Safaricom, Kenya’s leading mobile service provider, has denied in strong terms recent claims alleging it shares customer data with government agencies. Reports surfaced alleging that the telecom giant has been giving Kenyan security services real-time access to critical customer data, including call data records (CDRs) and location details, sparking widespread privacy concerns. However, Safaricom’s CEO Peter Ndegwa has addressed these claims, asserting that they are inaccurate and misleading.
In a public statement delivered during the company’s half-year financial results presentation, Ndegwa stated, “Some reports on this issue have been misrepresented, and we have clarified our stance to those responsible for the inaccuracies.” He added that with a customer base of over 36 million on the consumer side and 33 million on the mobile money platform M-PESA, unauthorized data sharing would be “disastrous” for Safaricom’s operations and public trust. Ndegwa also highlighted the stringent code of conduct the company’s 6,000 employees adhere to, which includes strict protocols around customer information management.
The original report suggested that Safaricom had teamed up with Neural Technologies, a UK-based firm, to develop technology that provides Kenyan security agencies with real-time data access, potentially allowing authorities to trace and analyze individuals’ movement patterns. However, Safaricom clarified that its engagement with Neural Technologies began in 2012 and was strictly for implementing a fraud detection tool across its business units, including M-PESA. The company reiterated that CDRs are used strictly for billing purposes and contain no real-time location tracking information.
According to Kenyan data protection laws, companies are required to secure user consent before sharing personal data, barring situations where a court order mandates it. Safaricom emphasized that it fully complies with these regulations, adhering to the guidelines of Kenya’s Office of the Data Protection Commissioner (ODPC).
In a statement released on October 31, the company underscored, “CDR data is generated post-call or post-message for billing and contains no live location data. We do not disclose customer data without a court order as mandated by Kenyan law.”
With privacy and cybersecurity concerns growing, Safaricom’s firm denial is another reason for all stakeholders in Africa to show firm commitment to safeguarding data as stipulated by existing regulatory standards.
5 replies on “Safaricom CEO Refutes Claims of Sharing Customer Data with Government Agencies”
[…] Safaricom CEO Refutes Claims of Sharing Customer Data with Government Agencies […]
[…] in competing publications, The Standard and The Star, alongside a company statement which we reported, stressing its commitment to data privacy This campaign was part of its 24th-anniversary […]
[…] CA’s letter, sent on October 31 to major telecom providers like Safaricom, Telkom Kenya, and Airtel Kenya, highlighted Telegram’s failure to collaborate with authorities […]
[…] for Pesalink to serve as Kenya’s national FPS, it must undergo major upgrades. Safaricom and KBA emphasize Pesalink’s ability to process up to 6,000 transactions per second, ensuring […]
[…] which has been selling Safaricom’s M-PESA services, SIM cards, and other products since 2002, claims it was unfairly removed from the dealership network… The company insists that Safaricom leveraged its dominant position to impose non-negotiable […]