The government has said Kenyans will not be required to provide biometric data when registering new mobile phone lines, ending recent fears that new SIM card regulations would require invasive personal information. The Communications Authority of Kenya (CA) said on Tuesday that it hasn’t issued any directives mandating the collection of biometric data for new SIM registrations.
“The CA has noted concerns regarding the collection of biometric data during registration of new mobile phone lines as provided for in the revised SIM card regulations. The concerns are unfounded,” a statement by the CA reads. “We wish to clarify that CA has not issued any directives for the collection of biometric data by our licensees. The new SIM card registration regulations do not contain any provision for the collection of biometric data.”
The regulatory agency designed the new regulations to protect citizens from SIM card-related fraud and other criminal activities, including identity theft, SIM-box fraud and scams. The regulations also aim to strengthen the integrity of telecommunications services by ensuring that every registered line belongs to a real person.
According to CA, the new regulations will also support secure access to digital services such as mobile money, e-government and e-commerce.
The clarification comes after speculation that new SIM registration rules could require highly sensitive biological identifiers, including DNA analysis, blood type, retinal scans, and even voice recognition. Critics had warned that such requirements could expose millions of subscribers to severe privacy risks.
CA issued a notice last month directing all mobile network operators and subscribers to comply with the Kenya Information and Communications (Registration of Telecommunications Service Subscribers) Regulations, 2025.
The Kenya Information and Communications (Registration of Telecommunications Service Subscribers) Regulations, 2025, primarily aim to combat fraud and enhance security.
According to CA, although the new regulations identify biometric data as personal data derived from specific technical processing based on physical, physiological or behavioral characteristics, including blood type, DNA analysis, fingerprints, earlobe geometry, retinal scans and voice recognition, the definition doesn’t mean operators will collect all this information from subscribers during SIM card registration.
CA further explained that the new SIM card regulations place stringent security and confidentiality obligations on telecommunications operators.
“All subscriber data is to be handled, processed and protected in compliance with the Kenya Information and Communications Act, 1998, and the Data Protection Act, 2019. Accordingly, operators are prohibited from sharing subscriber data without their consent or a lawful order. CA will continue providing strict oversight, including regular audits, and issue strong penalties for abuse or misuse of customer data,” CA stated.
The revised regulations allow operators to suspend SIM cards when subscribers provide false information or repeatedly ignore registration requirements. The regulations also make it clear that operators cannot disconnect any subscriber without prior notice. The rules require operators to establish clear, fair and transparent procedures for all dealings with consumers.
CA further revealed that it has acknowledged consumer frustrations over spam messages, unsolicited subscriptions, unauthorized use of phone numbers and premium services, and that it’s working to streamline these services.
“We have noted consumer frustration over spam messages, unsolicited subscriptions, unauthorised use of phone numbers and premium services. The concerns are a priority for the CA, and the improved SIM card registration processes are part of the larger strategy to safeguard consumer interests and welfare across all networks,” the statement read.
The post Kenyans Can Register New SIM Cards Without Biometric Data, CA Confirms appeared first on Bossnana.
