Computer Misuse and Cybercrimes Amendment Act 2025

Computer Misuse and Cybercrimes Amendment Act 2025: What Changed and What It Means for Victims In October 2025, Kenya’s cyber harassment laws changed dramatically — and then, a week later, partly changed back. If you are dealing with online harassment, cyberbullying, or defamation in Kenya, the current legal situation is genuinely confusing, even to lawyers. This guide explains exactly what the Computer Misuse and Cybercrimes (Amendment) Act 2025 says, what the High Court has suspended, what remains in force, and — most importantly — what this means practically if you are a victim trying to get justice. Quick answer: The Computer Misuse and Cybercrimes (Amendment) Act, 2025 was signed into law by President William Ruto on 15 October 2025, expanding the offence of cyber harassment under Section 27 to cover content that “detrimentally affects” a person, is “indecent or grossly offensive,” or is likely to cause someone to attempt suicide — with penalties of up to KES 20 million or 10 years imprisonment. Seven days later, on 22 October 2025, the High Court suspended Sections 27(1)(b), (c) and (2) pending a constitutional challenge brought by the Kenya Human Rights Commission and activist Reuben Kigame. Those provisions remain unenforceable. Critically, none of this affects your right to bring a civil defamation claim — the civil route under the Defamation Act (Cap. 36), covered in our step-by-step guide to suing for online defamation in Kenya, operates independently of the criminal cybercrime framework and is unaffected by this dispute. Background: Why the Law Changed The Computer Misuse and Cybercrimes Act was originally enacted in 2018 to address cyber fraud, identity theft, data breaches, and unauthorised access to computer systems. Section 27 of the original Act already criminalised “cyber harassment” — but as cyberbullying, online abuse, and coordinated harassment campaigns grew more sophisticated across Facebook, X (Twitter), TikTok, and WhatsApp, lawmakers argued the existing provisions were too narrow to address the scale of the problem. A draft amendment bill was published by Parliament in August 2024. After an extended period of public participation and committee review, the Computer Misuse and Cybercrimes (Amendment) Act was passed by Parliament and assented to by President Ruto on 15 October 2025. What the 2025 Amendment Changed The amendment introduced several changes across the Act, but three are most relevant to anyone dealing with online harassment. 1. Section 27 — Cyber Harassment, Expanded The amended Section 27 broadened the definition of cyber harassment to cover electronic communication that: The penalty for cyber harassment under Section 27 remains severe: a fine of up to KES 20 million, imprisonment for up to 10 years, or both. 2. Expanded Powers Over Websites and Applications The amendment broadened the mandate of the National Computer and Cybercrimes Coordination Committee, giving it authority to issue directives making websites or applications inaccessible where they are found to promote unlawful activity — including content involving the sexual exploitation of minors, or content advocating terrorism, religious extremism, or cultism. This power is subject to a requirement of proof before a directive can be issued. 