, 147 tweets, 348 min read
My Authors
Read all threads
We are in court awaiting the #HudumaNamba judgement

Stay tuned for live updates
@privacyint @BBCAfrica @citizentvkenya @thekhrc @HakiKNCHR @Haki_na_Sheria @HakiCentre @lawyershubkenya @MUHURIkenya @InformAction_KE #HudumaNamba proceedings have not yet begun

We expect two judgements today - one in consolidated petitions 56, 58, & 59 of 2019 challenging the amendments that created #NIIMS & one in petition 163 of 2019 challenging the entire Statute Law Miscellaneous Amendments Act
@privacyint @BBCAfrica @citizentvkenya @thekhrc @HakiKNCHR @Haki_na_Sheria @HakiCentre @lawyershubkenya @MUHURIkenya @InformAction_KE Justice Nyamweya apologies for keep everyone waiting, the judges were having some technical difficulties
@privacyint @BBCAfrica @citizentvkenya @thekhrc @HakiKNCHR @Haki_na_Sheria @HakiCentre @lawyershubkenya @MUHURIkenya @InformAction_KE The judges will start with appearances (of the lawyers present)

They will then deliver summaries of the key findings and orders

The judgments run to 500 pages

#HudumaNamba
@privacyint @BBCAfrica @citizentvkenya @thekhrc @HakiKNCHR @Haki_na_Sheria @HakiCentre @lawyershubkenya @MUHURIkenya @InformAction_KE The judges will start with the summary of findings & orders for petitions 56, 58, & 59 and then proceed to petition 163
@privacyint @BBCAfrica @citizentvkenya @thekhrc @HakiKNCHR @Haki_na_Sheria @HakiCentre @lawyershubkenya @MUHURIkenya @InformAction_KE The appearances of counsel will be done slowly so that the judges can record all the details, given this is the last time we will all be here together
@privacyint @BBCAfrica @citizentvkenya @thekhrc @HakiKNCHR @Haki_na_Sheria @HakiCentre @lawyershubkenya @MUHURIkenya @InformAction_KE Appearances are finished

The judges will now start with delivery of their summary of findings in consolidated petitions 56, 58, & 59

#HudumaNamba
@privacyint @BBCAfrica @citizentvkenya @thekhrc @HakiKNCHR @Haki_na_Sheria @HakiCentre @lawyershubkenya @MUHURIkenya @InformAction_KE On Nov 20, 2018 National Assembly enacted Statute Law Misc. Amendments Act

President gave assent Dec 31, 2019

Into effect in January 2019
@privacyint @BBCAfrica @citizentvkenya @thekhrc @HakiKNCHR @Haki_na_Sheria @HakiCentre @lawyershubkenya @MUHURIkenya @InformAction_KE Act was to amend several laws, including the Registration of Persons Act

Amendments changed definitions including biometrics, GPS

Introduced new section 9(a) that establishes #NIIMS that is intended to be a single source of personal information on al Kenyans & foreign residents
@privacyint @BBCAfrica @citizentvkenya @thekhrc @HakiKNCHR @Haki_na_Sheria @HakiCentre @lawyershubkenya @MUHURIkenya @InformAction_KE Petitioners @NubianRights @thekhrc @HakiKNCHR are aggrieved by these amendments and feel they violate fundamental rights; they filed petitions 56, 58, & 59 in February 2019

The petitions were consolidated by the court
@privacyint @BBCAfrica @citizentvkenya @thekhrc @HakiKNCHR @Haki_na_Sheria @HakiCentre @lawyershubkenya @MUHURIkenya @InformAction_KE Interested parties @MUHURIkenya @HakiCentre @lawsocietykenya & @InformAction_KE supported petitioners

Respondents = AG, CS Ministry of Interior, PS Ministry of Interior, Director NRB, CS Ministry of ICT, Speaker National Assembly, & KLRC
@privacyint @BBCAfrica @citizentvkenya @thekhrc @HakiKNCHR @Haki_na_Sheria @HakiCentre @lawyershubkenya @MUHURIkenya @InformAction_KE @lawsocietykenya Challenges included concerns over public participation, data privacy, perpetuation of marginalization of Nubian community & other vulnerable groups who face difficulties getting documentation
@privacyint @BBCAfrica @citizentvkenya @thekhrc @HakiKNCHR @Haki_na_Sheria @HakiCentre @lawyershubkenya @MUHURIkenya @InformAction_KE @lawsocietykenya After considering pleadings, judges identified 5 issues:

