Why Kenya's Proposed Internet Metering Law Is Sparking Privacy and Cost Concerns
Nairobi, 26 August 2026
A proposed Kenyan bill introducing utility-style internet meters could drastically increase broadband costs and compromise user privacy through invasive data tracking.
The Mechanics of the Proposed Law
The legislative landscape in Kenya is facing a significant shift following reports on 25 August 2026 regarding the Kenya Information and Communications (Amendment) Bill, 2025 [1]. Sponsored by Aldai Member of Parliament Marianne Kitany, the draft law seeks to transition the nation’s fixed broadband services from predictable flat-rate monthly fees to a consumption-based billing model [1]. Under this proposed framework, internet service providers (ISPs) would be mandated to assign unique “internet meter” numbers to each subscriber, mirroring traditional utility metering systems like electricity or water [1]. While the stated legislative intent is to improve pricing transparency and bolster consumer protection, industry experts warn of severe structural repercussions [1].
The Mechanics of the Proposed Law
Transitioning to a metered network requires a fundamental overhaul of how internet data is managed and billed across the country [1]. Currently, flat-rate packages allow Kenyan households and businesses to budget for their digital needs with absolute certainty [GPT]. Under the proposed bill, however, subscribers would face consumption-based tracking that treats every megabyte as a billable unit [1]. For families, remote workers, and educational institutions, this shift could turn a previously stable utility bill into a volatile and unpredictable monthly expense [1].
Escalating Costs for Providers and Consumers
Telecommunications companies and ISPs have quickly pointed out the immense financial and technical hurdles of implementing such a system [1]. Representatives from JTL, the operator of the Faiba brand, and Poa Internet have cautioned that the mandate would force providers to invest millions of dollars in highly sophisticated infrastructure [1]. Specifically, ISPs would need to deploy Deep Packet Inspection (DPI) technology alongside complex billing mediation systems to monitor and meter every single megabyte of traffic [1].
Escalating Costs for Providers and Consumers
Because these network upgrades are capital-intensive, ISPs warn that these multi-million-dollar implementation costs will inevitably be passed down to the end-users [1]. Consequently, rather than lowering costs, the bill is highly likely to increase internet bills significantly [1]. This price escalation will disproportionately impact heavy internet users, students, households with multiple connected devices, and businesses that rely on continuous online access to run their daily operations [1].
Unprecedented Risks to Digital Privacy
Beyond the financial strain, the bill has drawn sharp criticism from civil society and legal advocacy groups over its privacy implications [1]. The International Commission of Jurists and various digital rights organisations argue that the proposed mandate creates severe cybersecurity and surveillance risks [1]. To enforce consumption billing, ISPs would be required to centralise granular subscriber-level internet history and traffic volume data [1]. Critics point out that compiling such detailed dossiers on individual users directly conflicts with the established legal principle of “data minimisation” [1].
Unprecedented Risks to Digital Privacy
The lack of robust data protection protocols within the draft legislation further heightens these concerns [1]. Without stringent safeguards, the centralised repositories of subscriber data would become high-value targets for cybercriminals, risking massive data leaks or unauthorised commercial exploitation [1]. Furthermore, rights groups warn that such granular tracking mechanisms could easily be abused by State agencies to conduct surveillance on journalists, political dissenters, and ordinary citizens, undermining democratic freedoms in Kenya [1].