3. Broader Evidence-Gathering Powers for Law Enforcement The amendment expanded the investigative powers available to law enforcement to access and preserve electronic evidence — relevant to how cybercrime investigations (including those touching on harassment) are conducted going forward. Why the Law Was Immediately Challenged The expanded Section 27 provisions — particularly the “detrimentally affects” and “indecent or grossly offensive” language — drew immediate and sustained criticism from civil society organisations, including the Law Society of Kenya, the Kenya Human Rights Commission (KHRC), and digital rights groups such as ARTICLE 19 and KICTANet. The core objection was about vagueness. Critics argued that phrases like “detrimentally affects a person” are so broad and subjective that almost any critical, satirical, or unflattering online statement about a public figure could be characterised as cyber harassment — creating a tool that could be used to silence legitimate criticism, journalism, and political commentary rather than to protect genuine victims of harassment. Former Chief Justice David Maraga publicly criticised the amended Act, describing the new provisions as risking abuse, censorship, and political manipulation, and arguing that granting such broad executive power was less about protecting Kenyans from cyberbullying and more about controlling information and silencing dissent. President Ruto, for his part, defended the amendments as necessary to protect Kenyans from cyberbullying and other online criminal activity. The High Court Suspension: What Actually Happened On 22 October 2025 — exactly one week after the President assented to the Act — Justice Lawrence Mugambi of the Milimani Law Courts issued conservatory orders in response to an urgent application filed by gospel musician and activist Reuben Kigame, the Law Society of Kenya, and the Kenya Human Rights Commission. The court suspended the enforcement, implementation, and operation of: This suspension is a conservatory order — a temporary measure that holds these specific provisions in legal limbo while the substantive constitutional petition is heard and determined. The petitioners argue that these provisions are unconstitutional because they introduce vague and overbroad language that criminalises legitimate online expression, and because they weaken the protections established under the Data Protection Act 2019. As of mid-2026, the constitutional petition challenging these provisions has not yet been finally determined — meaning the suspended sections remain unenforceable, and the underlying constitutional question remains open. What This Means in Practice If you are dealing with online harassment, cyberbullying, or defamation in Kenya right now, here is what the current legal landscape actually means for you. The suspended provisions cannot currently be used to prosecute someone If the harassment you are experiencing would only fall under the suspended language — content that is merely “indecent,” “grossly offensive,” or “detrimentally affects” you, without more — a criminal prosecution under those specific clauses is not currently available, because the provisions are under conservatory suspension. Other parts of Section 27, and other sections of the Act, remain in force The suspension is narrow — it applies only to Section 27(1)(b), (c) and (2). Other cyber offences

