Kenya Tightens Cyber Café Rules as New Customer-Tracking Measures Take Effect

Kenya is taking another step towards strengthening digital security as the Communications Authority of Kenya (CA) introduces new requirements for cyber cafés and public internet access centres, effective August 14, 2026. Under the new requirements, cyber café operators will be required to register customers and maintain basic records of their internet sessions, including identification details, the terminal used and session times. The records are expected to help authorities trace digital activity when investigating cybercrime. The move comes as Kenya continues to experience growing threats including identity theft, online fraud, phishing, account takeovers and SIM-related scams. As more Kenyans rely on digital platforms for banking, government services, education and business, protecting digital identities has become increasingly important. For investigators, customer and session records could provide an important link between a cybercrime incident and the individual who was using a particular computer or connection at the time. However, the new measures also highlight the importance of data privacy and responsible information management. Cyber cafés will be handling sensitive customer information and must therefore ensure that these records are securely stored and accessed only for legitimate purposes. The regulations are not a complete solution to Kenya's growing cybercrime problem. Instead, they form part of a wider cybersecurity ecosystem that requires collaboration between government agencies, technology companies, businesses, cyber café operators and citizens. As Kenya accelerates its digital transformation, innovation must go hand in hand with security. Building a trusted digital economy requires not only expanding access to technology, but also ensuring that the systems and information behind that access are protected. For Kenya's growing technology and innovation ecosystem, the message is clear: the future of digital innovation must be secure, accountable and responsible.