High Court Affirms Mobile Numbers as Core Components of Digital Identity in Kenya

In a landmark ruling, the High Court of Kenya has recognized that mobile phone numbers are not merely contractual tools but integral components of an individual’s digital identity, protected under Article 31 of the Constitution, which guarantees the right to privacy. This judgment represents a significant development in Kenya’s evolving digital and data protection landscape.

Background

The case arose from challenges to the industry practice of deactivating mobile numbers after 90 days of inactivity. The practice, while widespread, posed challenges for individuals unable to use their phones temporarily due to circumstances such as incarceration, illness, or travel, leading to permanent loss of their numbers. In many cases, these numbers are linked to essential services, personal accounts, and social connections, underscoring their importance as identifiers in the digital sphere.

The Court’s Ruling

The High Court found the 90-day deactivation rule to be arbitrary and inconsistent with constitutional protections. Key points from the ruling include:

1. Digital Identity Protection: Mobile numbers constitute a core aspect of personal digital identity, and their reassignment or deactivation without proper safeguards can infringe on an individual’s right to privacy and control over personal information.
2. Consent and Notice: Mobile network operators are now required to obtain informed consent from subscribers before reassigning a number to a third party. Alternatively, operators must provide public notice to give subscribers adequate opportunity to retain their numbers.
3. SIM Cards as Enduring Identity Markers: The court emphasized that SIM cards and associated numbers are enduring elements of identity, not merely expendable assets within contractual arrangements.

Implications for Kenya’s Data Protection Framework

This ruling carries significant implications for both telecommunications providers and subscribers:

• Strengthening Subscriber Rights: Users now have legal backing to challenge arbitrary number deactivation and to insist on formal notice or consent before reassignment.
• Alignment with Data Protection Laws: The decision complements Kenya’s Data Protection Act, 2019, which requires that personal data be processed fairly, lawfully, and transparently. Mobile numbers, as identifiers, fall squarely within this framework.
• Operational Compliance: Telecommunication companies must review and update internal policies to ensure compliance with this ruling, including mechanisms for informed consent, notification, and record-keeping.
• Digital Inclusion and Access: Protecting mobile numbers as part of personal identity ensures continued access to digital services, which are increasingly central to financial inclusion, healthcare, education, and social connectivity in Kenya.

Conclusion

The High Court’s decision marks a pivotal shift in how digital identity is conceptualized in Kenya. By recognizing mobile numbers as essential components of personal identity, the ruling reinforces the constitutional right to privacy and strengthens consumer protection in the digital age. Telecommunication providers and subscribers alike must now navigate a landscape where digital identifiers are treated with legal respect and enduring significance.

For businesses, this underscores the need to adopt robust compliance frameworks to align with constitutional protections, data privacy obligations, and subscriber expectations.