1. Whether legislative process leading to Misc. Amendments Act was constitutional, including sub-issues:

-public participation
-procedural & appropriate
-if it affected counties
@privacyint @BBCAfrica @citizentvkenya @thekhrc @HakiKNCHR @Haki_na_Sheria @HakiCentre @lawyershubkenya @MUHURIkenya @InformAction_KE @lawsocietykenya 2. Whether Amendments violated the right to privacy, with sub-issues:

-if personal info collected was intrusive, excessive, disproportionate
-if children's' right to privacy was violated
-if there is sufficient data protection frameworks
-if reasonable to limit privacy
@privacyint @BBCAfrica @citizentvkenya @thekhrc @HakiKNCHR @Haki_na_Sheria @HakiCentre @lawyershubkenya @MUHURIkenya @InformAction_KE @lawsocietykenya 3. Whether Amendments violate right to equality with respect to Nubians & other marginalized communities
@privacyint @BBCAfrica @citizentvkenya @thekhrc @HakiKNCHR @Haki_na_Sheria @HakiCentre @lawyershubkenya @MUHURIkenya @InformAction_KE @lawsocietykenya Justice Korir will address the procedural question:

-All parties agreed that public participation is key for governance

-All parties agreed that in May 2018 notices were in newspapers; govt thinks it's sufficient & petitioners don't

Issue is therefore sufficiency
@privacyint @BBCAfrica @citizentvkenya @thekhrc @HakiKNCHR @Haki_na_Sheria @HakiCentre @lawyershubkenya @MUHURIkenya @InformAction_KE @lawsocietykenya Judges have cited several authorities including standing order 147 on public participation which set out requirements
@privacyint @BBCAfrica @citizentvkenya @thekhrc @HakiKNCHR @Haki_na_Sheria @HakiCentre @lawyershubkenya @MUHURIkenya @InformAction_KE @lawsocietykenya Legislative process begins from policy formulation stage

Various actors can be responsible for public participation, not only Parliament

There are roles to be played by others
@privacyint @BBCAfrica @citizentvkenya @thekhrc @HakiKNCHR @Haki_na_Sheria @HakiCentre @lawyershubkenya @MUHURIkenya @InformAction_KE @lawsocietykenya Be that as it may, the 6th respondent annexed copy of the Misc Amendments Bill and Memorandum of Objects that explained the bill aimed to amend Reg of Persons Act to establish NIIMS

The same was published in the Kenya Gazette
@privacyint @BBCAfrica @citizentvkenya @thekhrc @HakiKNCHR @Haki_na_Sheria @HakiCentre @lawyershubkenya @MUHURIkenya @InformAction_KE @lawsocietykenya Bill and memo was in the public domain

6th respondent also annexed the advertisement informing of the publication of the bill & invited members of the public to submit on the bill

Reg of Persons Act was shown to be sent to National Security Committee, w/minutes attached
@privacyint @BBCAfrica @citizentvkenya @thekhrc @HakiKNCHR @Haki_na_Sheria @HakiCentre @lawyershubkenya @MUHURIkenya @InformAction_KE @lawsocietykenya Petitioners rely on the advertisement itself to show time was not enough

Our view is that time was available for public participation
@privacyint @BBCAfrica @citizentvkenya @thekhrc @HakiKNCHR @Haki_na_Sheria @HakiCentre @lawyershubkenya @MUHURIkenya @InformAction_KE @lawsocietykenya Evidence shows public was aware of the bill from April 2018

Public could also submit through MPs

Not correct to state public only had the 7 days in the advertisement

Upon expiry of the 7 days, doors not closed for participation b/c opportunities in committee hearings
@privacyint @BBCAfrica @citizentvkenya @thekhrc @HakiKNCHR @Haki_na_Sheria @HakiCentre @lawyershubkenya @MUHURIkenya @InformAction_KE @lawsocietykenya Respondents show that opportunity was availed, including by 3rd petitioner @HakiKNCHR

Finding is that sufficient time was availed for public participation
@privacyint @BBCAfrica @citizentvkenya @thekhrc @HakiKNCHR @Haki_na_Sheria @HakiCentre @lawyershubkenya @MUHURIkenya @InformAction_KE @lawsocietykenya Efforts made by National Assembly to facilitate public participation, unlike in the previous authority (Law Society of Kenya case)
@privacyint @BBCAfrica @citizentvkenya @thekhrc @HakiKNCHR @Haki_na_Sheria @HakiCentre @lawyershubkenya @MUHURIkenya @InformAction_KE @lawsocietykenya In the newspaper advertisement, each Act to be amended was linked to a specific committee, which would allow participation

