtTGBEeYLGUb2Yow/ WhatsApp Channel: https://whatsapp.com/channel/0029VaQsX4w6mYPIctLsGh1K
KICTANet is a multi-stakeholder Think Tank for people and institutions interested and involved in ICT policy and regulation. KICTANet is a catalyst for reform in the Information and Communication Technology sector. Its work is guided by four pillars of Policy Advocacy, Capacity Building, Research, and Stakeholder Engagement.
KICTANetiquette : Adhere to the same standards of acceptable behaviors online that you follow in real life: respect people's times and bandwidth, share knowledge, don't flame or abuse or personalize, respect privacy, do not spam, do not market your wares or qualifications.
PRIVACY POLICY: See https://mm3-lists.kictanet.or.ke/mm/lists/kictanet.lists.kictanet.or.ke/
KICTANet - The Power of Communities, is Kenya's premier ICT policy engagement platform.
_______________________________________________ KICTANet mailing list -- kictanet@lists.kictanet.or.ke To unsubscribe send an email to kictanet-leave@lists.kictanet.or.ke Unsubscribe or change your options at: https://mm3-lists.kictanet.or.ke/mm/lists/kictanet.lists.kictanet.or.ke/
Mailing List Posts Online: https://posts.kictanet.or.ke/
Twitter: https://twitter.com/KICTANet/ Facebook: https://www.facebook.com/KICTANet/ Instagram: https://www.instagram.com/KICTANet/ LinkedIn: https://www.linkedin.com/company/kictanet/ YouTube: https://www.youtube.com/channel/UCbcLVjnPtTGBEeYLGUb2Yow/ WhatsApp Channel: https://whatsapp.com/channel/0029VaQsX4w6mYPIctLsGh1K
KICTANet is a multi-stakeholder Think Tank for people and institutions interested and involved in ICT policy and regulation. KICTANet is a catalyst for reform in the Information and Communication Technology sector. Its work is guided by four pillars of Policy Advocacy, Capacity Building, Research, and Stakeholder Engagement.
KICTANetiquette : Adhere to the same standards of acceptable behaviors online that you follow in real life: respect people's times and bandwidth, share knowledge, don't flame or abuse or personalize, respect privacy, do not spam, do not market your wares or qualifications.
PRIVACY POLICY: See https://mm3-lists.kictanet.or.ke/mm/lists/kictanet.lists.kictanet.or.ke/
KICTANet - The Power of Communities, is Kenya's premier ICT policy engagement platform.
--
--- *Cephas O.M *
_______________________________________________ KICTANet mailing list -- kictanet@lists.kictanet.or.ke To unsubscribe send an email to kictanet-leave@lists.kictanet.or.ke Unsubscribe or change your options at: https://mm3-lists.kictanet.or.ke/mm/lists/kictanet.lists.kictanet.or.ke/
Mailing List Posts Online: https://posts.kictanet.or.ke/
Twitter: https://twitter.com/KICTANet/ Facebook: https://www.facebook.com/KICTANet/ Instagram: https://www.instagram.com/KICTANet/ LinkedIn: https://www.linkedin.com/company/kictanet/ YouTube: https://www.youtube.com/channel/UCbcLVjnPtTGBEeYLGUb2Yow/ WhatsApp Channel: https://whatsapp.com/channel/0029VaQsX4w6mYPIctLsGh1K
KICTANet is a multi-stakeholder Think Tank for people and institutions interested and involved in ICT policy and regulation. KICTANet is a catalyst for reform in the Information and Communication Technology sector. Its work is guided by four pillars of Policy Advocacy, Capacity Building, Research, and Stakeholder Engagement.
KICTANetiquette : Adhere to the same standards of acceptable behaviors online that you follow in real life: respect people's times and bandwidth, share knowledge, don't flame or abuse or personalize, respect privacy, do not spam, do not market your wares or qualifications.
PRIVACY POLICY: See https://mm3-lists.kictanet.or.ke/mm/lists/kictanet.lists.kictanet.or.ke/
KICTANet - The Power of Communities, is Kenya's premier ICT policy engagement platform.
_______________________________________________ KICTANet mailing list -- kictanet@lists.kictanet.or.ke To unsubscribe send an email to kictanet-leave@lists.kictanet.or.ke Unsubscribe or change your options at: https://mm3-lists.kictanet.or.ke/mm/lists/kictanet.lists.kictanet.or.ke/
Mailing List Posts Online: https://posts.kictanet.or.ke/
Twitter: https://twitter.com/KICTANet/ Facebook: https://www.facebook.com/KICTANet/ Instagram: https://www.instagram.com/KICTANet/ LinkedIn: https://www.linkedin.com/company/kictanet/ YouTube: https://www.youtube.com/channel/UCbcLVjnPtTGBEeYLGUb2Yow/ WhatsApp Channel: https://whatsapp.com/channel/0029VaQsX4w6mYPIctLsGh1K
KICTANet is a multi-stakeholder Think Tank for people and institutions interested and involved in ICT policy and regulation. KICTANet is a catalyst for reform in the Information and Communication Technology sector. Its work is guided by four pillars of Policy Advocacy, Capacity Building, Research, and Stakeholder Engagement.
KICTANetiquette : Adhere to the same standards of acceptable behaviors online that you follow in real life: respect people's times and bandwidth, share knowledge, don't flame or abuse or personalize, respect privacy, do not spam, do not market your wares or qualifications.
PRIVACY POLICY: See https://mm3-lists.kictanet.or.ke/mm/lists/kictanet.lists.kictanet.or.ke/
KICTANet - The Power of Communities, is Kenya's premier ICT policy engagement platform.
The processes are punitive, tideous and an avenue for extortion. For the police to follow thro, you have to pay bribes or forget the whole thing. On Fri, Sep 6, 2024 at 1:49 PM Ali Hussein via KICTANet < kictanet@lists.kictanet.or.ke> wrote:
Guys
This is actually very simple:-
My sister was Carjacked a few days ago Robbed off everything like everything Tell me why @SafaricomPLC <https://x.com/SafaricomPLC> You are refusing to give us complete mpesa statements of the monies that was sent to unknown numbers !!?
I sympathize with the situation above. Unfortunately, the fact of the matter is that Safaricom can't just give out information about its customers - even the criminal type. This will create a very dangerous precedent. There is a reason there are processes for this. - Report to the police, OB Number, and Police to follow through to get the details from Safaricom, investigations, arrest, court, etc. Safaricom simply can't give me the number or details of any client simply by asking for it. Whatever the reason.
Regards
*Ali Hussein*
Fintech | Digital Transformation
Tel: +254 713 601113
Twitter: @AliHKassim
LinkedIn: Ali's Profile <http://ke.linkedin.com/in/alihkassim> <http://ke.linkedin.com/in/alihkassim>
Any information of a personal nature expressed in this email are purely mine and do not necessarily reflect the official positions of the organizations that I work with.
On Thu, Sep 5, 2024 at 2:57 PM Ochieng A. Ogango via KICTANet < kictanet@lists.kictanet.or.ke> wrote:
Cephas,
Why is it that Safaricom masks numbers on the statement, yet that information comes back to the account owner when you send money.
Why do I need a court order to get information that I already have?
*Kind regards,*
*Ochieng A. Ogango*
*Advocate, LLB (Hons), CPM(M.T.I)*
On Thu, Sep 5, 2024 at 1:38 PM Cephas Joseph via KICTANet < kictanet@lists.kictanet.or.ke> wrote:
Liz,
Kenya it is, but (un)fortunately Kenya also has that standard process of Police/DCI -> Court -> Safaricom for data access. Safaricom is a data custodian hence has obligations and accountability for any persons data, (illicit) beneficiary and owner too.
Two scenarios::
1. Full transparency by Saf to the owner, with the risk of exposure for (illicit) beneficiaries. Take a case where, even innocently, one accesses the unique MPESA statement code sent via SMS and authN to your statement. With numbers in plain text, what can they do?
2. With current masking, protecting beneficiaries numbers, when one accesses the unique MPESA statement code sent via SMS and authN to your statement, the masked numbers aren't useful for them. This covers both beneficiary privacy and assures Saf accountability.
Unfortunately, Safaricom would not place the privacy burden on the customer. DPA laws shift this labor to the org, aye? The criminals are also Saf's customers, you know!
I suppose visiting an official Saf Shop, for a thorough verification of customer ID, then being issued with the specific, limited data (cell nos.) needed might be a way? Or adopt a technical means, coded MPESA statement in app, with strignest security/privacy controls (TBD)?
On Thu, Sep 5, 2024 at 1:04 PM Wilfred Omondi via KICTANet < kictanet@lists.kictanet.or.ke> wrote:
Hi Liz,
From experience, once such a case is reported to a police station, the OCS/Deputy OCS should assign a DCI officer to investigate. The DCI officer should ask the court for a warrant/court order so that he/she can present to Safaricom for cooperation during the investigation.
If you don't get such a help from the police station, you can also go directly to the DCI office in Kiambu and an investigating officer should be able to help.
All the best.
On Thu, 5 Sept 2024, 10:38 Liz Orembo via KICTANet, < kictanet@lists.kictanet.or.ke> wrote:
Dear listers,
See this case in twitter. A lady was carjacked, her phone stolen and mpesa transferred to other numbers by thieves. Safaricom does not want to reveal the beneficiary numbers for the criminal transactions to the registered line owner. This is despite them going to Safaricom with an OB number. https://x.com/herine_lando/status/1831366028443709797?s=46
Question:
1. Is Safaricom justified to use data protection for its reason to decline request for information? What’s the real intention of the DPA?
2. Where are consumer and data protection rights on the side of the line owner? Esp where data protection policy is in conflict with consumer interests?
3. The line infrastructure belongs to Safaricom, but who does the transaction data belong to? And how do they share the responsibilities to protect the data?
4. Are there laws to solve this situation in the interest of the customer? Do we need to amend some?
Best regards. Liz.
PGP ID: 0x1F3488BF _______________________________________________ KICTANet mailing list -- kictanet@lists.kictanet.or.ke To unsubscribe send an email to kictanet-leave@lists.kictanet.or.ke Unsubscribe or change your options at: https://mm3-lists.kictanet.or.ke/mm/lists/kictanet.lists.kictanet.or.ke/
Mailing List Posts Online: https://posts.kictanet.or.ke/
Twitter: https://twitter.com/KICTANet/ Facebook: https://www.facebook.com/KICTANet/ Instagram: https://www.instagram.com/KICTANet/ LinkedIn: https://www.linkedin.com/company/kictanet/ YouTube: https://www.youtube.com/channel/UCbcLVjnPtTGBEeYLGUb2Yow/ WhatsApp Channel: https://whatsapp.com/channel/0029VaQsX4w6mYPIctLsGh1K
KICTANet is a multi-stakeholder Think Tank for people and institutions interested and involved in ICT policy and regulation. KICTANet is a catalyst for reform in the Information and Communication Technology sector. Its work is guided by four pillars of Policy Advocacy, Capacity Building, Research, and Stakeholder Engagement.
KICTANetiquette : Adhere to the same standards of acceptable behaviors online that you follow in real life: respect people's times and bandwidth, share knowledge, don't flame or abuse or personalize, respect privacy, do not spam, do not market your wares or qualifications.
PRIVACY POLICY: See https://mm3-lists.kictanet.or.ke/mm/lists/kictanet.lists.kictanet.or.ke/
KICTANet - The Power of Communities, is Kenya's premier ICT policy engagement platform.
_______________________________________________ KICTANet mailing list -- kictanet@lists.kictanet.or.ke To unsubscribe send an email to kictanet-leave@lists.kictanet.or.ke Unsubscribe or change your options at: https://mm3-lists.kictanet.or.ke/mm/lists/kictanet.lists.kictanet.or.ke/
Mailing List Posts Online: https://posts.kictanet.or.ke/
Twitter: https://twitter.com/KICTANet/ Facebook: https://www.facebook.com/KICTANet/ Instagram: https://www.instagram.com/KICTANet/ LinkedIn: https://www.linkedin.com/company/kictanet/ YouTube: https://www.youtube.com/channel/UCbcLVjnPtTGBEeYLGUb2Yow/ WhatsApp Channel: https://whatsapp.com/channel/0029VaQsX4w6mYPIctLsGh1K
KICTANet is a multi-stakeholder Think Tank for people and institutions interested and involved in ICT policy and regulation. KICTANet is a catalyst for reform in the Information and Communication Technology sector. Its work is guided by four pillars of Policy Advocacy, Capacity Building, Research, and Stakeholder Engagement.
KICTANetiquette : Adhere to the same standards of acceptable behaviors online that you follow in real life: respect people's times and bandwidth, share knowledge, don't flame or abuse or personalize, respect privacy, do not spam, do not market your wares or qualifications.
PRIVACY POLICY: See https://mm3-lists.kictanet.or.ke/mm/lists/kictanet.lists.kictanet.or.ke/
KICTANet - The Power of Communities, is Kenya's premier ICT policy engagement platform.
--
--- *Cephas O.M *
_______________________________________________ KICTANet mailing list -- kictanet@lists.kictanet.or.ke To unsubscribe send an email to kictanet-leave@lists.kictanet.or.ke Unsubscribe or change your options at: https://mm3-lists.kictanet.or.ke/mm/lists/kictanet.lists.kictanet.or.ke/
Mailing List Posts Online: https://posts.kictanet.or.ke/
Twitter: https://twitter.com/KICTANet/ Facebook: https://www.facebook.com/KICTANet/ Instagram: https://www.instagram.com/KICTANet/ LinkedIn: https://www.linkedin.com/company/kictanet/ YouTube: https://www.youtube.com/channel/UCbcLVjnPtTGBEeYLGUb2Yow/ WhatsApp Channel: https://whatsapp.com/channel/0029VaQsX4w6mYPIctLsGh1K
KICTANet is a multi-stakeholder Think Tank for people and institutions interested and involved in ICT policy and regulation. KICTANet is a catalyst for reform in the Information and Communication Technology sector. Its work is guided by four pillars of Policy Advocacy, Capacity Building, Research, and Stakeholder Engagement.
KICTANetiquette : Adhere to the same standards of acceptable behaviors online that you follow in real life: respect people's times and bandwidth, share knowledge, don't flame or abuse or personalize, respect privacy, do not spam, do not market your wares or qualifications.
PRIVACY POLICY: See https://mm3-lists.kictanet.or.ke/mm/lists/kictanet.lists.kictanet.or.ke/
KICTANet - The Power of Communities, is Kenya's premier ICT policy engagement platform.
