Kenya Computer Misuse and Cybercrimes Act
Amended Kenya · In force May 30, 2018 · no upcoming deadlines
Deadlines
| Date | What happens | When |
|---|---|---|
| Nov 4, 202510 months ago | 2025 amendments commence | 11 months ago |
| May 30, 20188 years ago | Act commences | 8.3 years ago |
Summaries for reference, not legal advice. Check the official text.
What it does
Kenya's main cybercrime law. It creates offences such as unauthorised access, interference, cyber harassment and false publication, sets up a National Computer and Cybercrimes Co-ordination Committee, and requires critical infrastructure owners to report threatening incidents. The 2025 amendment adds identity theft rules and lets the Committee order websites or apps that promote unlawful activity, child sexual content, terrorism or extremism to be blocked.
- Who it applies to
- Everyone in Kenya; owners and operators of designated critical information infrastructure have reporting and protection duties.
- Penalties
- For example, unauthorised access carries a fine up to KES 5 million or up to 3 years in prison; offences against protected systems carry up to KES 25 million or 20 years.
- Enforced by
- National Computer and Cybercrimes Co-ordination Committee, National Police Service and the courts
- Official name
- Computer Misuse and Cybercrimes Act, 2018
- Citation
- Act No. 5 of 2018 (Cap. 79C), amended by Act No. 17 of 2025
- Topics
- cybersecurity, online-safety
Research notes
Kenya Law is run by the National Council for Law Reporting, a state body. Several sections of the 2018 Act were challenged in court, and Kenya Law lists a 2025 challenge (Law Society of Kenya and 8 others v Attorney General) that cites the 2025 amendment. Check current court orders before relying on the amended provisions.
Related
Questions about Kenya Computer Misuse and Cybercrimes Act
- What are the Kenya Computer Misuse and Cybercrimes Act compliance deadlines?
- May 30, 2018: Act commences. Nov 4, 2025: 2025 amendments commence.
- When does Kenya Computer Misuse and Cybercrimes Act take effect?
- Kenya Computer Misuse and Cybercrimes Act took effect on May 30, 2018.
- Who does Kenya Computer Misuse and Cybercrimes Act apply to?
- Everyone in Kenya; owners and operators of designated critical information infrastructure have reporting and protection duties.
- What are the penalties under Kenya Computer Misuse and Cybercrimes Act?
- For example, unauthorised access carries a fine up to KES 5 million or up to 3 years in prison; offences against protected systems carry up to KES 25 million or 20 years.