Kenya’s Communications Authority (CA) has issued a directive to financial institutions, car dealerships, and private entities to vet their tracking tech or face penalties.
In the wake of a cybercrime wave that surged to 3.5 billion incidents in 2024, regulators are cracking down on unlicensed tracking services and substandard equipment that pose risks to consumers, systems, and national stability.
The Risk Landscape
Tracking technologies—used in everything from fleet management to mobile banking—have become a hidden vector for cyber threats.
According to the Kenya National Bureau of Statistics (KNBS), system vulnerabilities accounted for 3.27 billion reported breaches in 2024, while web-based attacks exploded by over 2,000%, reaching 8.4 million incidents.
Why It Matters
- For Users: Unsecure tracking hardware can leak sensitive data or expose vehicles and assets to hijacking or manipulation.
- For Businesses: Companies face fines, lawsuits, and reputation damage for deploying unauthorised tech.
- For the Nation: A fractured tracking landscape weakens law enforcement, logistics, and digital trust.
- For the Economy: With malware advisories doubling in a year, unchecked systems threaten commerce and infrastructure.
What You Should Do Now
This is more than a cautionary message—the Communications Authority of Kenya is mandating immediate compliance. Organisations must ensure that any tracking technology they use is provided by a licensed Application Service Provider (ASP), specifically certified for fleet management and asset tracking services.
Before entering new contracts, stakeholders must verify that service providers hold a valid Annual Compliance Certificate. Existing partnerships should be carefully audited to confirm adherence to current licensing standards.
It’s equally important to note that internally developed or operated tracking systems are not exempt. Unless these systems are directly licensed by the Authority, they will be treated as violations, carrying the risk of regulatory penalties and enforcement action.