_______________________________________________ KICTANet mailing list -- kictanet@lists.kictanet.or.ke To unsubscribe send an email to kictanet-leave@lists.kictanet.or.ke Unsubscribe or change your options at: https://mm3-lists.kictanet.or.ke/mm/lists/kictanet.lists.kictanet.or.ke/
Mailing List Posts Online: https://posts.kictanet.or.ke/
Twitter: https://twitter.com/KICTANet/ Facebook: https://www.facebook.com/KICTANet/ Instagram: https://www.instagram.com/KICTANet/ LinkedIn: https://www.linkedin.com/company/kictanet/ YouTube: https://www.youtube.com/channel/UCbcLVjnPtTGBEeYLGUb2Yow/ WhatsApp Channel: https://whatsapp.com/channel/0029VaQsX4w6mYPIctLsGh1K
KICTANet is a multi-stakeholder Think Tank for people and institutions interested and involved in ICT policy and regulation. KICTANet is a catalyst for reform in the Information and Communication Technology sector. Its work is guided by four pillars of Policy Advocacy, Capacity Building, Research, and Stakeholder Engagement.
KICTANetiquette : Adhere to the same standards of acceptable behaviors online that you follow in real life: respect people's times and bandwidth, share knowledge, don't flame or abuse or personalize, respect privacy, do not spam, do not market your wares or qualifications.
PRIVACY POLICY: See https://mm3-lists.kictanet.or.ke/mm/lists/kictanet.lists.kictanet.or.ke/
KICTANet - The Power of Communities, is Kenya's premier ICT policy engagement platform.
_______________________________________________ KICTANet mailing list -- kictanet@lists.kictanet.or.ke To unsubscribe send an email to kictanet-leave@lists.kictanet.or.ke Unsubscribe or change your options at: https://mm3-lists.kictanet.or.ke/mm/lists/kictanet.lists.kictanet.or.ke/
Mailing List Posts Online: https://posts.kictanet.or.ke/
Twitter: https://twitter.com/KICTANet/ Facebook: https://www.facebook.com/KICTANet/ Instagram: https://www.instagram.com/KICTANet/ LinkedIn: https://www.linkedin.com/company/kictanet/ YouTube: https://www.youtube.com/channel/UCbcLVjnPtTGBEeYLGUb2Yow/ WhatsApp Channel: https://whatsapp.com/channel/0029VaQsX4w6mYPIctLsGh1K
KICTANet is a multi-stakeholder Think Tank for people and institutions interested and involved in ICT policy and regulation. KICTANet is a catalyst for reform in the Information and Communication Technology sector. Its work is guided by four pillars of Policy Advocacy, Capacity Building, Research, and Stakeholder Engagement.
KICTANetiquette : Adhere to the same standards of acceptable behaviors online that you follow in real life: respect people's times and bandwidth, share knowledge, don't flame or abuse or personalize, respect privacy, do not spam, do not market your wares or qualifications.
PRIVACY POLICY: See https://mm3-lists.kictanet.or.ke/mm/lists/kictanet.lists.kictanet.or.ke/
KICTANet - The Power of Communities, is Kenya's premier ICT policy engagement platform.
Does Data Protection mean me being protected from my own data or me being enabled to protect my data? Remember data is embodied, creates a data double of a person and they have the rights to control how this looks like. Question 2. There’s a lot of ‘things work this way, so let them continue.’ Well is it fair to the people experiencing this? Should we leave it because it creates bad precedent or should we try to balance the areas of policy conflict to serve the public. 3. The police does nothing, the DCI does nothing, Safaricom also does nothing. In short, when you’re robbed through your phone which leaves digital tracks, you’re the one with the responsibility to go helter skelter looking for justice, when the answer to these cases are on people’s noses. Best regards. Liz. PGP ID: 0x1F3488BF On Fri, 6 Sep 2024 at 16:50, Johnsey Kivoto via KICTANet < kictanet@lists.kictanet.or.ke> wrote:
The processes are punitive, tideous and an avenue for extortion. For the police to follow thro, you have to pay bribes or forget the whole thing.
On Fri, Sep 6, 2024 at 1:49 PM Ali Hussein via KICTANet < kictanet@lists.kictanet.or.ke> wrote:
Guys
This is actually very simple:-
My sister was Carjacked a few days ago Robbed off everything like everything Tell me why @SafaricomPLC <https://x.com/SafaricomPLC> You are refusing to give us complete mpesa statements of the monies that was sent to unknown numbers !!?
I sympathize with the situation above. Unfortunately, the fact of the matter is that Safaricom can't just give out information about its customers - even the criminal type. This will create a very dangerous precedent. There is a reason there are processes for this. - Report to the police, OB Number, and Police to follow through to get the details from Safaricom, investigations, arrest, court, etc. Safaricom simply can't give me the number or details of any client simply by asking for it. Whatever the reason.
Regards
*Ali Hussein*
Fintech | Digital Transformation
Tel: +254 713 601113
Twitter: @AliHKassim
LinkedIn: Ali's Profile <http://ke.linkedin.com/in/alihkassim> <http://ke.linkedin.com/in/alihkassim>
Any information of a personal nature expressed in this email are purely mine and do not necessarily reflect the official positions of the organizations that I work with.
On Thu, Sep 5, 2024 at 2:57 PM Ochieng A. Ogango via KICTANet < kictanet@lists.kictanet.or.ke> wrote:
Cephas,
Why is it that Safaricom masks numbers on the statement, yet that information comes back to the account owner when you send money.
Why do I need a court order to get information that I already have?
*Kind regards,*
*Ochieng A. Ogango*
*Advocate, LLB (Hons), CPM(M.T.I)*
On Thu, Sep 5, 2024 at 1:38 PM Cephas Joseph via KICTANet < kictanet@lists.kictanet.or.ke> wrote:
Liz,
Kenya it is, but (un)fortunately Kenya also has that standard process of Police/DCI -> Court -> Safaricom for data access. Safaricom is a data custodian hence has obligations and accountability for any persons data, (illicit) beneficiary and owner too.
Two scenarios::
1. Full transparency by Saf to the owner, with the risk of exposure for (illicit) beneficiaries. Take a case where, even innocently, one accesses the unique MPESA statement code sent via SMS and authN to your statement. With numbers in plain text, what can they do?
2. With current masking, protecting beneficiaries numbers, when one accesses the unique MPESA statement code sent via SMS and authN to your statement, the masked numbers aren't useful for them. This covers both beneficiary privacy and assures Saf accountability.
Unfortunately, Safaricom would not place the privacy burden on the customer. DPA laws shift this labor to the org, aye? The criminals are also Saf's customers, you know!
I suppose visiting an official Saf Shop, for a thorough verification of customer ID, then being issued with the specific, limited data (cell nos.) needed might be a way? Or adopt a technical means, coded MPESA statement in app, with strignest security/privacy controls (TBD)?
On Thu, Sep 5, 2024 at 1:04 PM Wilfred Omondi via KICTANet < kictanet@lists.kictanet.or.ke> wrote:
Hi Liz,
From experience, once such a case is reported to a police station, the OCS/Deputy OCS should assign a DCI officer to investigate. The DCI officer should ask the court for a warrant/court order so that he/she can present to Safaricom for cooperation during the investigation.
If you don't get such a help from the police station, you can also go directly to the DCI office in Kiambu and an investigating officer should be able to help.
All the best.
On Thu, 5 Sept 2024, 10:38 Liz Orembo via KICTANet, < kictanet@lists.kictanet.or.ke> wrote:
Dear listers,
See this case in twitter. A lady was carjacked, her phone stolen and mpesa transferred to other numbers by thieves. Safaricom does not want to reveal the beneficiary numbers for the criminal transactions to the registered line owner. This is despite them going to Safaricom with an OB number. https://x.com/herine_lando/status/1831366028443709797?s=46
Question:
1. Is Safaricom justified to use data protection for its reason to decline request for information? What’s the real intention of the DPA?
2. Where are consumer and data protection rights on the side of the line owner? Esp where data protection policy is in conflict with consumer interests?
3. The line infrastructure belongs to Safaricom, but who does the transaction data belong to? And how do they share the responsibilities to protect the data?
4. Are there laws to solve this situation in the interest of the customer? Do we need to amend some?
Best regards. Liz.
PGP ID: 0x1F3488BF _______________________________________________ KICTANet mailing list -- kictanet@lists.kictanet.or.ke To unsubscribe send an email to kictanet-leave@lists.kictanet.or.ke Unsubscribe or change your options at: https://mm3-lists.kictanet.or.ke/mm/lists/kictanet.lists.kictanet.or.ke/
Mailing List Posts Online: https://posts.kictanet.or.ke/
Twitter: https://twitter.com/KICTANet/ Facebook: https://www.facebook.com/KICTANet/ Instagram: https://www.instagram.com/KICTANet/ LinkedIn: https://www.linkedin.com/company/kictanet/ YouTube: https://www.youtube.com/channel/UCbcLVjnPtTGBEeYLGUb2Yow/ WhatsApp Channel: https://whatsapp.com/channel/0029VaQsX4w6mYPIctLsGh1K
KICTANet is a multi-stakeholder Think Tank for people and institutions interested and involved in ICT policy and regulation. KICTANet is a catalyst for reform in the Information and Communication Technology sector. Its work is guided by four pillars of Policy Advocacy, Capacity Building, Research, and Stakeholder Engagement.
KICTANetiquette : Adhere to the same standards of acceptable behaviors online that you follow in real life: respect people's times and bandwidth, share knowledge, don't flame or abuse or personalize, respect privacy, do not spam, do not market your wares or qualifications.
PRIVACY POLICY: See https://mm3-lists.kictanet.or.ke/mm/lists/kictanet.lists.kictanet.or.ke/
KICTANet - The Power of Communities, is Kenya's premier ICT policy engagement platform.
_______________________________________________ KICTANet mailing list -- kictanet@lists.kictanet.or.ke To unsubscribe send an email to kictanet-leave@lists.kictanet.or.ke Unsubscribe or change your options at: https://mm3-lists.kictanet.or.ke/mm/lists/kictanet.lists.kictanet.or.ke/
Mailing List Posts Online: https://posts.kictanet.or.ke/
Twitter: https://twitter.com/KICTANet/ Facebook: https://www.facebook.com/KICTANet/ Instagram: https://www.instagram.com/KICTANet/ LinkedIn: https://www.linkedin.com/company/kictanet/ YouTube: https://www.youtube.com/channel/UCbcLVjnPtTGBEeYLGUb2Yow/ WhatsApp Channel: https://whatsapp.com/channel/0029VaQsX4w6mYPIctLsGh1K
KICTANet is a multi-stakeholder Think Tank for people and institutions interested and involved in ICT policy and regulation. KICTANet is a catalyst for reform in the Information and Communication Technology sector. Its work is guided by four pillars of Policy Advocacy, Capacity Building, Research, and Stakeholder Engagement.
KICTANetiquette : Adhere to the same standards of acceptable behaviors online that you follow in real life: respect people's times and bandwidth, share knowledge, don't flame or abuse or personalize, respect privacy, do not spam, do not market your wares or qualifications.
PRIVACY POLICY: See https://mm3-lists.kictanet.or.ke/mm/lists/kictanet.lists.kictanet.or.ke/
KICTANet - The Power of Communities, is Kenya's premier ICT policy engagement platform.
--
--- *Cephas O.M *
_______________________________________________ KICTANet mailing list -- kictanet@lists.kictanet.or.ke To unsubscribe send an email to kictanet-leave@lists.kictanet.or.ke Unsubscribe or change your options at: https://mm3-lists.kictanet.or.ke/mm/lists/kictanet.lists.kictanet.or.ke/
Mailing List Posts Online: https://posts.kictanet.or.ke/
Twitter: https://twitter.com/KICTANet/ Facebook: https://www.facebook.com/KICTANet/ Instagram: https://www.instagram.com/KICTANet/ LinkedIn: https://www.linkedin.com/company/kictanet/ YouTube: https://www.youtube.com/channel/UCbcLVjnPtTGBEeYLGUb2Yow/ WhatsApp Channel: https://whatsapp.com/channel/0029VaQsX4w6mYPIctLsGh1K
KICTANet is a multi-stakeholder Think Tank for people and institutions interested and involved in ICT policy and regulation. KICTANet is a catalyst for reform in the Information and Communication Technology sector. Its work is guided by four pillars of Policy Advocacy, Capacity Building, Research, and Stakeholder Engagement.
KICTANetiquette : Adhere to the same standards of acceptable behaviors online that you follow in real life: respect people's times and bandwidth, share knowledge, don't flame or abuse or personalize, respect privacy, do not spam, do not market your wares or qualifications.
PRIVACY POLICY: See https://mm3-lists.kictanet.or.ke/mm/lists/kictanet.lists.kictanet.or.ke/
KICTANet - The Power of Communities, is Kenya's premier ICT policy engagement platform.
_______________________________________________ KICTANet mailing list -- kictanet@lists.kictanet.or.ke To unsubscribe send an email to kictanet-leave@lists.kictanet.or.ke Unsubscribe or change your options at: https://mm3-lists.kictanet.or.ke/mm/lists/kictanet.lists.kictanet.or.ke/
Mailing List Posts Online: https://posts.kictanet.or.ke/
Twitter: https://twitter.com/KICTANet/ Facebook: https://www.facebook.com/KICTANet/ Instagram: https://www.instagram.com/KICTANet/ LinkedIn: https://www.linkedin.com/company/kictanet/ YouTube: https://www.youtube.com/channel/UCbcLVjnPtTGBEeYLGUb2Yow/ WhatsApp Channel: https://whatsapp.com/channel/0029VaQsX4w6mYPIctLsGh1K
KICTANet is a multi-stakeholder Think Tank for people and institutions interested and involved in ICT policy and regulation. KICTANet is a catalyst for reform in the Information and Communication Technology sector. Its work is guided by four pillars of Policy Advocacy, Capacity Building, Research, and Stakeholder Engagement.
KICTANetiquette : Adhere to the same standards of acceptable behaviors online that you follow in real life: respect people's times and bandwidth, share knowledge, don't flame or abuse or personalize, respect privacy, do not spam, do not market your wares or qualifications.
PRIVACY POLICY: See https://mm3-lists.kictanet.or.ke/mm/lists/kictanet.lists.kictanet.or.ke/
KICTANet - The Power of Communities, is Kenya's premier ICT policy engagement platform.
