The National Assembly’s Ad-hoc Committee of Inquiry chaired by Hon. Gabriel Tongoyo (Narok West) met with the Cabinet Secretary (CS) for Information, Communication and the Digital Economy Mr. Eliud Owalo.

The legislators sought to know among others; the Ministry’s level of awareness of the data harvesting activities, as well as any legal and regulatory frameworks that should have been observed to avert this.

According to the CS, the Ministry is not involved in the day to day management and protection of individuals’ data in Kenya, as this is mandated to the Office of the Data Protection Commissioner (ODPC).

“It is a matter of profound concern to us, even as a Ministry, that while Worldcoin started collecting data in public places in May 2021, this fact only became known to the ODPC in April 2022, almost a year later, and other government agencies thereafter towards the end of July 2023, after this became a matter of grave public concern. This calls for policy and institutional reforms to ensure that our surveillance and response, when necessary, is satisfactory,” said CS Owalo.

Referencing the Data Protection Act 2019, CS Owalo said agents acting in place of foreign companies to collect data from Kenyans are required to comply with all regulations. He added that information available to his office indicates that none of these companies that act on behalf of Worldcoin are registered by the ODPC.

“From what you are telling us, the regulations came into effect in July 2022, while in May 2021 these companies were already operational and mining data from Kenyans in malls, schools among other places, while there were no guidelines on how to do this? How do you explain such a gap in our legal framework and was there any due diligence done in the issuance of their registration certificate?” Hon. Tongoyo asked.  

Of concern to the MPs, was the fact that registration with the ODPC requires one to register and conform with the regulations with the other institutions within whose purview a company intends to operate. And in this case, Worldcoin should have sought registration with the Registrar of Companies, as well as the Business Registration services, but failed to do this.

“I do not have any information that due diligence was undertaken in the registration and approval of the activities of Worldcoin and its subsidiaries in this operation. This gap, largely informed our decision to set up a working group on sectoral reforms to review the entire Policy, Legal Regulatory Framework in the Ministry and requisite reforms to address gaps and align to the new realities in our operating environment,” said Mr. Owalo.

Asked to highlight any possible legal gaps and appropriate legislative interventions necessitating Parliamentary intervention, the CS told the Committee that there is need for a policy and regulations review to address emerging and potentially disruptive technologies like Artificial intelligence and Blockchain technologies including cryptocurrencies.