- Human rights activist Reuben Kigame Lichete and the Kenya Human Rights Commission (KHRC) filed a constitutional petition challenging the Computer Misuse and Cybercrimes (Amendment) Act, 2024.
They argued that its unconstitutional and a direct assault on fundamental freedoms, including the right to privacy, freedom of expression, and media independence.
In the petition filed against the Attorney General and the Speaker of the National Assembly, the petitioners argue that the new law, which was signed by President William Ruto on October 15, 2025, introduces vague and overbroad provisions that undermine the Data Protection Act, 2019, and violate several provisions of the Constitution of Kenya, 2010.
The petition lists the Kenya Union of Journalists (KUJ), Media Council of Kenya (MCK), Law Society of Kenya (LSK), and the Office of the Data Protection Commissioner (ODPC) as interested parties.
Kigame and KHRC say that the amendment criminalizes “false, misleading, and mischievous” information without clear definitions, opening the door to abuse by law enforcement agencies and creating a chilling effect on free speech.
They further faulted the law for introducing mandatory verification of social media accounts, requiring users to link their online profiles to government-issued legal names, a move they describe as a “severe, blanket infringement” on the right to privacy.
“The mandatory social media verification mandate constitutes an unnecessary and disproportionate intrusion into the private affairs of Kenyans,” the petition stated.
“It violates the principle of data minimization and fairness under the Data Protection Act.”
The petitioners also argued that the amendment to Section 27 of the Principal Act which criminalizes communications that may cause another person to commit suicide is unconstitutionally vague, lacking clear legal standards or intent requirements, and therefore open to arbitrary enforcement.
They contend that the legislative process leading to the enactment of the amendment law was procedurally defective, as Parliament failed to refer the Bill to the Senate, despite it affecting county functions under Part 2 of the Fourth Schedule of the Constitution.
They argued that this failure violated Articles 110(1), 110(3), and 110(4) of the Constitution, which require Senate participation in legislation concerning counties.
According to the petition, the amendments also undermine the Data Protection Commissioner’s oversight role by creating “parallel, overlapping and less rigorous” procedures for data handling, contrary to the spirit of the Data Protection Act, 2019, which was enacted to give effect to Article 31 of the Constitution.
The petitioners asked the court to declare the 2024 amendments null and void, arguing that they contravene Articles 10, 24, 31, 33, 34, 35, 36 and 47 of the Constitution.
They also sought a permanent order restraining the government from enforcing the contested provisions.
“The impugned law represents a glaring abuse of constitutional guarantees and threatens to erode Kenya’s hard-won freedoms,” the petition reads in part.
“Unless this Honourable Court intervenes, the violation and contravention of constitutional rights will continue to the detriment of the sovereign people of Kenya.”