_______________________________________________ KICTANet mailing list -- kictanet@lists.kictanet.or.ke To unsubscribe send an email to kictanet-leave@lists.kictanet.or.ke Unsubscribe or change your options at: https://mm3-lists.kictanet.or.ke/mm/lists/kictanet.lists.kictanet.or.ke/
Mailing List Posts Online: https://posts.kictanet.or.ke/
Twitter: https://twitter.com/KICTANet/ Facebook: https://www.facebook.com/KICTANet/ Instagram: https://www.instagram.com/KICTANet/ LinkedIn: https://www.linkedin.com/company/kictanet/ YouTube: https://www.youtube.com/channel/UCbcLVjnPtTGBEeYLGUb2Yow/ WhatsApp Channel: https://whatsapp.com/channel/0029VaQsX4w6mYPIctLsGh1K
KICTANet is a multi-stakeholder Think Tank for people and institutions interested and involved in ICT policy and regulation. KICTANet is a catalyst for reform in the Information and Communication Technology sector. Its work is guided by four pillars of Policy Advocacy, Capacity Building, Research, and Stakeholder Engagement.
KICTANetiquette : Adhere to the same standards of acceptable behaviors online that you follow in real life: respect people's times and bandwidth, share knowledge, don't flame or abuse or personalize, respect privacy, do not spam, do not market your wares or qualifications.
PRIVACY POLICY: See https://mm3-lists.kictanet.or.ke/mm/lists/kictanet.lists.kictanet.or.ke/
KICTANet - The Power of Communities, is Kenya's premier ICT policy engagement platform.
_______________________________________________ KICTANet mailing list -- kictanet@lists.kictanet.or.ke To unsubscribe send an email to kictanet-leave@lists.kictanet.or.ke Unsubscribe or change your options at: https://mm3-lists.kictanet.or.ke/mm/lists/kictanet.lists.kictanet.or.ke/
Mailing List Posts Online: https://posts.kictanet.or.ke/
Twitter: https://twitter.com/KICTANet/ Facebook: https://www.facebook.com/KICTANet/ Instagram: https://www.instagram.com/KICTANet/ LinkedIn: https://www.linkedin.com/company/kictanet/ YouTube: https://www.youtube.com/channel/UCbcLVjnPtTGBEeYLGUb2Yow/ WhatsApp Channel: https://whatsapp.com/channel/0029VaQsX4w6mYPIctLsGh1K
KICTANet is a multi-stakeholder Think Tank for people and institutions interested and involved in ICT policy and regulation. KICTANet is a catalyst for reform in the Information and Communication Technology sector. Its work is guided by four pillars of Policy Advocacy, Capacity Building, Research, and Stakeholder Engagement.
KICTANetiquette : Adhere to the same standards of acceptable behaviors online that you follow in real life: respect people's times and bandwidth, share knowledge, don't flame or abuse or personalize, respect privacy, do not spam, do not market your wares or qualifications.
PRIVACY POLICY: See https://mm3-lists.kictanet.or.ke/mm/lists/kictanet.lists.kictanet.or.ke/
KICTANet - The Power of Communities, is Kenya's premier ICT policy engagement platform.
Transaction histories/statements are personal data belonging to the customer and data subject rights should kick in here. Although the telco should disclaim its liability for any unlawful use of the statement, the statement should be unmasked. The masking conflicts with consumer protection rights too. Regards, Michael Mugo On Fri, 6 Sep 2024, 5:51 pm Johnsey Kivoto via KICTANet, < kictanet@lists.kictanet.or.ke> wrote:
The processes are punitive, tideous and an avenue for extortion. For the police to follow thro, you have to pay bribes or forget the whole thing.
On Fri, Sep 6, 2024 at 1:49 PM Ali Hussein via KICTANet < kictanet@lists.kictanet.or.ke> wrote:
Guys
This is actually very simple:-
My sister was Carjacked a few days ago Robbed off everything like everything Tell me why @SafaricomPLC <https://x.com/SafaricomPLC> You are refusing to give us complete mpesa statements of the monies that was sent to unknown numbers !!?
I sympathize with the situation above. Unfortunately, the fact of the matter is that Safaricom can't just give out information about its customers - even the criminal type. This will create a very dangerous precedent. There is a reason there are processes for this. - Report to the police, OB Number, and Police to follow through to get the details from Safaricom, investigations, arrest, court, etc. Safaricom simply can't give me the number or details of any client simply by asking for it. Whatever the reason.
Regards
*Ali Hussein*
Fintech | Digital Transformation
Tel: +254 713 601113
Twitter: @AliHKassim
LinkedIn: Ali's Profile <http://ke.linkedin.com/in/alihkassim> <http://ke.linkedin.com/in/alihkassim>
Any information of a personal nature expressed in this email are purely mine and do not necessarily reflect the official positions of the organizations that I work with.
On Thu, Sep 5, 2024 at 2:57 PM Ochieng A. Ogango via KICTANet < kictanet@lists.kictanet.or.ke> wrote:
Cephas,
Why is it that Safaricom masks numbers on the statement, yet that information comes back to the account owner when you send money.
Why do I need a court order to get information that I already have?
*Kind regards,*
*Ochieng A. Ogango*
*Advocate, LLB (Hons), CPM(M.T.I)*
On Thu, Sep 5, 2024 at 1:38 PM Cephas Joseph via KICTANet < kictanet@lists.kictanet.or.ke> wrote:
Liz,
Kenya it is, but (un)fortunately Kenya also has that standard process of Police/DCI -> Court -> Safaricom for data access. Safaricom is a data custodian hence has obligations and accountability for any persons data, (illicit) beneficiary and owner too.
Two scenarios::
1. Full transparency by Saf to the owner, with the risk of exposure for (illicit) beneficiaries. Take a case where, even innocently, one accesses the unique MPESA statement code sent via SMS and authN to your statement. With numbers in plain text, what can they do?
2. With current masking, protecting beneficiaries numbers, when one accesses the unique MPESA statement code sent via SMS and authN to your statement, the masked numbers aren't useful for them. This covers both beneficiary privacy and assures Saf accountability.
Unfortunately, Safaricom would not place the privacy burden on the customer. DPA laws shift this labor to the org, aye? The criminals are also Saf's customers, you know!
I suppose visiting an official Saf Shop, for a thorough verification of customer ID, then being issued with the specific, limited data (cell nos.) needed might be a way? Or adopt a technical means, coded MPESA statement in app, with strignest security/privacy controls (TBD)?
On Thu, Sep 5, 2024 at 1:04 PM Wilfred Omondi via KICTANet < kictanet@lists.kictanet.or.ke> wrote:
Hi Liz,
From experience, once such a case is reported to a police station, the OCS/Deputy OCS should assign a DCI officer to investigate. The DCI officer should ask the court for a warrant/court order so that he/she can present to Safaricom for cooperation during the investigation.
If you don't get such a help from the police station, you can also go directly to the DCI office in Kiambu and an investigating officer should be able to help.
All the best.
On Thu, 5 Sept 2024, 10:38 Liz Orembo via KICTANet, < kictanet@lists.kictanet.or.ke> wrote:
Dear listers,
See this case in twitter. A lady was carjacked, her phone stolen and mpesa transferred to other numbers by thieves. Safaricom does not want to reveal the beneficiary numbers for the criminal transactions to the registered line owner. This is despite them going to Safaricom with an OB number. https://x.com/herine_lando/status/1831366028443709797?s=46
Question:
1. Is Safaricom justified to use data protection for its reason to decline request for information? What’s the real intention of the DPA?
2. Where are consumer and data protection rights on the side of the line owner? Esp where data protection policy is in conflict with consumer interests?
3. The line infrastructure belongs to Safaricom, but who does the transaction data belong to? And how do they share the responsibilities to protect the data?
4. Are there laws to solve this situation in the interest of the customer? Do we need to amend some?
Best regards. Liz.
PGP ID: 0x1F3488BF _______________________________________________ KICTANet mailing list -- kictanet@lists.kictanet.or.ke To unsubscribe send an email to kictanet-leave@lists.kictanet.or.ke Unsubscribe or change your options at: https://mm3-lists.kictanet.or.ke/mm/lists/kictanet.lists.kictanet.or.ke/
Mailing List Posts Online: https://posts.kictanet.or.ke/
Twitter: https://twitter.com/KICTANet/ Facebook: https://www.facebook.com/KICTANet/ Instagram: https://www.instagram.com/KICTANet/ LinkedIn: https://www.linkedin.com/company/kictanet/ YouTube: https://www.youtube.com/channel/UCbcLVjnPtTGBEeYLGUb2Yow/ WhatsApp Channel: https://whatsapp.com/channel/0029VaQsX4w6mYPIctLsGh1K
KICTANet is a multi-stakeholder Think Tank for people and institutions interested and involved in ICT policy and regulation. KICTANet is a catalyst for reform in the Information and Communication Technology sector. Its work is guided by four pillars of Policy Advocacy, Capacity Building, Research, and Stakeholder Engagement.
KICTANetiquette : Adhere to the same standards of acceptable behaviors online that you follow in real life: respect people's times and bandwidth, share knowledge, don't flame or abuse or personalize, respect privacy, do not spam, do not market your wares or qualifications.
PRIVACY POLICY: See https://mm3-lists.kictanet.or.ke/mm/lists/kictanet.lists.kictanet.or.ke/
KICTANet - The Power of Communities, is Kenya's premier ICT policy engagement platform.
_______________________________________________ KICTANet mailing list -- kictanet@lists.kictanet.or.ke To unsubscribe send an email to kictanet-leave@lists.kictanet.or.ke Unsubscribe or change your options at: https://mm3-lists.kictanet.or.ke/mm/lists/kictanet.lists.kictanet.or.ke/
Mailing List Posts Online: https://posts.kictanet.or.ke/
Twitter: https://twitter.com/KICTANet/ Facebook: https://www.facebook.com/KICTANet/ Instagram: https://www.instagram.com/KICTANet/ LinkedIn: https://www.linkedin.com/company/kictanet/ YouTube: https://www.youtube.com/channel/UCbcLVjnPtTGBEeYLGUb2Yow/ WhatsApp Channel: https://whatsapp.com/channel/0029VaQsX4w6mYPIctLsGh1K
KICTANet is a multi-stakeholder Think Tank for people and institutions interested and involved in ICT policy and regulation. KICTANet is a catalyst for reform in the Information and Communication Technology sector. Its work is guided by four pillars of Policy Advocacy, Capacity Building, Research, and Stakeholder Engagement.
KICTANetiquette : Adhere to the same standards of acceptable behaviors online that you follow in real life: respect people's times and bandwidth, share knowledge, don't flame or abuse or personalize, respect privacy, do not spam, do not market your wares or qualifications.
PRIVACY POLICY: See https://mm3-lists.kictanet.or.ke/mm/lists/kictanet.lists.kictanet.or.ke/
KICTANet - The Power of Communities, is Kenya's premier ICT policy engagement platform.
--
--- *Cephas O.M *
_______________________________________________ KICTANet mailing list -- kictanet@lists.kictanet.or.ke To unsubscribe send an email to kictanet-leave@lists.kictanet.or.ke Unsubscribe or change your options at: https://mm3-lists.kictanet.or.ke/mm/lists/kictanet.lists.kictanet.or.ke/
Mailing List Posts Online: https://posts.kictanet.or.ke/
Twitter: https://twitter.com/KICTANet/ Facebook: https://www.facebook.com/KICTANet/ Instagram: https://www.instagram.com/KICTANet/ LinkedIn: https://www.linkedin.com/company/kictanet/ YouTube: https://www.youtube.com/channel/UCbcLVjnPtTGBEeYLGUb2Yow/ WhatsApp Channel: https://whatsapp.com/channel/0029VaQsX4w6mYPIctLsGh1K
KICTANet is a multi-stakeholder Think Tank for people and institutions interested and involved in ICT policy and regulation. KICTANet is a catalyst for reform in the Information and Communication Technology sector. Its work is guided by four pillars of Policy Advocacy, Capacity Building, Research, and Stakeholder Engagement.
KICTANetiquette : Adhere to the same standards of acceptable behaviors online that you follow in real life: respect people's times and bandwidth, share knowledge, don't flame or abuse or personalize, respect privacy, do not spam, do not market your wares or qualifications.
PRIVACY POLICY: See https://mm3-lists.kictanet.or.ke/mm/lists/kictanet.lists.kictanet.or.ke/
KICTANet - The Power of Communities, is Kenya's premier ICT policy engagement platform.
_______________________________________________ KICTANet mailing list -- kictanet@lists.kictanet.or.ke To unsubscribe send an email to kictanet-leave@lists.kictanet.or.ke Unsubscribe or change your options at: https://mm3-lists.kictanet.or.ke/mm/lists/kictanet.lists.kictanet.or.ke/
Mailing List Posts Online: https://posts.kictanet.or.ke/
Twitter: https://twitter.com/KICTANet/ Facebook: https://www.facebook.com/KICTANet/ Instagram: https://www.instagram.com/KICTANet/ LinkedIn: https://www.linkedin.com/company/kictanet/ YouTube: https://www.youtube.com/channel/UCbcLVjnPtTGBEeYLGUb2Yow/ WhatsApp Channel: https://whatsapp.com/channel/0029VaQsX4w6mYPIctLsGh1K
KICTANet is a multi-stakeholder Think Tank for people and institutions interested and involved in ICT policy and regulation. KICTANet is a catalyst for reform in the Information and Communication Technology sector. Its work is guided by four pillars of Policy Advocacy, Capacity Building, Research, and Stakeholder Engagement.
KICTANetiquette : Adhere to the same standards of acceptable behaviors online that you follow in real life: respect people's times and bandwidth, share knowledge, don't flame or abuse or personalize, respect privacy, do not spam, do not market your wares or qualifications.
PRIVACY POLICY: See https://mm3-lists.kictanet.or.ke/mm/lists/kictanet.lists.kictanet.or.ke/
KICTANet - The Power of Communities, is Kenya's premier ICT policy engagement platform.
