KRA won’t access private data under new phone registration law: CA assures Kenyans

Appearing before the National Assembly's Committee on Communication, Information and Innovation, CA Director General DavidMugonyi was tasked to explain how the Authority protects citizens' data despite government policies. 

Beginning January 1, 2025, KRA issued a directive requiring all importers and assemblers to submit the devices' International Mobile Equipment Identity (IMEI) numbers to strengthen tax compliance. 

The MPs questioned whether KRA would infringe privacy laws on the pretence of data protection. 

"The issue isn't with registering IMEIs. What exactly are we allowing KRA to access on an individual's phone under the guise of protection," posed Dagoretti South MP John Kiarie. 

The lawmaker further highlighted the risk that Kenyans could avoid online transactions to avoid government surveillance. 

"What can we say to Kenyans who may flee from digital transactions to avoid scrutiny? We must ensure their data remains protected," he added. 

In response, Mugonyi explained that the CA had received a presidential directive to implement the system to ensure tax compliance nationwide. 

He added that the IMEI directive is key in ensuring the right products are imported into the country. 

"This engagement has nothing to do with the transactions we carry out on our phones. We want to ensure the right products are in the country, and the tax compliance aspect is strictly for that. KRA will not have access to people's data," Mugonyi asserted. 

Tetu MP Geoffrey Wandeto raised concerns over CA's ability to enforce compliance to deter controversial products from entering the market. 

"What are your enforcement capabilities when it comes to all communication devices being imported?" he posed. 

Mugonyi pointed out that the system will send a notification to users who activate a new device without having paid the required taxes.

Further, unregistered IMEIs would be placed on a blacklist, hence preventing it from connecting to any local network until the taxes are settled. 

The CA Director General noted that diplomats and tourists would be granted a grace period to comply as their devices would be put on a 'greylist'.