By W. N. Kariuki & Co. Advocates

“Justice, Integrity, and Personal Legal Attention You Can Trust.”

Kenya’s transition into digital governance has been marked by bold innovation and bold debate. The introduction of Huduma Namba, now evolving into the Maisha Namba, was touted as a breakthrough; one unique digital identity to simplify access to all government services. But beneath that convenience lies a critical constitutional question: how do we balance efficiency with privacy?

Huduma Namba was designed to create a single source of truth for every Kenyan citizen and resident. The idea was simple; integrate all personal data, from birth registration to tax, education, and health, into one central system. The goal was faster access to services, reduced duplication, and cleaner government databases. However, this convenience comes with a price. The more data the State collects, the higher the risk of misuse, leaks, or surveillance. That is where the Data Protection Act, 2019, steps in.

The Data Protection Act was passed in 2019 to operationalize the right to privacy enshrined in Article 31 of the Constitution of Kenya. It sets the rules for how personal information, including biometric and demographic data, must be collected, processed, stored, and shared. Under this law, data must be collected fairly and transparently. Individuals must consent to its collection and know how it will be used. Organizations must keep it secure, use it only for specific purposes, and delete it when no longer necessary.

The Office of the Data Protection Commissioner ensures compliance and can impose penalties for violations. In short, the law protects your personal data from being turned into a public commodity.The Data Protection Act champions individual rights. Huduma Namba, in contrast, champions state efficiency. The tension lies in how much data is collected, who controls it, and how it is protected.

While Huduma Namba collects sensitive biometric data, questions linger. Was public consent truly informed? Where is this data stored? Who can access it? What happens in case of a breach?

These were the same concerns raised in Nubian Rights Forum v. Attorney General (2020), where the High Court in its ratio was of the view that the government must first comply with the Data Protection Act before fully implementing Huduma Namba.Kenya’s digital future depends on building trust, not just technology. Data-driven systems like Maisha Namba can transform governance, but they must be grounded in constitutional safeguards. Efficiency cannot come at the expense of privacy.

A truly digital Kenya must protect both citizens’ rights and public service delivery.At W. N. Kariuki & Co. Advocates, we believe that modernization and privacy can coexist if guided by the rule of law. The Data Protection Act is not an obstacle; it is a shield ensuring that progress never tramples on rights.

For legal insights, guidance on data compliance, or privacy-related disputes, contact:

Phone: +254727507731

Email: info@wnkadvocates.co.ke

Website: www.wnkadvocates.co.ke