_______________________________________________ KICTANet mailing list -- kictanet@lists.kictanet.or.ke To unsubscribe send an email to kictanet-leave@lists.kictanet.or.ke Unsubscribe or change your options at: https://mm3-lists.kictanet.or.ke/mm/lists/kictanet.lists.kictanet.or.ke/
Mailing List Posts Online: https://posts.kictanet.or.ke/
Twitter: https://twitter.com/KICTANet/ Facebook: https://www.facebook.com/KICTANet/ Instagram: https://www.instagram.com/KICTANet/ LinkedIn: https://www.linkedin.com/company/kictanet/ YouTube: https://www.youtube.com/channel/UCbcLVjnPtTGBEeYLGUb2Yow/ WhatsApp Channel: https://whatsapp.com/channel/0029VaQsX4w6mYPIctLsGh1K
KICTANet is a multi-stakeholder Think Tank for people and institutions interested and involved in ICT policy and regulation. KICTANet is a catalyst for reform in the Information and Communication Technology sector. Its work is guided by four pillars of Policy Advocacy, Capacity Building, Research, and Stakeholder Engagement.
KICTANetiquette : Adhere to the same standards of acceptable behaviors online that you follow in real life: respect people's times and bandwidth, share knowledge, don't flame or abuse or personalize, respect privacy, do not spam, do not market your wares or qualifications.
PRIVACY POLICY: See https://mm3-lists.kictanet.or.ke/mm/lists/kictanet.lists.kictanet.or.ke/
KICTANet - The Power of Communities, is Kenya's premier ICT policy engagement platform.
_______________________________________________ KICTANet mailing list -- kictanet@lists.kictanet.or.ke To unsubscribe send an email to kictanet-leave@lists.kictanet.or.ke Unsubscribe or change your options at: https://mm3-lists.kictanet.or.ke/mm/lists/kictanet.lists.kictanet.or.ke/
Mailing List Posts Online: https://posts.kictanet.or.ke/
Twitter: https://twitter.com/KICTANet/ Facebook: https://www.facebook.com/KICTANet/ Instagram: https://www.instagram.com/KICTANet/ LinkedIn: https://www.linkedin.com/company/kictanet/ YouTube: https://www.youtube.com/channel/UCbcLVjnPtTGBEeYLGUb2Yow/ WhatsApp Channel: https://whatsapp.com/channel/0029VaQsX4w6mYPIctLsGh1K
KICTANet is a multi-stakeholder Think Tank for people and institutions interested and involved in ICT policy and regulation. KICTANet is a catalyst for reform in the Information and Communication Technology sector. Its work is guided by four pillars of Policy Advocacy, Capacity Building, Research, and Stakeholder Engagement.
KICTANetiquette : Adhere to the same standards of acceptable behaviors online that you follow in real life: respect people's times and bandwidth, share knowledge, don't flame or abuse or personalize, respect privacy, do not spam, do not market your wares or qualifications.
PRIVACY POLICY: See https://mm3-lists.kictanet.or.ke/mm/lists/kictanet.lists.kictanet.or.ke/
KICTANet - The Power of Communities, is Kenya's premier ICT policy engagement platform.
I agree with this notion 100% @Mugo On Fri, Sep 6, 2024 at 6:17 PM Mugo Michael via KICTANet < kictanet@lists.kictanet.or.ke> wrote:
Transaction histories/statements are personal data belonging to the customer and data subject rights should kick in here. Although the telco should disclaim its liability for any unlawful use of the statement, the statement should be unmasked. The masking conflicts with consumer protection rights too.
Regards,
Michael Mugo
On Fri, 6 Sep 2024, 5:51 pm Johnsey Kivoto via KICTANet, < kictanet@lists.kictanet.or.ke> wrote:
The processes are punitive, tideous and an avenue for extortion. For the police to follow thro, you have to pay bribes or forget the whole thing.
On Fri, Sep 6, 2024 at 1:49 PM Ali Hussein via KICTANet < kictanet@lists.kictanet.or.ke> wrote:
Guys
This is actually very simple:-
My sister was Carjacked a few days ago Robbed off everything like everything Tell me why @SafaricomPLC <https://x.com/SafaricomPLC> You are refusing to give us complete mpesa statements of the monies that was sent to unknown numbers !!?
I sympathize with the situation above. Unfortunately, the fact of the matter is that Safaricom can't just give out information about its customers - even the criminal type. This will create a very dangerous precedent. There is a reason there are processes for this. - Report to the police, OB Number, and Police to follow through to get the details from Safaricom, investigations, arrest, court, etc. Safaricom simply can't give me the number or details of any client simply by asking for it. Whatever the reason.
Regards
*Ali Hussein*
Fintech | Digital Transformation
Tel: +254 713 601113
Twitter: @AliHKassim
LinkedIn: Ali's Profile <http://ke.linkedin.com/in/alihkassim> <http://ke.linkedin.com/in/alihkassim>
Any information of a personal nature expressed in this email are purely mine and do not necessarily reflect the official positions of the organizations that I work with.
On Thu, Sep 5, 2024 at 2:57 PM Ochieng A. Ogango via KICTANet < kictanet@lists.kictanet.or.ke> wrote:
Cephas,
Why is it that Safaricom masks numbers on the statement, yet that information comes back to the account owner when you send money.
Why do I need a court order to get information that I already have?
*Kind regards,*
*Ochieng A. Ogango*
*Advocate, LLB (Hons), CPM(M.T.I)*
On Thu, Sep 5, 2024 at 1:38 PM Cephas Joseph via KICTANet < kictanet@lists.kictanet.or.ke> wrote:
Liz,
Kenya it is, but (un)fortunately Kenya also has that standard process of Police/DCI -> Court -> Safaricom for data access. Safaricom is a data custodian hence has obligations and accountability for any persons data, (illicit) beneficiary and owner too.
Two scenarios::
1. Full transparency by Saf to the owner, with the risk of exposure for (illicit) beneficiaries. Take a case where, even innocently, one accesses the unique MPESA statement code sent via SMS and authN to your statement. With numbers in plain text, what can they do?
2. With current masking, protecting beneficiaries numbers, when one accesses the unique MPESA statement code sent via SMS and authN to your statement, the masked numbers aren't useful for them. This covers both beneficiary privacy and assures Saf accountability.
Unfortunately, Safaricom would not place the privacy burden on the customer. DPA laws shift this labor to the org, aye? The criminals are also Saf's customers, you know!
I suppose visiting an official Saf Shop, for a thorough verification of customer ID, then being issued with the specific, limited data (cell nos.) needed might be a way? Or adopt a technical means, coded MPESA statement in app, with strignest security/privacy controls (TBD)?
On Thu, Sep 5, 2024 at 1:04 PM Wilfred Omondi via KICTANet < kictanet@lists.kictanet.or.ke> wrote:
Hi Liz,
>From experience, once such a case is reported to a police station, the OCS/Deputy OCS should assign a DCI officer to investigate. The DCI officer should ask the court for a warrant/court order so that he/she can present to Safaricom for cooperation during the investigation.
If you don't get such a help from the police station, you can also go directly to the DCI office in Kiambu and an investigating officer should be able to help.
All the best.
On Thu, 5 Sept 2024, 10:38 Liz Orembo via KICTANet, < kictanet@lists.kictanet.or.ke> wrote:
> > Dear listers, > > See this case in twitter. A lady was carjacked, her phone stolen and > mpesa transferred to other numbers by thieves. Safaricom does not want to > reveal the beneficiary numbers for the criminal transactions to the > registered line owner. This is despite them going to Safaricom with an OB > number. > https://x.com/herine_lando/status/1831366028443709797?s=46 > > Question: > > 1. Is Safaricom justified to use data protection for its reason to > decline request for information? What’s the real intention of the DPA? > > 2. Where are consumer and data protection rights on the side of the > line owner? Esp where data protection policy is in conflict with consumer > interests? > > 3. The line infrastructure belongs to Safaricom, but who does the > transaction data belong to? And how do they share the responsibilities to > protect the data? > > 4. Are there laws to solve this situation in the interest of the > customer? Do we need to amend some? > > Best regards. > Liz. > > PGP ID: 0x1F3488BF > _______________________________________________ > KICTANet mailing list -- kictanet@lists.kictanet.or.ke > To unsubscribe send an email to kictanet-leave@lists.kictanet.or.ke > Unsubscribe or change your options at: > https://mm3-lists.kictanet.or.ke/mm/lists/kictanet.lists.kictanet.or.ke/ > > Mailing List Posts Online: https://posts.kictanet.or.ke/ > > Twitter: https://twitter.com/KICTANet/ > Facebook: https://www.facebook.com/KICTANet/ > Instagram: https://www.instagram.com/KICTANet/ > LinkedIn: https://www.linkedin.com/company/kictanet/ > YouTube: https://www.youtube.com/channel/UCbcLVjnPtTGBEeYLGUb2Yow/ > WhatsApp Channel: > https://whatsapp.com/channel/0029VaQsX4w6mYPIctLsGh1K > > KICTANet is a multi-stakeholder Think Tank for people and > institutions interested and involved in ICT policy and regulation. > KICTANet is a catalyst for reform in the Information and > Communication Technology sector. Its work is guided by four pillars > of Policy Advocacy, Capacity Building, Research, and Stakeholder > Engagement. > > KICTANetiquette : Adhere to the same standards of acceptable > behaviors online that you follow in real life: respect people's > times and bandwidth, share knowledge, don't flame or abuse or > personalize, respect privacy, do not spam, do not market your > wares or qualifications. > > PRIVACY POLICY: See > https://mm3-lists.kictanet.or.ke/mm/lists/kictanet.lists.kictanet.or.ke/ > > KICTANet - The Power of Communities, is Kenya's premier ICT policy > engagement platform. > _______________________________________________ KICTANet mailing list -- kictanet@lists.kictanet.or.ke To unsubscribe send an email to kictanet-leave@lists.kictanet.or.ke Unsubscribe or change your options at: https://mm3-lists.kictanet.or.ke/mm/lists/kictanet.lists.kictanet.or.ke/
Mailing List Posts Online: https://posts.kictanet.or.ke/
Twitter: https://twitter.com/KICTANet/ Facebook: https://www.facebook.com/KICTANet/ Instagram: https://www.instagram.com/KICTANet/ LinkedIn: https://www.linkedin.com/company/kictanet/ YouTube: https://www.youtube.com/channel/UCbcLVjnPtTGBEeYLGUb2Yow/ WhatsApp Channel: https://whatsapp.com/channel/0029VaQsX4w6mYPIctLsGh1K
KICTANet is a multi-stakeholder Think Tank for people and institutions interested and involved in ICT policy and regulation. KICTANet is a catalyst for reform in the Information and Communication Technology sector. Its work is guided by four pillars of Policy Advocacy, Capacity Building, Research, and Stakeholder Engagement.
KICTANetiquette : Adhere to the same standards of acceptable behaviors online that you follow in real life: respect people's times and bandwidth, share knowledge, don't flame or abuse or personalize, respect privacy, do not spam, do not market your wares or qualifications.
PRIVACY POLICY: See https://mm3-lists.kictanet.or.ke/mm/lists/kictanet.lists.kictanet.or.ke/
KICTANet - The Power of Communities, is Kenya's premier ICT policy engagement platform.
--
--- *Cephas O.M *
_______________________________________________ KICTANet mailing list -- kictanet@lists.kictanet.or.ke To unsubscribe send an email to kictanet-leave@lists.kictanet.or.ke Unsubscribe or change your options at: https://mm3-lists.kictanet.or.ke/mm/lists/kictanet.lists.kictanet.or.ke/
Mailing List Posts Online: https://posts.kictanet.or.ke/
Twitter: https://twitter.com/KICTANet/ Facebook: https://www.facebook.com/KICTANet/ Instagram: https://www.instagram.com/KICTANet/ LinkedIn: https://www.linkedin.com/company/kictanet/ YouTube: https://www.youtube.com/channel/UCbcLVjnPtTGBEeYLGUb2Yow/ WhatsApp Channel: https://whatsapp.com/channel/0029VaQsX4w6mYPIctLsGh1K
KICTANet is a multi-stakeholder Think Tank for people and institutions interested and involved in ICT policy and regulation. KICTANet is a catalyst for reform in the Information and Communication Technology sector. Its work is guided by four pillars of Policy Advocacy, Capacity Building, Research, and Stakeholder Engagement.
KICTANetiquette : Adhere to the same standards of acceptable behaviors online that you follow in real life: respect people's times and bandwidth, share knowledge, don't flame or abuse or personalize, respect privacy, do not spam, do not market your wares or qualifications.
PRIVACY POLICY: See https://mm3-lists.kictanet.or.ke/mm/lists/kictanet.lists.kictanet.or.ke/
KICTANet - The Power of Communities, is Kenya's premier ICT policy engagement platform.
_______________________________________________ KICTANet mailing list -- kictanet@lists.kictanet.or.ke To unsubscribe send an email to kictanet-leave@lists.kictanet.or.ke Unsubscribe or change your options at: https://mm3-lists.kictanet.or.ke/mm/lists/kictanet.lists.kictanet.or.ke/
Mailing List Posts Online: https://posts.kictanet.or.ke/
Twitter: https://twitter.com/KICTANet/ Facebook: https://www.facebook.com/KICTANet/ Instagram: https://www.instagram.com/KICTANet/ LinkedIn: https://www.linkedin.com/company/kictanet/ YouTube: https://www.youtube.com/channel/UCbcLVjnPtTGBEeYLGUb2Yow/ WhatsApp Channel: https://whatsapp.com/channel/0029VaQsX4w6mYPIctLsGh1K
KICTANet is a multi-stakeholder Think Tank for people and institutions interested and involved in ICT policy and regulation. KICTANet is a catalyst for reform in the Information and Communication Technology sector. Its work is guided by four pillars of Policy Advocacy, Capacity Building, Research, and Stakeholder Engagement.
KICTANetiquette : Adhere to the same standards of acceptable behaviors online that you follow in real life: respect people's times and bandwidth, share knowledge, don't flame or abuse or personalize, respect privacy, do not spam, do not market your wares or qualifications.
PRIVACY POLICY: See https://mm3-lists.kictanet.or.ke/mm/lists/kictanet.lists.kictanet.or.ke/
KICTANet - The Power of Communities, is Kenya's premier ICT policy engagement platform.
