Safaricom has once again been caught misusing customer data, showing that it cannot be trusted to protect people’s private information. The company was recently fined Sh250,000 for using a customer’s national identity card without permission.
This case is just one example of how Safaricom continues to handle personal data recklessly, putting its customers at risk.
Instead of ensuring data security, the company has repeatedly violated privacy laws, exposing millions of Kenyans to fraud, identity theft, and surveillance.
The case involved Catherine Murithi, whose corporate phone line was transferred from her employer to her personal ID without her consent. After she left her job, Safaricom worked with her former employer, Becton Dickinson (BD), to transfer the number without informing her.
This was a clear violation of the Data Protection Act, which requires companies to inform individuals before processing their personal information. The Data Commissioner ruled that Safaricom had broken the law and fined both Safaricom and BD Sh250,000 each.
This ruling confirmed that Safaricom had no respect for customer privacy and acted without accountability.This is not the first time Safaricom has been caught misusing customer data. In 2019, a major scandal emerged after data from 11.5 million customers was leaked. It was reported that some Safaricom employees were selling customer information on the black market.
This meant that sensitive details, including phone numbers, personal identification, and call records, could easily fall into the hands of criminals. Instead of protecting customers, Safaricom’s weak security allowed their data to be exploited for profit.Even worse, Safaricom has been accused of working with security agencies to spy on Kenyans.
The company has a system that allows government agencies to track people’s call records and locations in real time. This surveillance happens without the knowledge or consent of customers, violating their right to privacy. The system, supplied by a foreign company, was meant for tracking criminals, but it has been misused to monitor ordinary citizens.
This means that anyone using a Safaricom line can be watched without knowing it. Safaricom’s repeated violations show that the company does not value its customers’ privacy. Despite being the largest telecom provider in Kenya, it has failed to protect the personal data of millions of people.
Instead of putting in place strict security measures, Safaricom has exposed customers to fraud, surveillance, and identity theft. The recent fine of Sh250,000 is too small to stop such a powerful company from continuing its bad practices.
A company of Safaricom’s size can easily pay the fine and continue with business as usual. The government must take stronger action to prevent Safaricom from misusing customer data. Heavier fines should be imposed, and stricter regulations must be enforced to ensure that no company can violate data protection laws without consequences.
Customers also need to be aware of how Safaricom is handling their data. Without serious changes, Kenyans will continue to suffer from privacy violations at the hands of a company that refuses to respect their rights.
Add Comment