The Communications Authority of Kenya (CA) has dismissed public concerns that new SIM card registration regulations require the collection of biometric data, insisting that no such directive has been issued to mobile operators.
In a press statement, the regulator said recent commentary suggesting mandatory biometric capture was unfounded,adding that the revised rules published in May 2025 were designed to curb SIM-related fraud and strengthen trust in Kenya’s digital ecosystem.
“The Authority has NOT issued any directives for the collection of biometric data by our licensees,” the statement read.
The new regulations define biometric data broadly, covering elements such as fingerprints, DNA analysis, earlobe geometry, retinal scans and voice recognition. CA clarified, however, that the definition does not mean operators are required or permitted to collect such information during SIM card registration.
“As a matter of fact, the Authority has not directed our licensees to collect this data,” the statement added.
The regulator further emphasized that the rules impose strict obligations on operators regarding privacy, security and data protection. All subscriber information must be handled in full compliance with the Kenya Information and Communications Act (1998) and the Data Protection Act (2019), with prohibitions on sharing any data without consent or a lawful order.
According to CA, both the Authority and the Office of the Data Protection Commissioner (ODPC) will conduct regular audits and issue penalties for any misuse of customer information.
READ: Kenya’s Rising Cyber Threats: Why Securing the Digital Economy Is Now an Urgent Priority
On concerns around service suspension, the CA explained that the regulations only allow operators to suspend lines where consumers provide false information or ignore registration requirements, and only after prior notice. Operators must also maintain transparent and fair procedures in all customer engagements.
The regulator also acknowledged widespread frustration with spam messages, unauthorized subscriptions and misuse of phone numbers, saying enhanced SIM registration processes form part of a broader strategy to protect consumer welfare.
“With the rise of digital services, privacy features such as number masking are important for digital trust,” the statement said, reiterating CA’s commitment to supporting innovations that enhance data privacy in partnership with industry players.