_______________________________________________ KICTANet mailing list -- kictanet@lists.kictanet.or.ke To unsubscribe send an email to kictanet-leave@lists.kictanet.or.ke Unsubscribe or change your options at: https://mm3-lists.kictanet.or.ke/mm/lists/kictanet.lists.kictanet.or.ke/
Mailing List Posts Online: https://posts.kictanet.or.ke/
Twitter: https://twitter.com/KICTANet/ Facebook: https://www.facebook.com/KICTANet/ Instagram: https://www.instagram.com/KICTANet/ LinkedIn: https://www.linkedin.com/company/kictanet/ YouTube: https://www.youtube.com/channel/UCbcLVjnPtTGBEeYLGUb2Yow/ WhatsApp Channel: https://whatsapp.com/channel/0029VaQsX4w6mYPIctLsGh1K
KICTANet is a multi-stakeholder Think Tank for people and institutions interested and involved in ICT policy and regulation. KICTANet is a catalyst for reform in the Information and Communication Technology sector. Its work is guided by four pillars of Policy Advocacy, Capacity Building, Research, and Stakeholder Engagement.
KICTANetiquette : Adhere to the same standards of acceptable behaviors online that you follow in real life: respect people's times and bandwidth, share knowledge, don't flame or abuse or personalize, respect privacy, do not spam, do not market your wares or qualifications.
PRIVACY POLICY: See https://mm3-lists.kictanet.or.ke/mm/lists/kictanet.lists.kictanet.or.ke/
KICTANet - The Power of Communities, is Kenya's premier ICT policy engagement platform.
_______________________________________________ KICTANet mailing list -- kictanet@lists.kictanet.or.ke To unsubscribe send an email to kictanet-leave@lists.kictanet.or.ke Unsubscribe or change your options at: https://mm3-lists.kictanet.or.ke/mm/lists/kictanet.lists.kictanet.or.ke/
Mailing List Posts Online: https://posts.kictanet.or.ke/
Twitter: https://twitter.com/KICTANet/ Facebook: https://www.facebook.com/KICTANet/ Instagram: https://www.instagram.com/KICTANet/ LinkedIn: https://www.linkedin.com/company/kictanet/ YouTube: https://www.youtube.com/channel/UCbcLVjnPtTGBEeYLGUb2Yow/ WhatsApp Channel: https://whatsapp.com/channel/0029VaQsX4w6mYPIctLsGh1K
KICTANet is a multi-stakeholder Think Tank for people and institutions interested and involved in ICT policy and regulation. KICTANet is a catalyst for reform in the Information and Communication Technology sector. Its work is guided by four pillars of Policy Advocacy, Capacity Building, Research, and Stakeholder Engagement.
KICTANetiquette : Adhere to the same standards of acceptable behaviors online that you follow in real life: respect people's times and bandwidth, share knowledge, don't flame or abuse or personalize, respect privacy, do not spam, do not market your wares or qualifications.
PRIVACY POLICY: See https://mm3-lists.kictanet.or.ke/mm/lists/kictanet.lists.kictanet.or.ke/
KICTANet - The Power of Communities, is Kenya's premier ICT policy engagement platform.
_______________________________________________ KICTANet mailing list -- kictanet@lists.kictanet.or.ke To unsubscribe send an email to kictanet-leave@lists.kictanet.or.ke Unsubscribe or change your options at: https://mm3-lists.kictanet.or.ke/mm/lists/kictanet.lists.kictanet.or.ke/
Mailing List Posts Online: https://posts.kictanet.or.ke/
Twitter: https://twitter.com/KICTANet/ Facebook: https://www.facebook.com/KICTANet/ Instagram: https://www.instagram.com/KICTANet/ LinkedIn: https://www.linkedin.com/company/kictanet/ YouTube: https://www.youtube.com/channel/UCbcLVjnPtTGBEeYLGUb2Yow/ WhatsApp Channel: https://whatsapp.com/channel/0029VaQsX4w6mYPIctLsGh1K
KICTANet is a multi-stakeholder Think Tank for people and institutions interested and involved in ICT policy and regulation. KICTANet is a catalyst for reform in the Information and Communication Technology sector. Its work is guided by four pillars of Policy Advocacy, Capacity Building, Research, and Stakeholder Engagement.
KICTANetiquette : Adhere to the same standards of acceptable behaviors online that you follow in real life: respect people's times and bandwidth, share knowledge, don't flame or abuse or personalize, respect privacy, do not spam, do not market your wares or qualifications.
PRIVACY POLICY: See https://mm3-lists.kictanet.or.ke/mm/lists/kictanet.lists.kictanet.or.ke/
KICTANet - The Power of Communities, is Kenya's premier ICT policy engagement platform.
Hi Twahir, Your breakdown is very insightful, and I appreciate how you've framed the issue. Striking the right balance between privacy and access to critical transaction data is essential, especially for a paid service like M-Pesa. The information flow you've outlined highlights the deliverables that customers are rightfully entitled to. As a service provider, Safaricom holds this data in trust and should prioritize transparency rather than using the Data Protection Act as a means to withhold access to such vital information. Denying customers this data not only undermines fairness but also ethical business practices. -- *Kind regards,* *Julie Mwaniki.* On Fri, 6 Sept 2024 at 18:28, Twahir Hussein Kassim via KICTANet < kictanet@lists.kictanet.or.ke> wrote:
I agree with this notion 100% @Mugo
On Fri, Sep 6, 2024 at 6:17 PM Mugo Michael via KICTANet < kictanet@lists.kictanet.or.ke> wrote:
Transaction histories/statements are personal data belonging to the customer and data subject rights should kick in here. Although the telco should disclaim its liability for any unlawful use of the statement, the statement should be unmasked. The masking conflicts with consumer protection rights too.
Regards,
Michael Mugo
On Fri, 6 Sep 2024, 5:51 pm Johnsey Kivoto via KICTANet, < kictanet@lists.kictanet.or.ke> wrote:
The processes are punitive, tideous and an avenue for extortion. For the police to follow thro, you have to pay bribes or forget the whole thing.
On Fri, Sep 6, 2024 at 1:49 PM Ali Hussein via KICTANet < kictanet@lists.kictanet.or.ke> wrote:
Guys
This is actually very simple:-
My sister was Carjacked a few days ago Robbed off everything like everything Tell me why @SafaricomPLC <https://x.com/SafaricomPLC> You are refusing to give us complete mpesa statements of the monies that was sent to unknown numbers !!?
I sympathize with the situation above. Unfortunately, the fact of the matter is that Safaricom can't just give out information about its customers - even the criminal type. This will create a very dangerous precedent. There is a reason there are processes for this. - Report to the police, OB Number, and Police to follow through to get the details from Safaricom, investigations, arrest, court, etc. Safaricom simply can't give me the number or details of any client simply by asking for it. Whatever the reason.
Regards
*Ali Hussein*
Fintech | Digital Transformation
Tel: +254 713 601113
Twitter: @AliHKassim
LinkedIn: Ali's Profile <http://ke.linkedin.com/in/alihkassim> <http://ke.linkedin.com/in/alihkassim>
Any information of a personal nature expressed in this email are purely mine and do not necessarily reflect the official positions of the organizations that I work with.
On Thu, Sep 5, 2024 at 2:57 PM Ochieng A. Ogango via KICTANet < kictanet@lists.kictanet.or.ke> wrote:
Cephas,
Why is it that Safaricom masks numbers on the statement, yet that information comes back to the account owner when you send money.
Why do I need a court order to get information that I already have?
*Kind regards,*
*Ochieng A. Ogango*
*Advocate, LLB (Hons), CPM(M.T.I)*
On Thu, Sep 5, 2024 at 1:38 PM Cephas Joseph via KICTANet < kictanet@lists.kictanet.or.ke> wrote:
Liz,
Kenya it is, but (un)fortunately Kenya also has that standard process of Police/DCI -> Court -> Safaricom for data access. Safaricom is a data custodian hence has obligations and accountability for any persons data, (illicit) beneficiary and owner too.
Two scenarios::
1. Full transparency by Saf to the owner, with the risk of exposure for (illicit) beneficiaries. Take a case where, even innocently, one accesses the unique MPESA statement code sent via SMS and authN to your statement. With numbers in plain text, what can they do?
2. With current masking, protecting beneficiaries numbers, when one accesses the unique MPESA statement code sent via SMS and authN to your statement, the masked numbers aren't useful for them. This covers both beneficiary privacy and assures Saf accountability.
Unfortunately, Safaricom would not place the privacy burden on the customer. DPA laws shift this labor to the org, aye? The criminals are also Saf's customers, you know!
I suppose visiting an official Saf Shop, for a thorough verification of customer ID, then being issued with the specific, limited data (cell nos.) needed might be a way? Or adopt a technical means, coded MPESA statement in app, with strignest security/privacy controls (TBD)?
On Thu, Sep 5, 2024 at 1:04 PM Wilfred Omondi via KICTANet < kictanet@lists.kictanet.or.ke> wrote:
> Hi Liz, > > >From experience, once such a case is reported to a police > station, the OCS/Deputy OCS should assign a DCI officer to investigate. > The DCI officer should ask the court for a warrant/court order so that > he/she can present to Safaricom for cooperation during the investigation. > > If you don't get such a help from the police station, you can also > go directly to the DCI office in Kiambu and an investigating officer should > be able to help. > > All the best. > > On Thu, 5 Sept 2024, 10:38 Liz Orembo via KICTANet, < > kictanet@lists.kictanet.or.ke> wrote: > >> >> Dear listers, >> >> See this case in twitter. A lady was carjacked, her phone stolen >> and mpesa transferred to other numbers by thieves. Safaricom does not want >> to reveal the beneficiary numbers for the criminal transactions to the >> registered line owner. This is despite them going to Safaricom with an OB >> number. >> https://x.com/herine_lando/status/1831366028443709797?s=46 >> >> Question: >> >> 1. Is Safaricom justified to use data protection for its reason to >> decline request for information? What’s the real intention of the DPA? >> >> 2. Where are consumer and data protection rights on the side of the >> line owner? Esp where data protection policy is in conflict with consumer >> interests? >> >> 3. The line infrastructure belongs to Safaricom, but who does the >> transaction data belong to? And how do they share the responsibilities to >> protect the data? >> >> 4. Are there laws to solve this situation in the interest of the >> customer? Do we need to amend some? >> >> Best regards. >> Liz. >> >> PGP ID: 0x1F3488BF >> _______________________________________________ >> KICTANet mailing list -- kictanet@lists.kictanet.or.ke >> To unsubscribe send an email to kictanet-leave@lists.kictanet.or.ke >> Unsubscribe or change your options at: >> https://mm3-lists.kictanet.or.ke/mm/lists/kictanet.lists.kictanet.or.ke/ >> >> Mailing List Posts Online: https://posts.kictanet.or.ke/ >> >> Twitter: https://twitter.com/KICTANet/ >> Facebook: https://www.facebook.com/KICTANet/ >> Instagram: https://www.instagram.com/KICTANet/ >> LinkedIn: https://www.linkedin.com/company/kictanet/ >> YouTube: https://www.youtube.com/channel/UCbcLVjnPtTGBEeYLGUb2Yow/ >> WhatsApp Channel: >> https://whatsapp.com/channel/0029VaQsX4w6mYPIctLsGh1K >> >> KICTANet is a multi-stakeholder Think Tank for people and >> institutions interested and involved in ICT policy and regulation. >> KICTANet is a catalyst for reform in the Information and >> Communication Technology sector. Its work is guided by four pillars >> of Policy Advocacy, Capacity Building, Research, and Stakeholder >> Engagement. >> >> KICTANetiquette : Adhere to the same standards of acceptable >> behaviors online that you follow in real life: respect people's >> times and bandwidth, share knowledge, don't flame or abuse or >> personalize, respect privacy, do not spam, do not market your >> wares or qualifications. >> >> PRIVACY POLICY: See >> https://mm3-lists.kictanet.or.ke/mm/lists/kictanet.lists.kictanet.or.ke/ >> >> KICTANet - The Power of Communities, is Kenya's premier ICT policy >> engagement platform. >> > _______________________________________________ > KICTANet mailing list -- kictanet@lists.kictanet.or.ke > To unsubscribe send an email to kictanet-leave@lists.kictanet.or.ke > Unsubscribe or change your options at: > https://mm3-lists.kictanet.or.ke/mm/lists/kictanet.lists.kictanet.or.ke/ > > Mailing List Posts Online: https://posts.kictanet.or.ke/ > > Twitter: https://twitter.com/KICTANet/ > Facebook: https://www.facebook.com/KICTANet/ > Instagram: https://www.instagram.com/KICTANet/ > LinkedIn: https://www.linkedin.com/company/kictanet/ > YouTube: https://www.youtube.com/channel/UCbcLVjnPtTGBEeYLGUb2Yow/ > WhatsApp Channel: > https://whatsapp.com/channel/0029VaQsX4w6mYPIctLsGh1K > > KICTANet is a multi-stakeholder Think Tank for people and > institutions interested and involved in ICT policy and regulation. > KICTANet is a catalyst for reform in the Information and > Communication Technology sector. Its work is guided by four pillars > of Policy Advocacy, Capacity Building, Research, and Stakeholder > Engagement. > > KICTANetiquette : Adhere to the same standards of acceptable > behaviors online that you follow in real life: respect people's > times and bandwidth, share knowledge, don't flame or abuse or > personalize, respect privacy, do not spam, do not market your > wares or qualifications. > > PRIVACY POLICY: See > https://mm3-lists.kictanet.or.ke/mm/lists/kictanet.lists.kictanet.or.ke/ > > KICTANet - The Power of Communities, is Kenya's premier ICT policy > engagement platform. >
--
--- *Cephas O.M *
_______________________________________________ KICTANet mailing list -- kictanet@lists.kictanet.or.ke To unsubscribe send an email to kictanet-leave@lists.kictanet.or.ke Unsubscribe or change your options at: https://mm3-lists.kictanet.or.ke/mm/lists/kictanet.lists.kictanet.or.ke/
Mailing List Posts Online: https://posts.kictanet.or.ke/
Twitter: https://twitter.com/KICTANet/ Facebook: https://www.facebook.com/KICTANet/ Instagram: https://www.instagram.com/KICTANet/ LinkedIn: https://www.linkedin.com/company/kictanet/ YouTube: https://www.youtube.com/channel/UCbcLVjnPtTGBEeYLGUb2Yow/ WhatsApp Channel: https://whatsapp.com/channel/0029VaQsX4w6mYPIctLsGh1K
KICTANet is a multi-stakeholder Think Tank for people and institutions interested and involved in ICT policy and regulation. KICTANet is a catalyst for reform in the Information and Communication Technology sector. Its work is guided by four pillars of Policy Advocacy, Capacity Building, Research, and Stakeholder Engagement.