We find there was sufficient public participation in the circumstances in this case
@privacyint @BBCAfrica @citizentvkenya @thekhrc @HakiKNCHR @Haki_na_Sheria @HakiCentre @lawyershubkenya @MUHURIkenya @InformAction_KE @lawsocietykenya Use of omnibus bill, linked to different activities, the proposals will not receive the kind of attention they would in a stand-alone bill

Risk of excluding public is even more if short period for submitting views was provided

These views in LSK vs. AG case (2016)
@privacyint @BBCAfrica @citizentvkenya @thekhrc @HakiKNCHR @Haki_na_Sheria @HakiCentre @lawyershubkenya @MUHURIkenya @InformAction_KE @lawsocietykenya Omnibus bill denies public & Parliamentarians to review amendments and provide input
@privacyint @BBCAfrica @citizentvkenya @thekhrc @HakiKNCHR @Haki_na_Sheria @HakiCentre @lawyershubkenya @MUHURIkenya @InformAction_KE @lawsocietykenya In that case, omnibus bill ought to be confined to minor amendments

Key word here is "ought"
@privacyint @BBCAfrica @citizentvkenya @thekhrc @HakiKNCHR @Haki_na_Sheria @HakiCentre @lawyershubkenya @MUHURIkenya @InformAction_KE @lawsocietykenya We are therefore not pursuaded that court of appeal said omnibus bill cannot be used to make substantive amendments
@privacyint @BBCAfrica @citizentvkenya @thekhrc @HakiKNCHR @Haki_na_Sheria @HakiCentre @lawyershubkenya @MUHURIkenya @InformAction_KE @lawsocietykenya Question is whether the process is appropriate for the amendments

Amendment related to public funds will draw more attention

If there is evidence that principle of public participation was obliged with, court cannot rule against law just because omnibus bill was used
@privacyint @BBCAfrica @citizentvkenya @thekhrc @HakiKNCHR @Haki_na_Sheria @HakiCentre @lawyershubkenya @MUHURIkenya @InformAction_KE @lawsocietykenya Not up to the court to tell Parliament which type of bill to use

But if the process in line with Constitution - including whether there was sufficient public participation
@privacyint @BBCAfrica @citizentvkenya @thekhrc @HakiKNCHR @Haki_na_Sheria @HakiCentre @lawyershubkenya @MUHURIkenya @InformAction_KE @lawsocietykenya Petitioners said the bill concerned counties & should have gone to Senate

Respondents opposed that there was a role for the Senate
@privacyint @BBCAfrica @citizentvkenya @thekhrc @HakiKNCHR @Haki_na_Sheria @HakiCentre @lawyershubkenya @MUHURIkenya @InformAction_KE @lawsocietykenya Court notes that all parties agreed the Amendments were passed by National Assembly

Supreme Court has dealt with this issue extensively
@privacyint @BBCAfrica @citizentvkenya @thekhrc @HakiKNCHR @Haki_na_Sheria @HakiCentre @lawyershubkenya @MUHURIkenya @InformAction_KE @lawsocietykenya Court finds it necessary to quote the Supreme Court at length on the role of the Senate

However, we do not think the jurisdiction of the Senate extends to each and every bill considered by National Assembly

Hard to think of any legislation that does not touch on counties
@privacyint @BBCAfrica @citizentvkenya @thekhrc @HakiKNCHR @Haki_na_Sheria @HakiCentre @lawyershubkenya @MUHURIkenya @InformAction_KE @lawsocietykenya Function of counties do not include national population registers

Finding that impugned amendments did not require approval of Senate

That is not to say the bill shouldn't have been subjected to process set out by Supreme Court
@privacyint @BBCAfrica @citizentvkenya @thekhrc @HakiKNCHR @Haki_na_Sheria @HakiCentre @lawyershubkenya @MUHURIkenya @InformAction_KE @lawsocietykenya Court finds no merit in petitioners case that Amendments fail constitutional case in terms of the lack of the Senate
@privacyint @BBCAfrica @citizentvkenya @thekhrc @HakiKNCHR @Haki_na_Sheria @HakiCentre @lawyershubkenya @MUHURIkenya @InformAction_KE @lawsocietykenya Article 31 guarantees a general right to privacy and guards against specific infringement of privacy

