Why government wants social media regulated ahead of 2027 election

The government is set to control social media platforms after parliament approved the National Cybersecurity Agency Order, 2026, paving the way for the establishment of an institution that shall regulate the digital space in a move that is raising eyebrows.

Among the key roles of the National Cybersecurity Agency (NCSA) is to manage and coordinate cybersecurity ostensibly to fight online fraud, identity theft, malicious software, data breaches and misinformation campaigns.

However, there are concerns as elections approach next year, the agency will be used to spy on individuals, monitor online discussions, infringe on privacy or shut down the internet.

In the recent past, Kenyans and even civil society have resisted measures to control social media because the move amounts to arbitrary surveillance, suppression of free expression and censorship.

The government has been advocating for the need to regulate digital spaces, arguing that social media platforms pose serious security threats and challenges.  

While welcoming the move to regulate the internet, Internal Security Permanent Secretary Raymond Omollo said the establishment of the agency marks a significant step in Kenya's efforts to secure its rapidly expanding digital ecosystem.

According to the PS, NCSA shall be an autonomous regulatory and technical body responsible for the coordination of national cybersecurity matters, and will, from time to time, establish and operate satellites, units and specialised centres as may be required for the discharge of its many functions.

The agency will be conducting periodic technical assessments and vulnerability exposure of government and private sector digital networks to ensure adherence to established cybersecurity standards.

Further, the agency shall deploy advanced analytics and forensic tools to identify emerging digital vulnerabilities and issue technical advisories to relevant stakeholders.

“Cybercrime, ransomware attacks, online fraud, identity theft, malicious software, data breaches, misinformation campaigns and attacks on critical digital infrastructure continue to pose growing risks to national security, economic stability and public confidence in digital services. As government institutions, businesses and citizens become increasingly reliant on digital technologies, strengthening cybersecurity has become a national priority,” said Dr Omollo.

Kenya has emerged as one of Africa's leading digital economies, driven by advancements in mobile money, digital financial services, e-government platforms, telecommunications, health information systems, education technology and online commerce.

“While these developments have expanded opportunities for innovation, investment and service delivery, they have also increased exposure to cyber threats targeting both public and private sector systems,” added the PS.

According to the DataReportal report released last month, the country has more than 26 million internet users, a significant number as more and more Kenyans move away from legacy media in search of news, entertainment and vital information.

Certainly, regularising Facebook, WhatsApp, TikTok, YouTube, X (formerly Twitter), Instagram, Telegram, OperaMini, LinkedIn, and Snapchat, among others, is a slap in the face of Kenyans who heavily rely on these platforms to freely express themselves without the fear of censorship and unauthorised intrusion into their private spaces.

The NCSA will be headed by a Director General responsible for the day-to-day operations and administration of the agency, and answerable to a powerful Board comprising the Internal Security PS, the Attorney General, the Chief of Defence Forces, the Inspector General of Police, the Director General of the National Intelligence Service, the Director of Public Prosecutions, and two other representatives from academia and the private sector.  

“Establishment of the agency marks a significant step in Kenya's efforts to secure its rapidly expanding digital ecosystem and safeguard critical information infrastructure that supports national security, public service delivery, economic activity and the daily lives of millions of Kenyans,” said the PS.

The agency will also establish a Cybersecurity Centre of Excellence to promote research, innovation, skills development and the creation of locally developed cybersecurity solutions. In addition, it will lead efforts to address the country's cybersecurity skills gap through professional certification programmes, specialised training and technical capacity-building initiatives.

“A secure digital environment is essential for protecting public institutions, safeguarding citizens' data, supporting business continuity, attracting investment and advancing Kenya's digital transformation agenda,” noted Dr Omollo.

He challenged public institutions, private sector organisations, academic institutions and all stakeholders to work closely with the agency towards building a secure, resilient and trusted digital ecosystem for the benefit of all Kenyans.