KICTANetiquette : Adhere to the same standards of acceptable behaviors online that you follow in real life: respect people's times and bandwidth, share knowledge, don't flame or abuse or personalize, respect privacy, do not spam, do not market your wares or qualifications.
PRIVACY POLICY: See https://mm3-lists.kictanet.or.ke/mm/lists/kictanet.lists.kictanet.or.ke/
KICTANet - The Power of Communities, is Kenya's premier ICT policy engagement platform.
_______________________________________________ KICTANet mailing list -- kictanet@lists.kictanet.or.ke To unsubscribe send an email to kictanet-leave@lists.kictanet.or.ke Unsubscribe or change your options at: https://mm3-lists.kictanet.or.ke/mm/lists/kictanet.lists.kictanet.or.ke/
Mailing List Posts Online: https://posts.kictanet.or.ke/
Twitter: https://twitter.com/KICTANet/ Facebook: https://www.facebook.com/KICTANet/ Instagram: https://www.instagram.com/KICTANet/ LinkedIn: https://www.linkedin.com/company/kictanet/ YouTube: https://www.youtube.com/channel/UCbcLVjnPtTGBEeYLGUb2Yow/ WhatsApp Channel: https://whatsapp.com/channel/0029VaQsX4w6mYPIctLsGh1K
KICTANet is a multi-stakeholder Think Tank for people and institutions interested and involved in ICT policy and regulation. KICTANet is a catalyst for reform in the Information and Communication Technology sector. Its work is guided by four pillars of Policy Advocacy, Capacity Building, Research, and Stakeholder Engagement.
KICTANetiquette : Adhere to the same standards of acceptable behaviors online that you follow in real life: respect people's times and bandwidth, share knowledge, don't flame or abuse or personalize, respect privacy, do not spam, do not market your wares or qualifications.
PRIVACY POLICY: See https://mm3-lists.kictanet.or.ke/mm/lists/kictanet.lists.kictanet.or.ke/
KICTANet - The Power of Communities, is Kenya's premier ICT policy engagement platform.
_______________________________________________ KICTANet mailing list -- kictanet@lists.kictanet.or.ke To unsubscribe send an email to kictanet-leave@lists.kictanet.or.ke Unsubscribe or change your options at: https://mm3-lists.kictanet.or.ke/mm/lists/kictanet.lists.kictanet.or.ke/
Mailing List Posts Online: https://posts.kictanet.or.ke/
Twitter: https://twitter.com/KICTANet/ Facebook: https://www.facebook.com/KICTANet/ Instagram: https://www.instagram.com/KICTANet/ LinkedIn: https://www.linkedin.com/company/kictanet/ YouTube: https://www.youtube.com/channel/UCbcLVjnPtTGBEeYLGUb2Yow/ WhatsApp Channel: https://whatsapp.com/channel/0029VaQsX4w6mYPIctLsGh1K
KICTANet is a multi-stakeholder Think Tank for people and institutions interested and involved in ICT policy and regulation. KICTANet is a catalyst for reform in the Information and Communication Technology sector. Its work is guided by four pillars of Policy Advocacy, Capacity Building, Research, and Stakeholder Engagement.
KICTANetiquette : Adhere to the same standards of acceptable behaviors online that you follow in real life: respect people's times and bandwidth, share knowledge, don't flame or abuse or personalize, respect privacy, do not spam, do not market your wares or qualifications.
PRIVACY POLICY: See https://mm3-lists.kictanet.or.ke/mm/lists/kictanet.lists.kictanet.or.ke/
KICTANet - The Power of Communities, is Kenya's premier ICT policy engagement platform.
_______________________________________________ KICTANet mailing list -- kictanet@lists.kictanet.or.ke To unsubscribe send an email to kictanet-leave@lists.kictanet.or.ke Unsubscribe or change your options at: https://mm3-lists.kictanet.or.ke/mm/lists/kictanet.lists.kictanet.or.ke/
Mailing List Posts Online: https://posts.kictanet.or.ke/
Twitter: https://twitter.com/KICTANet/ Facebook: https://www.facebook.com/KICTANet/ Instagram: https://www.instagram.com/KICTANet/ LinkedIn: https://www.linkedin.com/company/kictanet/ YouTube: https://www.youtube.com/channel/UCbcLVjnPtTGBEeYLGUb2Yow/ WhatsApp Channel: https://whatsapp.com/channel/0029VaQsX4w6mYPIctLsGh1K
KICTANet is a multi-stakeholder Think Tank for people and institutions interested and involved in ICT policy and regulation. KICTANet is a catalyst for reform in the Information and Communication Technology sector. Its work is guided by four pillars of Policy Advocacy, Capacity Building, Research, and Stakeholder Engagement.
KICTANetiquette : Adhere to the same standards of acceptable behaviors online that you follow in real life: respect people's times and bandwidth, share knowledge, don't flame or abuse or personalize, respect privacy, do not spam, do not market your wares or qualifications.
PRIVACY POLICY: See https://mm3-lists.kictanet.or.ke/mm/lists/kictanet.lists.kictanet.or.ke/
KICTANet - The Power of Communities, is Kenya's premier ICT policy engagement platform.
_______________________________________________ KICTANet mailing list -- kictanet@lists.kictanet.or.ke To unsubscribe send an email to kictanet-leave@lists.kictanet.or.ke Unsubscribe or change your options at: https://mm3-lists.kictanet.or.ke/mm/lists/kictanet.lists.kictanet.or.ke/
Mailing List Posts Online: https://posts.kictanet.or.ke/
Twitter: https://twitter.com/KICTANet/ Facebook: https://www.facebook.com/KICTANet/ Instagram: https://www.instagram.com/KICTANet/ LinkedIn: https://www.linkedin.com/company/kictanet/ YouTube: https://www.youtube.com/channel/UCbcLVjnPtTGBEeYLGUb2Yow/ WhatsApp Channel: https://whatsapp.com/channel/0029VaQsX4w6mYPIctLsGh1K
KICTANet is a multi-stakeholder Think Tank for people and institutions interested and involved in ICT policy and regulation. KICTANet is a catalyst for reform in the Information and Communication Technology sector. Its work is guided by four pillars of Policy Advocacy, Capacity Building, Research, and Stakeholder Engagement.
KICTANetiquette : Adhere to the same standards of acceptable behaviors online that you follow in real life: respect people's times and bandwidth, share knowledge, don't flame or abuse or personalize, respect privacy, do not spam, do not market your wares or qualifications.
PRIVACY POLICY: See https://mm3-lists.kictanet.or.ke/mm/lists/kictanet.lists.kictanet.or.ke/
KICTANet - The Power of Communities, is Kenya's premier ICT policy engagement platform.
_______________________________________________ KICTANet mailing list -- kictanet@lists.kictanet.or.ke To unsubscribe send an email to kictanet-leave@lists.kictanet.or.ke Unsubscribe or change your options at: https://mm3-lists.kictanet.or.ke/mm/lists/kictanet.lists.kictanet.or.ke/
Mailing List Posts Online: https://posts.kictanet.or.ke/
Twitter: https://twitter.com/KICTANet/ Facebook: https://www.facebook.com/KICTANet/ Instagram: https://www.instagram.com/KICTANet/ LinkedIn: https://www.linkedin.com/company/kictanet/ YouTube: https://www.youtube.com/channel/UCbcLVjnPtTGBEeYLGUb2Yow/ WhatsApp Channel: https://whatsapp.com/channel/0029VaQsX4w6mYPIctLsGh1K
KICTANet is a multi-stakeholder Think Tank for people and institutions interested and involved in ICT policy and regulation. KICTANet is a catalyst for reform in the Information and Communication Technology sector. Its work is guided by four pillars of Policy Advocacy, Capacity Building, Research, and Stakeholder Engagement.
KICTANetiquette : Adhere to the same standards of acceptable behaviors online that you follow in real life: respect people's times and bandwidth, share knowledge, don't flame or abuse or personalize, respect privacy, do not spam, do not market your wares or qualifications.
PRIVACY POLICY: See https://mm3-lists.kictanet.or.ke/mm/lists/kictanet.lists.kictanet.or.ke/
KICTANet - The Power of Communities, is Kenya's premier ICT policy engagement platform.
-- *Kind regards,* *Julie Mwaniki.*
Listers, On the ongoing discussion on M-Pesa transaction data and the Data Privacy Act. It's important to understand the balance between the right to privacy and what the deliverables that a clients should get for a paid up service. To address this, I think is important for us to look at the Data Flow of an MPESA Transaction, being that its a PAID SERVICE, what are the DELIVERABLES? Let's take it step by step and look at the data flow: - *M-Pesa Transaction Flowchart* To provide a clearer understanding of the process, let's outline the typical flow of an M-Pesa transaction: 1. *Initiation:* The user initiates a transaction by entering the recipient's number and the amount to be sent. 2. *PIN Entry:* The user enters their M-Pesa PIN to authorize the transaction. 3. *Request to M-Pesa Server:* The transaction request is sent to the M-Pesa server. 4. *Server Validation:* The server validates the request, checking for sufficient funds and the accuracy of the recipient's number. 5. *Transaction Processing:* If the validation is successful, the transaction is processed, and the funds are deducted from the sender's account. 6. *Confirmation to Sender:* The sender receives an SMS confirmation of the transaction, including the transaction ID, amount, and recipient's number. 7. *Notification to Recipient:* The recipient also receives an SMS notification about the incoming funds. *Data Revealed to the Client* As part of the transaction confirmation, the client receives the following information: - *Transaction Amount:* The amount transferred. - *Recipient's Number:* The phone number of the recipient. - *Transaction ID:* A unique identifier for the transaction. - *New Balance:* The client's updated account balance. Attached please find a Flow chart of an MPESA Transaction, [image: MPESA Flowchart.png] *Balancing Privacy and Transparency* While the Data Privacy Act is crucial for protecting personal information, it should not hinder access to essential data that individuals have PAID FOR as a DELIVERABLE in the provision of the service. The Data that SAFARICOM holds of all transactions made is DATA it holds in trust for the clients that it has provided that service to. To deny them access is not only unfair but also hinges on being unethical. Safaricom should stop hiding behind the Data Privacy Act and give back to it's clients what they have paid for. IF we sit back and say "Hi ni sawa!" next Safaricom would decide not to give us an SMS notification on MPESA Transaction we make and cite DATA Privacy! *KICTANET has been known to take the bull by the horns and call a spade a spade, lets us call this out!* Twahir On Fri, Sep 6, 2024 at 5:51 PM Johnsey Kivoto via KICTANet < kictanet@lists.kictanet.or.ke> wrote:
The processes are punitive, tideous and an avenue for extortion. For the police to follow thro, you have to pay bribes or forget the whole thing.
On Fri, Sep 6, 2024 at 1:49 PM Ali Hussein via KICTANet < kictanet@lists.kictanet.or.ke> wrote:
Guys
This is actually very simple:-
My sister was Carjacked a few days ago Robbed off everything like everything Tell me why @SafaricomPLC <https://x.com/SafaricomPLC> You are refusing to give us complete mpesa statements of the monies that was sent to unknown numbers !!?
I sympathize with the situation above. Unfortunately, the fact of the matter is that Safaricom can't just give out information about its customers - even the criminal type. This will create a very dangerous precedent. There is a reason there are processes for this. - Report to the police, OB Number, and Police to follow through to get the details from Safaricom, investigations, arrest, court, etc. Safaricom simply can't give me the number or details of any client simply by asking for it. Whatever the reason.
Regards
*Ali Hussein*
Fintech | Digital Transformation
Tel: +254 713 601113
Twitter: @AliHKassim
LinkedIn: Ali's Profile <http://ke.linkedin.com/in/alihkassim> <http://ke.linkedin.com/in/alihkassim>
Any information of a personal nature expressed in this email are purely mine and do not necessarily reflect the official positions of the organizations that I work with.
On Thu, Sep 5, 2024 at 2:57 PM Ochieng A. Ogango via KICTANet < kictanet@lists.kictanet.or.ke> wrote:
Cephas,
Why is it that Safaricom masks numbers on the statement, yet that information comes back to the account owner when you send money.
Why do I need a court order to get information that I already have?
*Kind regards,*
*Ochieng A. Ogango*
*Advocate, LLB (Hons), CPM(M.T.I)*
On Thu, Sep 5, 2024 at 1:38 PM Cephas Joseph via KICTANet < kictanet@lists.kictanet.or.ke> wrote:
Liz,
Kenya it is, but (un)fortunately Kenya also has that standard process of Police/DCI -> Court -> Safaricom for data access. Safaricom is a data custodian hence has obligations and accountability for any persons data, (illicit) beneficiary and owner too.
Two scenarios::
1. Full transparency by Saf to the owner, with the risk of exposure for (illicit) beneficiaries. Take a case where, even innocently, one accesses the unique MPESA statement code sent via SMS and authN to your statement. With numbers in plain text, what can they do?
2. With current masking, protecting beneficiaries numbers, when one accesses the unique MPESA statement code sent via SMS and authN to your statement, the masked numbers aren't useful for them. This covers both beneficiary privacy and assures Saf accountability.
Unfortunately, Safaricom would not place the privacy burden on the customer. DPA laws shift this labor to the org, aye? The criminals are also Saf's customers, you know!
I suppose visiting an official Saf Shop, for a thorough verification of customer ID, then being issued with the specific, limited data (cell nos.) needed might be a way? Or adopt a technical means, coded MPESA statement in app, with strignest security/privacy controls (TBD)?
On Thu, Sep 5, 2024 at 1:04 PM Wilfred Omondi via KICTANet < kictanet@lists.kictanet.or.ke> wrote:
Hi Liz,
From experience, once such a case is reported to a police station, the OCS/Deputy OCS should assign a DCI officer to investigate. The DCI officer should ask the court for a warrant/court order so that he/she can present to Safaricom for cooperation during the investigation.
If you don't get such a help from the police station, you can also go directly to the DCI office in Kiambu and an investigating officer should be able to help.
All the best.
On Thu, 5 Sept 2024, 10:38 Liz Orembo via KICTANet, < kictanet@lists.kictanet.or.ke> wrote:
Dear listers,
See this case in twitter. A lady was carjacked, her phone stolen and mpesa transferred to other numbers by thieves. Safaricom does not want to reveal the beneficiary numbers for the criminal transactions to the registered line owner. This is despite them going to Safaricom with an OB number. https://x.com/herine_lando/status/1831366028443709797?s=46
Question:
1. Is Safaricom justified to use data protection for its reason to decline request for information? What’s the real intention of the DPA?