Court cited many authorities from in and outside of Kenya (elaborated in written judgment) and noted rights of control over personal information
@privacyint @BBCAfrica @citizentvkenya @thekhrc @HakiKNCHR @Haki_na_Sheria @HakiCentre @lawyershubkenya @MUHURIkenya @InformAction_KE @lawsocietykenya Even information that relates to action in public place may be personal information that one may wish to keep private
@privacyint @BBCAfrica @citizentvkenya @thekhrc @HakiKNCHR @Haki_na_Sheria @HakiCentre @lawyershubkenya @MUHURIkenya @InformAction_KE @lawsocietykenya Petitioners particularly concerned about collection of sensitive biometric data, such as DNA

Also challenging in particular was requirement to provide GPS coordinates
@privacyint @BBCAfrica @citizentvkenya @thekhrc @HakiKNCHR @Haki_na_Sheria @HakiCentre @lawyershubkenya @MUHURIkenya @InformAction_KE @lawsocietykenya Respondents did not dispute biometric data would be collected

But said that biometric data was already being collected under the existing system, and is allowed under the Act as registrar can collect other attributes about a person

& said DNA & GPS was not collected
@privacyint @BBCAfrica @citizentvkenya @thekhrc @HakiKNCHR @Haki_na_Sheria @HakiCentre @lawyershubkenya @MUHURIkenya @InformAction_KE @lawsocietykenya It's not disputed that the Amendments introduced a definition of biometrics and defined some of those components

Judges first address legitimacy of privacy concerns

Biometic data by its very nature is personal information
@privacyint @BBCAfrica @citizentvkenya @thekhrc @HakiKNCHR @Haki_na_Sheria @HakiCentre @lawyershubkenya @MUHURIkenya @InformAction_KE @lawsocietykenya Also looked at definition of personal data in the #DataProtection Act of 2019, which includes biometric data
@privacyint @BBCAfrica @citizentvkenya @thekhrc @HakiKNCHR @Haki_na_Sheria @HakiCentre @lawyershubkenya @MUHURIkenya @InformAction_KE @lawsocietykenya Data subjects are identifiable if they can be directly or indirectly identified by name, number, or other special characteristic

Therefore, the court noted that the data collected by #NIIMS evidenced by the data capture form clearly falls into above definition of personal data
@privacyint @BBCAfrica @citizentvkenya @thekhrc @HakiKNCHR @Haki_na_Sheria @HakiCentre @lawyershubkenya @MUHURIkenya @InformAction_KE @lawsocietykenya Court looked at history of sensitive data

#DataProtection Act defines sensitive data - includes genetic data, biometric data, names of children/spouses, sex, etc.

Considered sensitive because of the higher impact of exposure of such data
@privacyint @BBCAfrica @citizentvkenya @thekhrc @HakiKNCHR @Haki_na_Sheria @HakiCentre @lawyershubkenya @MUHURIkenya @InformAction_KE @lawsocietykenya Petitioners also allege the data was intrusive - which would mean it was taken without knowledge of the data subject

Respondents showed the data capture form and said "mandatory" was removed from the form
@privacyint @BBCAfrica @citizentvkenya @thekhrc @HakiKNCHR @Haki_na_Sheria @HakiCentre @lawyershubkenya @MUHURIkenya @InformAction_KE @lawsocietykenya Petitioners did not bring any evidence that any person was forced to give data without consent
@privacyint @BBCAfrica @citizentvkenya @thekhrc @HakiKNCHR @Haki_na_Sheria @HakiCentre @lawyershubkenya @MUHURIkenya @InformAction_KE @lawsocietykenya Court takes judicial notice that GPS technology is satellite-based and widely used, such as in cars for directions
@privacyint @BBCAfrica @citizentvkenya @thekhrc @HakiKNCHR @Haki_na_Sheria @HakiCentre @lawyershubkenya @MUHURIkenya @InformAction_KE @lawsocietykenya Privacy implications for use of GPS monitors is that they can be used to track people without their knowledge
@privacyint @BBCAfrica @citizentvkenya @thekhrc @HakiKNCHR @Haki_na_Sheria @HakiCentre @lawyershubkenya @MUHURIkenya @InformAction_KE @lawsocietykenya Court refered to decision of US vs. Antoine (Jones) where attachment of GPS