Computer Misuse and Cybercrimes Amendment Act 2025 Read More »

How Much Compensation Can You Claim for Cyberbullying in Kenya?

How Much Compensation Can You Claim for Cyberbullying in Kenya? (2026 Damages Guide) If you have been cyberbullied, defamed, or harassed online in Kenya, one of the first questions you will ask is simple: what is this actually worth? This guide breaks down how Kenyan courts calculate damages for online defamation and cyber harassment, what real cases have been awarded in 2024–2026, and the factors that move a claim from the low end to the high end. Quick answer: Kenyan courts have awarded online defamation damages ranging from KES 500,000 to over KES 45 million, depending on the gravity of the statement, its reach, and the conduct of the defendant. Typical awards for individuals affected by social media or WhatsApp defamation in 2025–2026 have fallen between KES 1 million and KES 6.5 million in general damages, with additional aggravated damages of KES 500,000 to KES 25 million where the defendant refused to apologise or acted with malice. There is no statutory cap on damages in Kenya. This guide is a companion to our step-by-step process guide, How to Sue for Online Defamation in Kenya, which covers the legal process from discovery to trial. This article focuses purely on the money — what courts have awarded, why, and how to maximize the strength of your claim. There Is No Cap on Damages in Kenya Unlike some jurisdictions that impose statutory limits on defamation awards, Kenyan law sets no maximum. Courts have repeatedly noted that the award of substantial damages in defamation cases is on the rise, and recent judgments — including awards running into the tens of millions of shillings — confirm that Kenyan courts are willing to make large awards where the harm is serious and well-evidenced. This matters because it means the size of your award is determined almost entirely by the facts of your case and the quality of your evidence — not by an arbitrary ceiling. A well-prepared claim, supported by forensic evidence documenting the reach and impact of the defamatory content, has genuine potential to result in a life-changing award. A poorly evidenced claim — even with a strong underlying legal argument — risks a token award that barely covers legal costs. Three Categories of Damages Kenyan courts can award up to three distinct categories of damages in a defamation case. Understanding the difference matters, because each is calculated differently and each requires different evidence. General Damages This is the baseline award — compensation for the injury to your reputation itself, and for the distress, hurt, and humiliation the defamatory publication caused you. General damages are awarded in almost every successful defamation claim and form the largest component of most awards. Courts assess general damages by looking at: Aggravated Damages Aggravated damages are an additional sum awarded where the defendant’s conduct made the harm worse — for example, where they acted out of malice, refused to apologise or retract despite being given the opportunity, doubled down on the allegation after being challenged, or where the manner of publication was especially humiliating. A demand letter that goes unanswered, or a defendant who responds to a demand letter by republishing or amplifying the original statement, significantly increases the likelihood and size of an aggravated damages award. This is one reason the demand letter step (covered in our step-by-step guide) matters — it is not just a procedural formality, it creates the evidence of the defendant’s conduct that aggravated damages depend on. Exemplary (Punitive) Damages Exemplary damages go beyond compensation — their purpose is to punish the defendant and deter similar conduct. Kenyan courts award these more rarely, and generally require evidence that the defendant acted with a calculated intent to profit from the defamatory publication, or with particularly egregious malice. Courts have declined to award exemplary damages where no such intent was demonstrated, even in cases where substantial general and aggravated damages were granted. Real Kenyan Damages Awards: 2024–2026 The table below sets out a selection of recent Kenyan court awards in defamation and online publication cases. These figures illustrate the range courts work within — and the kinds of facts that push an award toward the higher end. Case Year General Damages Aggravated/Other Context Nzibo v Nation Media Group Limited [2024] KEHC 12720 2024 KES 11,000,000 — Plaintiff sought KES 45M general, KES 25M aggravated, KES 10M punitive; court awarded KES 11M general, citing precedent of KES 15M awarded to a High Court judge in a 2015 case Chemailelei v Nation Media Group Limited [2024] KEELC 5977 2024 (claim dismissed on liability) KES 500,000 (would have been awarded) Court found no reputational harm proven, but indicated KES 500,000 aggravated damages would have applied for an unanswered demand letter Sen. Erick Okong’o Omogeni & Hon. Lady Justice Jacqueline Mogeni v Nation Media Group [2025] eKLR 2025 KES 5,000,000 (Senator) KES 1,000,000 + KES 500,000 aggravated (Judge) Two plaintiffs in one matter — a sitting senator and a High Court judge — awarded differing sums reflecting their respective harm Digital defamation matter — anonymous source reporting 2024–2025 KES 6,500,000 — High Court warned against media reliance on unverified anonymous sources; online publication’s reach was cited as an aggravating factor HCC No. E031 of 2025 (Machakos High Court) 2025–2026 Injunction granted Deletion order + costs WhatsApp group defamation matter; court ordered deletion of the defamatory post “within the shortest time practicable” rather than (or in addition to) monetary damages Note: figures above are drawn from published Kenyan court judgments and legal commentary current as of mid-2026. Every case turns on its own facts — these figures illustrate ranges and reasoning, not guaranteed outcomes. For historical context, it is worth noting that Kenyan courts have, in earlier high-profile media defamation cases, awarded sums considerably higher still — including a series of 2020–2022 judgments against a major media house totalling more than KES 64 million across five plaintiffs, and a 2021 judgment of KES 22 million (including costs) against a newspaper and journalist. While these were primarily media defendants rather than

How Much Compensation Can You Claim for Cyberbullying in Kenya? Read More »