2. Where are consumer and data protection rights on the side of the line owner? Esp where data protection policy is in conflict with consumer interests?
3. The line infrastructure belongs to Safaricom, but who does the transaction data belong to? And how do they share the responsibilities to protect the data?
4. Are there laws to solve this situation in the interest of the customer? Do we need to amend some?
Best regards. Liz.
PGP ID: 0x1F3488BF _______________________________________________ KICTANet mailing list -- kictanet@lists.kictanet.or.ke To unsubscribe send an email to kictanet-leave@lists.kictanet.or.ke Unsubscribe or change your options at: https://mm3-lists.kictanet.or.ke/mm/lists/kictanet.lists.kictanet.or.ke/
Mailing List Posts Online: https://posts.kictanet.or.ke/
Twitter: https://twitter.com/KICTANet/ Facebook: https://www.facebook.com/KICTANet/ Instagram: https://www.instagram.com/KICTANet/ LinkedIn: https://www.linkedin.com/company/kictanet/ YouTube: https://www.youtube.com/channel/UCbcLVjnPtTGBEeYLGUb2Yow/ WhatsApp Channel: https://whatsapp.com/channel/0029VaQsX4w6mYPIctLsGh1K
KICTANet is a multi-stakeholder Think Tank for people and institutions interested and involved in ICT policy and regulation. KICTANet is a catalyst for reform in the Information and Communication Technology sector. Its work is guided by four pillars of Policy Advocacy, Capacity Building, Research, and Stakeholder Engagement.
KICTANetiquette : Adhere to the same standards of acceptable behaviors online that you follow in real life: respect people's times and bandwidth, share knowledge, don't flame or abuse or personalize, respect privacy, do not spam, do not market your wares or qualifications.
PRIVACY POLICY: See https://mm3-lists.kictanet.or.ke/mm/lists/kictanet.lists.kictanet.or.ke/
KICTANet - The Power of Communities, is Kenya's premier ICT policy engagement platform.
_______________________________________________ KICTANet mailing list -- kictanet@lists.kictanet.or.ke To unsubscribe send an email to kictanet-leave@lists.kictanet.or.ke Unsubscribe or change your options at: https://mm3-lists.kictanet.or.ke/mm/lists/kictanet.lists.kictanet.or.ke/
Mailing List Posts Online: https://posts.kictanet.or.ke/
Twitter: https://twitter.com/KICTANet/ Facebook: https://www.facebook.com/KICTANet/ Instagram: https://www.instagram.com/KICTANet/ LinkedIn: https://www.linkedin.com/company/kictanet/ YouTube: https://www.youtube.com/channel/UCbcLVjnPtTGBEeYLGUb2Yow/ WhatsApp Channel: https://whatsapp.com/channel/0029VaQsX4w6mYPIctLsGh1K
KICTANet is a multi-stakeholder Think Tank for people and institutions interested and involved in ICT policy and regulation. KICTANet is a catalyst for reform in the Information and Communication Technology sector. Its work is guided by four pillars of Policy Advocacy, Capacity Building, Research, and Stakeholder Engagement.
KICTANetiquette : Adhere to the same standards of acceptable behaviors online that you follow in real life: respect people's times and bandwidth, share knowledge, don't flame or abuse or personalize, respect privacy, do not spam, do not market your wares or qualifications.
PRIVACY POLICY: See https://mm3-lists.kictanet.or.ke/mm/lists/kictanet.lists.kictanet.or.ke/
KICTANet - The Power of Communities, is Kenya's premier ICT policy engagement platform.
--
--- *Cephas O.M *
_______________________________________________ KICTANet mailing list -- kictanet@lists.kictanet.or.ke To unsubscribe send an email to kictanet-leave@lists.kictanet.or.ke Unsubscribe or change your options at: https://mm3-lists.kictanet.or.ke/mm/lists/kictanet.lists.kictanet.or.ke/
Mailing List Posts Online: https://posts.kictanet.or.ke/
Twitter: https://twitter.com/KICTANet/ Facebook: https://www.facebook.com/KICTANet/ Instagram: https://www.instagram.com/KICTANet/ LinkedIn: https://www.linkedin.com/company/kictanet/ YouTube: https://www.youtube.com/channel/UCbcLVjnPtTGBEeYLGUb2Yow/ WhatsApp Channel: https://whatsapp.com/channel/0029VaQsX4w6mYPIctLsGh1K
KICTANet is a multi-stakeholder Think Tank for people and institutions interested and involved in ICT policy and regulation. KICTANet is a catalyst for reform in the Information and Communication Technology sector. Its work is guided by four pillars of Policy Advocacy, Capacity Building, Research, and Stakeholder Engagement.
KICTANetiquette : Adhere to the same standards of acceptable behaviors online that you follow in real life: respect people's times and bandwidth, share knowledge, don't flame or abuse or personalize, respect privacy, do not spam, do not market your wares or qualifications.
PRIVACY POLICY: See https://mm3-lists.kictanet.or.ke/mm/lists/kictanet.lists.kictanet.or.ke/
KICTANet - The Power of Communities, is Kenya's premier ICT policy engagement platform.
_______________________________________________ KICTANet mailing list -- kictanet@lists.kictanet.or.ke To unsubscribe send an email to kictanet-leave@lists.kictanet.or.ke Unsubscribe or change your options at: https://mm3-lists.kictanet.or.ke/mm/lists/kictanet.lists.kictanet.or.ke/
Mailing List Posts Online: https://posts.kictanet.or.ke/
Twitter: https://twitter.com/KICTANet/ Facebook: https://www.facebook.com/KICTANet/ Instagram: https://www.instagram.com/KICTANet/ LinkedIn: https://www.linkedin.com/company/kictanet/ YouTube: https://www.youtube.com/channel/UCbcLVjnPtTGBEeYLGUb2Yow/ WhatsApp Channel: https://whatsapp.com/channel/0029VaQsX4w6mYPIctLsGh1K
KICTANet is a multi-stakeholder Think Tank for people and institutions interested and involved in ICT policy and regulation. KICTANet is a catalyst for reform in the Information and Communication Technology sector. Its work is guided by four pillars of Policy Advocacy, Capacity Building, Research, and Stakeholder Engagement.
KICTANetiquette : Adhere to the same standards of acceptable behaviors online that you follow in real life: respect people's times and bandwidth, share knowledge, don't flame or abuse or personalize, respect privacy, do not spam, do not market your wares or qualifications.
PRIVACY POLICY: See https://mm3-lists.kictanet.or.ke/mm/lists/kictanet.lists.kictanet.or.ke/
KICTANet - The Power of Communities, is Kenya's premier ICT policy engagement platform.
_______________________________________________ KICTANet mailing list -- kictanet@lists.kictanet.or.ke To unsubscribe send an email to kictanet-leave@lists.kictanet.or.ke Unsubscribe or change your options at: https://mm3-lists.kictanet.or.ke/mm/lists/kictanet.lists.kictanet.or.ke/
Mailing List Posts Online: https://posts.kictanet.or.ke/
Twitter: https://twitter.com/KICTANet/ Facebook: https://www.facebook.com/KICTANet/ Instagram: https://www.instagram.com/KICTANet/ LinkedIn: https://www.linkedin.com/company/kictanet/ YouTube: https://www.youtube.com/channel/UCbcLVjnPtTGBEeYLGUb2Yow/ WhatsApp Channel: https://whatsapp.com/channel/0029VaQsX4w6mYPIctLsGh1K
KICTANet is a multi-stakeholder Think Tank for people and institutions interested and involved in ICT policy and regulation. KICTANet is a catalyst for reform in the Information and Communication Technology sector. Its work is guided by four pillars of Policy Advocacy, Capacity Building, Research, and Stakeholder Engagement.
KICTANetiquette : Adhere to the same standards of acceptable behaviors online that you follow in real life: respect people's times and bandwidth, share knowledge, don't flame or abuse or personalize, respect privacy, do not spam, do not market your wares or qualifications.
PRIVACY POLICY: See https://mm3-lists.kictanet.or.ke/mm/lists/kictanet.lists.kictanet.or.ke/
KICTANet - The Power of Communities, is Kenya's premier ICT policy engagement platform.
_______________________________________________ KICTANet mailing list -- kictanet@lists.kictanet.or.ke To unsubscribe send an email to kictanet-leave@lists.kictanet.or.ke Unsubscribe or change your options at: https://mm3-lists.kictanet.or.ke/mm/lists/kictanet.lists.kictanet.or.ke/
Mailing List Posts Online: https://posts.kictanet.or.ke/
Twitter: https://twitter.com/KICTANet/ Facebook: https://www.facebook.com/KICTANet/ Instagram: https://www.instagram.com/KICTANet/ LinkedIn: https://www.linkedin.com/company/kictanet/ YouTube: https://www.youtube.com/channel/UCbcLVjnPtTGBEeYLGUb2Yow/ WhatsApp Channel: https://whatsapp.com/channel/0029VaQsX4w6mYPIctLsGh1K
KICTANet is a multi-stakeholder Think Tank for people and institutions interested and involved in ICT policy and regulation. KICTANet is a catalyst for reform in the Information and Communication Technology sector. Its work is guided by four pillars of Policy Advocacy, Capacity Building, Research, and Stakeholder Engagement.
KICTANetiquette : Adhere to the same standards of acceptable behaviors online that you follow in real life: respect people's times and bandwidth, share knowledge, don't flame or abuse or personalize, respect privacy, do not spam, do not market your wares or qualifications.
PRIVACY POLICY: See https://mm3-lists.kictanet.or.ke/mm/lists/kictanet.lists.kictanet.or.ke/
KICTANet - The Power of Communities, is Kenya's premier ICT policy engagement platform.
Hello Twahir This is very insightful. I wonder whether this could be a test case for some litigation, for courts to help or even as a start, adjudication before DPC or Ombudsman’s office. I find that often times, that becomes the better way, though lengthy and tedious sometimes for such judicial and quasi-judicial offices to safeguard rights . And in such an instance, getting organizations like KICTANET to be amicus, some like COFEK can be interested parties. Thank you Kind Regards "In the whole wide world, Africa comes first. Let Africans remain as Africans and not become poor copies of Europeans. I am proud of my colour, whoever is not proud of his colour is not fit to live. Some people took to war, we took to peace; Some people took to hate, we took to love; Some people took to anger, we took to laughter. Only the best is good enough for Africa." Rev. (Dr.) Samuel Aggrey. Twitter @oleshitemi www.shitemi.com <http://oleshitemi.wordpress.com/> w <http://oleshitemi.wordpress.com/>ww.dhahabu.co.ke On Fri, Sep 6, 2024 at 11:21 AM Twahir Hussein Kassim via KICTANet < kictanet@lists.kictanet.or.ke> wrote:
Listers,
On the ongoing discussion on M-Pesa transaction data and the Data Privacy Act. It's important to understand the balance between the right to privacy and what the deliverables that a clients should get for a paid up service. To address this, I think is important for us to look at the Data Flow of an MPESA Transaction, being that its a PAID SERVICE, what are the DELIVERABLES?
Let's take it step by step and look at the data flow: -
*M-Pesa Transaction Flowchart*
To provide a clearer understanding of the process, let's outline the typical flow of an M-Pesa transaction:
1. *Initiation:* The user initiates a transaction by entering the recipient's number and the amount to be sent. 2. *PIN Entry:* The user enters their M-Pesa PIN to authorize the transaction. 3. *Request to M-Pesa Server:* The transaction request is sent to the M-Pesa server. 4. *Server Validation:* The server validates the request, checking for sufficient funds and the accuracy of the recipient's number. 5. *Transaction Processing:* If the validation is successful, the transaction is processed, and the funds are deducted from the sender's account. 6. *Confirmation to Sender:* The sender receives an SMS confirmation of the transaction, including the transaction ID, amount, and recipient's number. 7. *Notification to Recipient:* The recipient also receives an SMS notification about the incoming funds.
*Data Revealed to the Client*
As part of the transaction confirmation, the client receives the following information:
- *Transaction Amount:* The amount transferred. - *Recipient's Number:* The phone number of the recipient. - *Transaction ID:* A unique identifier for the transaction. - *New Balance:* The client's updated account balance.
Attached please find a Flow chart of an MPESA Transaction, [image: MPESA Flowchart.png]
*Balancing Privacy and Transparency*
While the Data Privacy Act is crucial for protecting personal information, it should not hinder access to essential data that individuals have PAID FOR as a DELIVERABLE in the provision of the service. The Data that SAFARICOM holds of all transactions made is DATA it holds in trust for the clients that it has provided that service to. To deny them access is not only unfair but also hinges on being unethical. Safaricom should stop hiding behind the Data Privacy Act and give back to it's clients what they have paid for. IF we sit back and say "Hi ni sawa!" next Safaricom would decide not to give us an SMS notification on MPESA Transaction we make and cite DATA Privacy!
*KICTANET has been known to take the bull by the horns and call a spade a spade, lets us call this out!*
Twahir
On Fri, Sep 6, 2024 at 5:51 PM Johnsey Kivoto via KICTANet < kictanet@lists.kictanet.or.ke> wrote:
The processes are punitive, tideous and an avenue for extortion. For the police to follow thro, you have to pay bribes or forget the whole thing.
On Fri, Sep 6, 2024 at 1:49 PM Ali Hussein via KICTANet < kictanet@lists.kictanet.or.ke> wrote:
Guys
This is actually very simple:-
My sister was Carjacked a few days ago Robbed off everything like everything Tell me why @SafaricomPLC <https://x.com/SafaricomPLC> You are refusing to give us complete mpesa statements of the monies that was sent to unknown numbers !!?
I sympathize with the situation above. Unfortunately, the fact of the matter is that Safaricom can't just give out information about its customers - even the criminal type. This will create a very dangerous precedent. There is a reason there are processes for this. - Report to the police, OB Number, and Police to follow through to get the details from Safaricom, investigations, arrest, court, etc. Safaricom simply can't give me the number or details of any client simply by asking for it. Whatever the reason.
Regards
*Ali Hussein*
Fintech | Digital Transformation
Tel: +254 713 601113
Twitter: @AliHKassim
LinkedIn: Ali's Profile <http://ke.linkedin.com/in/alihkassim> <http://ke.linkedin.com/in/alihkassim>
Any information of a personal nature expressed in this email are purely mine and do not necessarily reflect the official positions of the organizations that I work with.