Biometric and GPS data are personal, sensitive, & intrusive data

Court prevented use of data while case was pending for this reason
@privacyint @BBCAfrica @citizentvkenya @thekhrc @HakiKNCHR @Haki_na_Sheria @HakiCentre @lawyershubkenya @MUHURIkenya @InformAction_KE @lawsocietykenya Whether there is a violation will await a full review of the existing data protection framework

Thereforc, outstanding question - whether requirement & collection of biometric data was necessary
@privacyint @BBCAfrica @citizentvkenya @thekhrc @HakiKNCHR @Haki_na_Sheria @HakiCentre @lawyershubkenya @MUHURIkenya @InformAction_KE @lawsocietykenya Petitioners allege purpose of data not stated, and unnecessary data such as on agricultural information

Witnesses said authentication of fingerprints could lead to false conclusions because it relies on probabilities
@privacyint @BBCAfrica @citizentvkenya @thekhrc @HakiKNCHR @Haki_na_Sheria @HakiCentre @lawyershubkenya @MUHURIkenya @InformAction_KE @lawsocietykenya Respondents said right to privacy not an absolute right, reliable data required for service delivery & security

Respondents also say biometric data needed to establish national population register as single source of truth
@privacyint @BBCAfrica @citizentvkenya @thekhrc @HakiKNCHR @Haki_na_Sheria @HakiCentre @lawyershubkenya @MUHURIkenya @InformAction_KE @lawsocietykenya Witnesses gave detailed evidence on #NIIMS design as multi-model system that will mean biometric data is deterministic
@privacyint @BBCAfrica @citizentvkenya @thekhrc @HakiKNCHR @Haki_na_Sheria @HakiCentre @lawyershubkenya @MUHURIkenya @InformAction_KE @lawsocietykenya Judges appreciate detailed technical evidence

They want to clarify -

Utility of biometric data is to identify, & is therefore necessary for identification purposes
@privacyint @BBCAfrica @citizentvkenya @thekhrc @HakiKNCHR @Haki_na_Sheria @HakiCentre @lawyershubkenya @MUHURIkenya @InformAction_KE @lawsocietykenya The only reservation the judges have is use of DNA for identification purposes

Unlike other biometrics, DNA is comparison and does not allow for identification to be done in real-time and requires expertise
@privacyint @BBCAfrica @citizentvkenya @thekhrc @HakiKNCHR @Haki_na_Sheria @HakiCentre @lawyershubkenya @MUHURIkenya @InformAction_KE @lawsocietykenya Court finds use of DNA for identification in the case of Kenya is limited

Utility of GPS is even less evident
@privacyint @BBCAfrica @citizentvkenya @thekhrc @HakiKNCHR @Haki_na_Sheria @HakiCentre @lawyershubkenya @MUHURIkenya @InformAction_KE @lawsocietykenya Even though a biometric characteristic may be considered universal, not all individuals may have it

People may lose biometric characteristic over time

Different biometric characteristics can be combined

Court persuaded by evidence of witnesses of respondents
@privacyint @BBCAfrica @citizentvkenya @thekhrc @HakiKNCHR @Haki_na_Sheria @HakiCentre @lawyershubkenya @MUHURIkenya @InformAction_KE @lawsocietykenya Court persuaded by respondents that collection of multiple biometric characteristics will lead to system being deterministic
@privacyint @BBCAfrica @citizentvkenya @thekhrc @HakiKNCHR @Haki_na_Sheria @HakiCentre @lawyershubkenya @MUHURIkenya @InformAction_KE @lawsocietykenya On purpose of data collection - under section 9(a) of the Reg of Persons Act

Includes to establish population register, assign a unique number, etc.

Thus, principally an identification system
@privacyint @BBCAfrica @citizentvkenya @thekhrc @HakiKNCHR @Haki_na_Sheria @HakiCentre @lawyershubkenya @MUHURIkenya @InformAction_KE @lawsocietykenya Identification and verification processes will always require a database, say the judges

It can be done centrally or locally

To that extent, biometric data necessary for stated purposes of NIIMS
@privacyint @BBCAfrica @citizentvkenya @thekhrc @HakiKNCHR @Haki_na_Sheria @HakiCentre @lawyershubkenya @MUHURIkenya @InformAction_KE @lawsocietykenya System can only provide trustworthy information about identity of person if it holds information about that person in its database
@privacyint @BBCAfrica @citizentvkenya @thekhrc @HakiKNCHR @Haki_na_Sheria @HakiCentre @lawyershubkenya @MUHURIkenya @InformAction_KE @lawsocietykenya Petitioners said Act applies to those over 18 years

