Gov't to establish National Cybersecurity Agency to protect Kenyans' data

Kenya is set to establish a National Cybersecurity Agency to protect citizens’ data, secure government systems and position the country as a regional hub for cyber resilience, ICT and Digital Economy Principal Secretary John Tanui has said.

Speaking on the government’s digital inclusion and security agenda, PS Tanui said the proposed agency has already received Cabinet approval and will be tabled in Parliament, following consultations with the Ministry of Interior.

“Cybersecurity is a very important area. It is not a problem of Kenya alone, it is a global challenge, and we must put the right structures in place to protect our digital space,” he said.

Tanui noted that the new agency will strengthen coordination of national responses to cyber threats and complement existing institutions such as the Office of the Data Protection Commissioner (ODPC).

“The first protection is personal data. That is why we are very grateful to the Office of the Data Protection Commissioner, which has established structures and regional offices to help keep Kenyans’ data safe and also make Kenya attractive for investment,” he said.

He added that Kenya is working towards meeting international data protection standards, with a target of engaging Europe on data adequacy by 2026.

“Our aim is to reach the level where Kenya can engage Europe on adequacy, meaning our data protection framework is trusted and respected internationally,” Tanui said.

The PS said the government has also strengthened cybersecurity capacity within the public sector by restructuring ICT roles across ministries.

“In the past, ICT officers were mainly connecting computers. Today, every State department has a directorate of ICT headed by a director, who sits in management meetings and helps prioritise cybersecurity issues,” he said.

Tanui said Kenya has so far managed to contain cyber incidents without major disruptions, even as global platforms face frequent attacks.

“Cybersecurity issues are not isolated. Even big global companies face them, but as a country we have been able to deal with incidents without negative impact,” he said.

Beyond security, Tanui described cybersecurity as a major jobs’ opportunity for young people, noting a global shortage of skilled professionals.

“There are about 1.3 million cybersecurity jobs globally that are not filled. We are encouraging our children to study cybersecurity skills so they can take up these opportunities, whether in hospitals, supermarkets, government or internationally,” he said.

According to Tanui, the planned agency will anchor Kenya’s ambition to become Africa’s cybersecurity hub.

“Our expectation is that if someone has a cybersecurity problem in Africa, they should come to Kenya for a solution. With the rise of AI, cybersecurity will only become more important, and Kenya must be ready,” he said.