advertisement
Kenya Orders Cyber Cafés to Log Customer Identities From August 14
The Communications Authority of Kenya (CA) has directed all licensed cyber cafés to record customer identities and internet session details from August 14, 2026, as part of measures aimed at strengthening accountability and combating cybercrime.
Under the new requirements, cyber café operators will be required to verify customers before granting access to computers and maintain records identifying who used each terminal and when. The measures are intended to address crimes including mobile money fraud, online scams and SIM-swap-related offences.
Operators will be required to capture each customer’s full name and national ID or passport number, alongside the terminal number used and the exact login and logout times. They must also issue formal receipts for every paid session.
advertisement
The records must be securely maintained for at least three years, while CA officers will be permitted to access cyber café premises, equipment and relevant records during compliance inspections.
The requirements focus on establishing a record of a customer’s identity, terminal and session duration. They do not, according to the directive as presented, require cyber cafés to record customers’ browsing histories or private messages.
The new obligations place additional data-protection responsibilities on cyber café operators, many of which are small businesses providing services such as printing, document preparation and access to government platforms including eCitizen.
advertisement
Operators will therefore need to protect the personal information collected from customers against unauthorised access, theft or disclosure. Those that fail to comply with the logging, record-retention and other requirements could face regulatory penalties, including fines, suspension of services or closure.
The directive comes as cyber cafés continue to serve as important access points for Kenyans who require internet connectivity and digital services, particularly for government transactions and other online services.