Respondents say the Act applies to "all" Kenyans; and that the system would play role in combating trafficking of children
@privacyint @BBCAfrica @citizentvkenya @thekhrc @HakiKNCHR @Haki_na_Sheria @HakiCentre @lawyershubkenya @MUHURIkenya @InformAction_KE @lawsocietykenya Respondents said implementation of #NIIMS is in best interest of the child - to promote shelter, health, etc.
@privacyint @BBCAfrica @citizentvkenya @thekhrc @HakiKNCHR @Haki_na_Sheria @HakiCentre @lawyershubkenya @MUHURIkenya @InformAction_KE @lawsocietykenya While respondents are reasonable and laudable, court notes the respondents did not address core issues that they believe the petitioners raised on children's rights - that Act doesn't apply to child & would violate child right to privacy
@privacyint @BBCAfrica @citizentvkenya @thekhrc @HakiKNCHR @Haki_na_Sheria @HakiCentre @lawyershubkenya @MUHURIkenya @InformAction_KE @lawsocietykenya Section 2 said Act applies to all persons who are citizens of Kenya who are 18 and over

Petitioners right initially

But amendment to section 9(a) says "all" Kenyans

Question is about anchoring #NIIMS in legislation applying to adults
@privacyint @BBCAfrica @citizentvkenya @thekhrc @HakiKNCHR @Haki_na_Sheria @HakiCentre @lawyershubkenya @MUHURIkenya @InformAction_KE @lawsocietykenya It appears that the manner in which #NIIMS was brought into being did not reflect much thought on the part of the respondents

#HudumaNamba
@privacyint @BBCAfrica @citizentvkenya @thekhrc @HakiKNCHR @Haki_na_Sheria @HakiCentre @lawyershubkenya @MUHURIkenya @InformAction_KE @lawsocietykenya Brought amendments in Act that applies to adults

2nd and 3rd respondents said #NIIMS would override other systems
@privacyint @BBCAfrica @citizentvkenya @thekhrc @HakiKNCHR @Haki_na_Sheria @HakiCentre @lawyershubkenya @MUHURIkenya @InformAction_KE @lawsocietykenya Court relied on authorities that later enactments that do not explicitly amend earlier that, if inconsistent, would still be considered to have amended it

This is logical because two inconsistent Acts cannot exist
@privacyint @BBCAfrica @citizentvkenya @thekhrc @HakiKNCHR @Haki_na_Sheria @HakiCentre @lawyershubkenya @MUHURIkenya @InformAction_KE @lawsocietykenya Section 9(a) contradicts Section 2 - the two provisions cannot operate at the same time in terms of application of #NIIMS to children

Court finds Section 9(a), being a later amendment, is deemed to have amended section 2

#NIIMS applies to children
@privacyint @BBCAfrica @citizentvkenya @thekhrc @HakiKNCHR @Haki_na_Sheria @HakiCentre @lawyershubkenya @MUHURIkenya @InformAction_KE @lawsocietykenya On whether there is violation to child's right to privacy -

Court is of the view that general protections related to privacy are also applicable to children, or even more
@privacyint @BBCAfrica @citizentvkenya @thekhrc @HakiKNCHR @Haki_na_Sheria @HakiCentre @lawyershubkenya @MUHURIkenya @InformAction_KE @lawsocietykenya There is need for particular provisions on consent of children, including age of consent and informing child in appropriate manner of conditions of such consent

Where child cannot give consent, much be authorized by parent or guardian
@privacyint @BBCAfrica @citizentvkenya @thekhrc @HakiKNCHR @Haki_na_Sheria @HakiCentre @lawyershubkenya @MUHURIkenya @InformAction_KE @lawsocietykenya Rights of child over the data upon reaching age of majority is important

We note no special provision in impugned amendments

Clearly risk of violation to child's right to privacy

However, Data Protection Act provides for processing of personal data relating to children
@privacyint @BBCAfrica @citizentvkenya @thekhrc @HakiKNCHR @Haki_na_Sheria @HakiCentre @lawyershubkenya @MUHURIkenya @InformAction_KE @lawsocietykenya However, there is no definition of the child exists in the Act