How to Sue for Online Defamation in Kenya: A Step-by-Step Guide

How to Sue for Online Defamation in Kenya: A Step-by-Step Guide (2026) If someone has posted false, damaging statements about you on Facebook, X (Twitter), WhatsApp, TikTok, or any other online platform in Kenya, you have a legal remedy — and it can result in a substantial financial award. This guide walks you through exactly how a civil defamation lawsuit works in Kenya, from the moment you discover the post to the moment a court orders compensation. Quick answer: To sue for online defamation in Kenya, you must prove the statement was published to a third party, referred to you, was false, was defamatory in nature, and caused reputational harm. You then send a demand letter requesting retraction and apology, and if unresolved, file a civil suit — typically in the High Court for claims of significant value. Kenyan courts have awarded damages ranging from KES 500,000 to over KES 26 million in online defamation cases, with awards in 2024–2025 commonly falling between KES 1.5 million and KES 7 million. The single biggest factor determining whether your case succeeds — and how much you are awarded — is the quality of your evidence. This guide explains both the legal process and the evidence requirements, because in Kenya’s courts, the two are inseparable. What Counts as Online Defamation in Kenya? Online defamation occurs when a false statement is published electronically — on social media, in a WhatsApp group, on a blog, in a YouTube video, or anywhere else digital — and that statement damages a person’s reputation in the eyes of “right-thinking members of society.” Kenyan defamation law recognises two forms: Libel — defamation in a permanent or written form. A Facebook post, a tweet, a blog article, a WhatsApp text message, and a TikTok caption are all libel, because they exist in written or recorded form. Slander — defamation in spoken form. A defamatory statement made in a live audio space on X, a voice note circulated on WhatsApp, or a defamatory remark in a YouTube live stream could be treated as slander, though the recorded nature of most digital content means libel is the more common classification online. The distinction matters less in the digital context than it once did, because most online statements are recorded and therefore treated as libel — which generally does not require proof of special (financial) damage, unlike slander. The Five Elements You Must Prove To succeed in a civil defamation claim in Kenya, you — as the plaintiff — must establish all five of the following elements. Missing even one can be fatal to your case. 1. A Defamatory Statement The words must be capable of injuring your character or lowering your standing in the eyes of reasonable members of society. This includes direct accusations (e.g., “he is a thief”), insinuations, and even content that implies wrongdoing through context — such as a photo posted alongside a caption that suggests criminal conduct. 2. Reference to You The statement must identify you — either by name, or by implication that a reasonable person reading it would understand it to refer to you. Kenyan courts have confirmed that you can sue for defamation even if your name is not explicitly mentioned, provided the surrounding context makes the reference to you clear to anyone familiar with the situation. 3. Publication to a Third Party The statement must have been communicated to at least one person other than you and the person who made it. This is where digital evidence becomes critical — and where most self-represented claimants fail. A screenshot showing a post exists is not the same as evidence proving the post was seen by others. Kenyan case law has confirmed that publication occurs even within closed groups. A statement made in a WhatsApp group — even a relatively small one — satisfies the publication requirement, because it has been communicated to third parties beyond the speaker and the subject. 4. Falsity The statement must be false. Truth is a complete defence to defamation in Kenya — if the defendant can prove the substance of what they said was true, your claim fails regardless of how damaging the statement was. This is why it is important to be honest with yourself (and your advocate) about whether the underlying allegation has any factual basis, even a partial one. 5. Reputational Harm The statement must have caused, or be likely to cause, damage to your reputation. For libel published online, harm is generally presumed once publication is established — you do not need to prove you lost a specific contract or relationship, although evidence of actual harm (lost business, social exclusion, professional consequences) significantly strengthens your claim for damages. Step-by-Step: The Civil Defamation Process in Kenya Step 1: Do Not Engage, Delete, or Confront Before doing anything else: do not respond to the post, do not delete your own related content, and do not confront the person who posted it. Engaging publicly can be used against you — your response might itself contain statements that expose you to a counter-claim, and confrontation gives the person posting time to delete the evidence before it is preserved. Step 2: Preserve the Evidence Forensically This is the step that determines whether your case wins or loses. A simple phone screenshot can be challenged in court on the basis that it could have been edited, that it lacks metadata proving when it was taken, and that it does not establish how widely the content was shared. A forensically sound evidence package includes: If you are not sure how to do this yourself, a forensic investigator can preserve this evidence within 24–48 hours — before the poster has a chance to delete it. Our guide on Cyberbullying Investigation Services in Kenya covers this in detail. Step 3: Identify the Defendant If the post was made under the person’s real name, this step is straightforward. If it was made anonymously or under a pseudonym, you will need to identify the person before

How to Sue for Online Defamation in Kenya: A Step-by-Step Guide Read More »