On Thu, Sep 5, 2024 at 2:57 PM Ochieng A. Ogango via KICTANet < kictanet@lists.kictanet.or.ke> wrote:
Cephas,
Why is it that Safaricom masks numbers on the statement, yet that information comes back to the account owner when you send money.
Why do I need a court order to get information that I already have?
*Kind regards,*
*Ochieng A. Ogango*
*Advocate, LLB (Hons), CPM(M.T.I)*
On Thu, Sep 5, 2024 at 1:38 PM Cephas Joseph via KICTANet < kictanet@lists.kictanet.or.ke> wrote:
Liz,
Kenya it is, but (un)fortunately Kenya also has that standard process of Police/DCI -> Court -> Safaricom for data access. Safaricom is a data custodian hence has obligations and accountability for any persons data, (illicit) beneficiary and owner too.
Two scenarios::
1. Full transparency by Saf to the owner, with the risk of exposure for (illicit) beneficiaries. Take a case where, even innocently, one accesses the unique MPESA statement code sent via SMS and authN to your statement. With numbers in plain text, what can they do?
2. With current masking, protecting beneficiaries numbers, when one accesses the unique MPESA statement code sent via SMS and authN to your statement, the masked numbers aren't useful for them. This covers both beneficiary privacy and assures Saf accountability.
Unfortunately, Safaricom would not place the privacy burden on the customer. DPA laws shift this labor to the org, aye? The criminals are also Saf's customers, you know!
I suppose visiting an official Saf Shop, for a thorough verification of customer ID, then being issued with the specific, limited data (cell nos.) needed might be a way? Or adopt a technical means, coded MPESA statement in app, with strignest security/privacy controls (TBD)?
On Thu, Sep 5, 2024 at 1:04 PM Wilfred Omondi via KICTANet < kictanet@lists.kictanet.or.ke> wrote:
Hi Liz,
>From experience, once such a case is reported to a police station, the OCS/Deputy OCS should assign a DCI officer to investigate. The DCI officer should ask the court for a warrant/court order so that he/she can present to Safaricom for cooperation during the investigation.
If you don't get such a help from the police station, you can also go directly to the DCI office in Kiambu and an investigating officer should be able to help.
All the best.
On Thu, 5 Sept 2024, 10:38 Liz Orembo via KICTANet, < kictanet@lists.kictanet.or.ke> wrote:
> > Dear listers, > > See this case in twitter. A lady was carjacked, her phone stolen and > mpesa transferred to other numbers by thieves. Safaricom does not want to > reveal the beneficiary numbers for the criminal transactions to the > registered line owner. This is despite them going to Safaricom with an OB > number. > https://x.com/herine_lando/status/1831366028443709797?s=46 > > Question: > > 1. Is Safaricom justified to use data protection for its reason to > decline request for information? What’s the real intention of the DPA? > > 2. Where are consumer and data protection rights on the side of the > line owner? Esp where data protection policy is in conflict with consumer > interests? > > 3. The line infrastructure belongs to Safaricom, but who does the > transaction data belong to? And how do they share the responsibilities to > protect the data? > > 4. Are there laws to solve this situation in the interest of the > customer? Do we need to amend some? > > Best regards. > Liz. > > PGP ID: 0x1F3488BF > _______________________________________________ > KICTANet mailing list -- kictanet@lists.kictanet.or.ke > To unsubscribe send an email to kictanet-leave@lists.kictanet.or.ke > Unsubscribe or change your options at: > https://mm3-lists.kictanet.or.ke/mm/lists/kictanet.lists.kictanet.or.ke/ > > Mailing List Posts Online: https://posts.kictanet.or.ke/ > > Twitter: https://twitter.com/KICTANet/ > Facebook: https://www.facebook.com/KICTANet/ > Instagram: https://www.instagram.com/KICTANet/ > LinkedIn: https://www.linkedin.com/company/kictanet/ > YouTube: https://www.youtube.com/channel/UCbcLVjnPtTGBEeYLGUb2Yow/ > WhatsApp Channel: > https://whatsapp.com/channel/0029VaQsX4w6mYPIctLsGh1K > > KICTANet is a multi-stakeholder Think Tank for people and > institutions interested and involved in ICT policy and regulation. > KICTANet is a catalyst for reform in the Information and > Communication Technology sector. Its work is guided by four pillars > of Policy Advocacy, Capacity Building, Research, and Stakeholder > Engagement. > > KICTANetiquette : Adhere to the same standards of acceptable > behaviors online that you follow in real life: respect people's > times and bandwidth, share knowledge, don't flame or abuse or > personalize, respect privacy, do not spam, do not market your > wares or qualifications. > > PRIVACY POLICY: See > https://mm3-lists.kictanet.or.ke/mm/lists/kictanet.lists.kictanet.or.ke/ > > KICTANet - The Power of Communities, is Kenya's premier ICT policy > engagement platform. > _______________________________________________ KICTANet mailing list -- kictanet@lists.kictanet.or.ke To unsubscribe send an email to kictanet-leave@lists.kictanet.or.ke Unsubscribe or change your options at: https://mm3-lists.kictanet.or.ke/mm/lists/kictanet.lists.kictanet.or.ke/
Mailing List Posts Online: https://posts.kictanet.or.ke/
Twitter: https://twitter.com/KICTANet/ Facebook: https://www.facebook.com/KICTANet/ Instagram: https://www.instagram.com/KICTANet/ LinkedIn: https://www.linkedin.com/company/kictanet/ YouTube: https://www.youtube.com/channel/UCbcLVjnPtTGBEeYLGUb2Yow/ WhatsApp Channel: https://whatsapp.com/channel/0029VaQsX4w6mYPIctLsGh1K
KICTANet is a multi-stakeholder Think Tank for people and institutions interested and involved in ICT policy and regulation. KICTANet is a catalyst for reform in the Information and Communication Technology sector. Its work is guided by four pillars of Policy Advocacy, Capacity Building, Research, and Stakeholder Engagement.
KICTANetiquette : Adhere to the same standards of acceptable behaviors online that you follow in real life: respect people's times and bandwidth, share knowledge, don't flame or abuse or personalize, respect privacy, do not spam, do not market your wares or qualifications.
PRIVACY POLICY: See https://mm3-lists.kictanet.or.ke/mm/lists/kictanet.lists.kictanet.or.ke/
KICTANet - The Power of Communities, is Kenya's premier ICT policy engagement platform.
--
--- *Cephas O.M *
_______________________________________________ KICTANet mailing list -- kictanet@lists.kictanet.or.ke To unsubscribe send an email to kictanet-leave@lists.kictanet.or.ke Unsubscribe or change your options at: https://mm3-lists.kictanet.or.ke/mm/lists/kictanet.lists.kictanet.or.ke/
Mailing List Posts Online: https://posts.kictanet.or.ke/
Twitter: https://twitter.com/KICTANet/ Facebook: https://www.facebook.com/KICTANet/ Instagram: https://www.instagram.com/KICTANet/ LinkedIn: https://www.linkedin.com/company/kictanet/ YouTube: https://www.youtube.com/channel/UCbcLVjnPtTGBEeYLGUb2Yow/ WhatsApp Channel: https://whatsapp.com/channel/0029VaQsX4w6mYPIctLsGh1K
KICTANet is a multi-stakeholder Think Tank for people and institutions interested and involved in ICT policy and regulation. KICTANet is a catalyst for reform in the Information and Communication Technology sector. Its work is guided by four pillars of Policy Advocacy, Capacity Building, Research, and Stakeholder Engagement.
KICTANetiquette : Adhere to the same standards of acceptable behaviors online that you follow in real life: respect people's times and bandwidth, share knowledge, don't flame or abuse or personalize, respect privacy, do not spam, do not market your wares or qualifications.
PRIVACY POLICY: See https://mm3-lists.kictanet.or.ke/mm/lists/kictanet.lists.kictanet.or.ke/
KICTANet - The Power of Communities, is Kenya's premier ICT policy engagement platform.
_______________________________________________ KICTANet mailing list -- kictanet@lists.kictanet.or.ke To unsubscribe send an email to kictanet-leave@lists.kictanet.or.ke Unsubscribe or change your options at: https://mm3-lists.kictanet.or.ke/mm/lists/kictanet.lists.kictanet.or.ke/
Mailing List Posts Online: https://posts.kictanet.or.ke/
Twitter: https://twitter.com/KICTANet/ Facebook: https://www.facebook.com/KICTANet/ Instagram: https://www.instagram.com/KICTANet/ LinkedIn: https://www.linkedin.com/company/kictanet/ YouTube: https://www.youtube.com/channel/UCbcLVjnPtTGBEeYLGUb2Yow/ WhatsApp Channel: https://whatsapp.com/channel/0029VaQsX4w6mYPIctLsGh1K
KICTANet is a multi-stakeholder Think Tank for people and institutions interested and involved in ICT policy and regulation. KICTANet is a catalyst for reform in the Information and Communication Technology sector. Its work is guided by four pillars of Policy Advocacy, Capacity Building, Research, and Stakeholder Engagement.
KICTANetiquette : Adhere to the same standards of acceptable behaviors online that you follow in real life: respect people's times and bandwidth, share knowledge, don't flame or abuse or personalize, respect privacy, do not spam, do not market your wares or qualifications.
PRIVACY POLICY: See https://mm3-lists.kictanet.or.ke/mm/lists/kictanet.lists.kictanet.or.ke/
KICTANet - The Power of Communities, is Kenya's premier ICT policy engagement platform.
_______________________________________________ KICTANet mailing list -- kictanet@lists.kictanet.or.ke To unsubscribe send an email to kictanet-leave@lists.kictanet.or.ke Unsubscribe or change your options at: https://mm3-lists.kictanet.or.ke/mm/lists/kictanet.lists.kictanet.or.ke/
Mailing List Posts Online: https://posts.kictanet.or.ke/
Twitter: https://twitter.com/KICTANet/ Facebook: https://www.facebook.com/KICTANet/ Instagram: https://www.instagram.com/KICTANet/ LinkedIn: https://www.linkedin.com/company/kictanet/ YouTube: https://www.youtube.com/channel/UCbcLVjnPtTGBEeYLGUb2Yow/ WhatsApp Channel: https://whatsapp.com/channel/0029VaQsX4w6mYPIctLsGh1K
KICTANet is a multi-stakeholder Think Tank for people and institutions interested and involved in ICT policy and regulation. KICTANet is a catalyst for reform in the Information and Communication Technology sector. Its work is guided by four pillars of Policy Advocacy, Capacity Building, Research, and Stakeholder Engagement.
KICTANetiquette : Adhere to the same standards of acceptable behaviors online that you follow in real life: respect people's times and bandwidth, share knowledge, don't flame or abuse or personalize, respect privacy, do not spam, do not market your wares or qualifications.
PRIVACY POLICY: See https://mm3-lists.kictanet.or.ke/mm/lists/kictanet.lists.kictanet.or.ke/
KICTANet - The Power of Communities, is Kenya's premier ICT policy engagement platform.
_______________________________________________ KICTANet mailing list -- kictanet@lists.kictanet.or.ke To unsubscribe send an email to kictanet-leave@lists.kictanet.or.ke Unsubscribe or change your options at: https://mm3-lists.kictanet.or.ke/mm/lists/kictanet.lists.kictanet.or.ke/
Mailing List Posts Online: https://posts.kictanet.or.ke/
Twitter: https://twitter.com/KICTANet/ Facebook: https://www.facebook.com/KICTANet/ Instagram: https://www.instagram.com/KICTANet/ LinkedIn: https://www.linkedin.com/company/kictanet/ YouTube: https://www.youtube.com/channel/UCbcLVjnPtTGBEeYLGUb2Yow/ WhatsApp Channel: https://whatsapp.com/channel/0029VaQsX4w6mYPIctLsGh1K
KICTANet is a multi-stakeholder Think Tank for people and institutions interested and involved in ICT policy and regulation. KICTANet is a catalyst for reform in the Information and Communication Technology sector. Its work is guided by four pillars of Policy Advocacy, Capacity Building, Research, and Stakeholder Engagement.
KICTANetiquette : Adhere to the same standards of acceptable behaviors online that you follow in real life: respect people's times and bandwidth, share knowledge, don't flame or abuse or personalize, respect privacy, do not spam, do not market your wares or qualifications.
PRIVACY POLICY: See https://mm3-lists.kictanet.or.ke/mm/lists/kictanet.lists.kictanet.or.ke/
KICTANet - The Power of Communities, is Kenya's premier ICT policy engagement platform.
_______________________________________________ KICTANet mailing list -- kictanet@lists.kictanet.or.ke To unsubscribe send an email to kictanet-leave@lists.kictanet.or.ke Unsubscribe or change your options at: https://mm3-lists.kictanet.or.ke/mm/lists/kictanet.lists.kictanet.or.ke/
Mailing List Posts Online: https://posts.kictanet.or.ke/
Twitter: https://twitter.com/KICTANet/ Facebook: https://www.facebook.com/KICTANet/ Instagram: https://www.instagram.com/KICTANet/ LinkedIn: https://www.linkedin.com/company/kictanet/ YouTube: https://www.youtube.com/channel/UCbcLVjnPtTGBEeYLGUb2Yow/ WhatsApp Channel: https://whatsapp.com/channel/0029VaQsX4w6mYPIctLsGh1K
KICTANet is a multi-stakeholder Think Tank for people and institutions interested and involved in ICT policy and regulation. KICTANet is a catalyst for reform in the Information and Communication Technology sector. Its work is guided by four pillars of Policy Advocacy, Capacity Building, Research, and Stakeholder Engagement.
KICTANetiquette : Adhere to the same standards of acceptable behaviors online that you follow in real life: respect people's times and bandwidth, share knowledge, don't flame or abuse or personalize, respect privacy, do not spam, do not market your wares or qualifications.
PRIVACY POLICY: See https://mm3-lists.kictanet.or.ke/mm/lists/kictanet.lists.kictanet.or.ke/
KICTANet - The Power of Communities, is Kenya's premier ICT policy engagement platform.
participants (17)
-
Ali Hussein -
Barrack Otieno -
Cephas Joseph -
Florence Awino -
Grace Githaiga -
Grace Mutung'u -
Innocent Muteshi -
Johnsey Kivoto -
Julie Mwaniki -
Liz Orembo -
Mugo Michael -
Nicodemus Nyakundi -
Ochieng A. Ogango -
Odhiambo Washington -
Shitemi Khamadi -
Twahir Hussein Kassim -
Wilfred Omondi