Gov't seeks tougher cyber laws to combat AI-enabled threats

Speaking during the 6th Information Security Management Systems (ISMS) Conference at Sawela Lodge in Naivasha, Omollo said the rapid advancement of AI had exposed gaps in the existing legal framework, necessitating legislative reforms.

"We need to make amendments to some of the regulations, including the Act, and I want to assure all that the government is fully committed to delivering a secure cyberspace," he said.

The Principal Secretary warned that cyber attacks targeting government institutions have been on the rise in recent years, with Kenya suffering significant financial losses.

According to government data, the country lost KSh29 billion to cyber attacks in 2024, nearly double the KSh15 billion recorded the previous year.

While acknowledging AI's transformative potential, Omollo cautioned that the technology also presents new security challenges, particularly as the country prepares for the next General Election.

"As we get ready for the next General Election, we are seeing increased risks associated with AI-generated fakes and the manipulation of public opinion online," he said.

Omollo noted that the government remains committed to expanding digital service delivery, revealing that the eCitizen platform currently hosts more than 22,000 government services.

"The platform processes over 500,000 transactions daily, generating approximately KSh1 billion every day. There is also a major digital revolution in the health sector, including the digitisation of health records," he said.

He added that the Digital Health Authority and the Social Health Authority are spearheading the transformation of healthcare through technology.

National Computer and Cybercrimes Coordination Committee (NC4) Director Dr. James Kimuyu said Kenya had made significant progress in strengthening its cybersecurity framework.

He revealed that NC4 has developed a draft National Cybersecurity Policy and reviewed the National Cybersecurity Strategy, both of which are awaiting government approval.

Kimuyu added that the government was also working with the Central Bank of Kenya to develop regulations governing virtual assets as part of efforts to create a safer digital ecosystem.

Kenya Bureau of Standards (KEBS) Director of Standards Development and Trade Eng. Zachariah Lukorito said the rapid growth of artificial intelligence, cloud computing, big data and interconnected systems had heightened cybersecurity risks.

"As these technologies evolve, so do the complexity, scale and sophistication of cyber threats. In this environment, information security management systems are no longer optional," he sai