Rights at age of minority & majority also missing

Maintain conclusion that data protection is inadequate (for children)
@privacyint @BBCAfrica @citizentvkenya @thekhrc @HakiKNCHR @Haki_na_Sheria @HakiCentre @lawyershubkenya @MUHURIkenya @InformAction_KE @lawsocietykenya Judges note the various statutes cited by petitioners and respondents

And the Data Protection Act 2019 was enacted after the conclusion of hearings
@privacyint @BBCAfrica @citizentvkenya @thekhrc @HakiKNCHR @Haki_na_Sheria @HakiCentre @lawyershubkenya @MUHURIkenya @InformAction_KE @lawsocietykenya All parties felt the court should take judicial notice of the act - but petitioners said judicial notice and nothing more, respondents said take note of provisions

Judges say judicial notice allows a fact to be introduced into evidence if the root of that fact is so well known
@privacyint @BBCAfrica @citizentvkenya @thekhrc @HakiKNCHR @Haki_na_Sheria @HakiCentre @lawyershubkenya @MUHURIkenya @InformAction_KE @lawsocietykenya Judges' opinion is that nature of judicial notice means they will not only take notice of the Data Protection Act but also of the provisions therein

Protection of personal data relies largely on legal framework, including oversight mechanisms
@privacyint @BBCAfrica @citizentvkenya @thekhrc @HakiKNCHR @Haki_na_Sheria @HakiCentre @lawyershubkenya @MUHURIkenya @InformAction_KE @lawsocietykenya This is the case with NIIMS where vast amount of personal data is collected by state and data subjects have limited control over how information about them is used

Judges focused on whether the Data Protection Act complies with international standards & best practices
@privacyint @BBCAfrica @citizentvkenya @thekhrc @HakiKNCHR @Haki_na_Sheria @HakiCentre @lawyershubkenya @MUHURIkenya @InformAction_KE @lawsocietykenya However, standards provided are specific to regional court or the UN organization

Court opted to be guided by OECD Privacy Principles

#DataProtection #HudumaNamba
@privacyint @BBCAfrica @citizentvkenya @thekhrc @HakiKNCHR @Haki_na_Sheria @HakiCentre @lawyershubkenya @MUHURIkenya @InformAction_KE @lawsocietykenya Principles include data limitation, purpose specification, accountability principle, etc.

To a large extent, the Data Protection Act does provide for the principles cited in the OECD Privacy Principles
@privacyint @BBCAfrica @citizentvkenya @thekhrc @HakiKNCHR @Haki_na_Sheria @HakiCentre @lawyershubkenya @MUHURIkenya @InformAction_KE @lawsocietykenya The Act provides for an independent office of Data Commissioner and for Data Controllers

The court however noted that the Registration of Persons Act is not one of the Acts to which the Data Protection Act applies - yet processing of personal data means it does
@privacyint @BBCAfrica @citizentvkenya @thekhrc @HakiKNCHR @Haki_na_Sheria @HakiCentre @lawyershubkenya @MUHURIkenya @InformAction_KE @lawsocietykenya While date of commencement of the Data Protection Act was in November 2019, requires appointment of Commissioner & Controllers for implementation

Court finds while there is a legal framework in place, adequate protection of data require operation of that framework
@privacyint @BBCAfrica @citizentvkenya @thekhrc @HakiKNCHR @Haki_na_Sheria @HakiCentre @lawyershubkenya @MUHURIkenya @InformAction_KE @lawsocietykenya Part of the concern was around centralization and open/closed source nature of the system
@privacyint @BBCAfrica @citizentvkenya @thekhrc @HakiKNCHR @Haki_na_Sheria @HakiCentre @lawyershubkenya @MUHURIkenya @InformAction_KE @lawsocietykenya It is beyond the jurisdiction of the court to direct choices of design

Court will restrict itself to risks related to the right to privacy
@privacyint @BBCAfrica @citizentvkenya @thekhrc @HakiKNCHR @Haki_na_Sheria @HakiCentre @lawyershubkenya @MUHURIkenya @InformAction_KE @lawsocietykenya Court feels biggest risk is misuse of biometric data because it is connected to individuals and cannot be changed, and can be used for profiling, identity theft

In addition, data subject usually has no information or control over use of the biometric
@privacyint @BBCAfrica @citizentvkenya @thekhrc @HakiKNCHR @Haki_na_Sheria @HakiCentre @lawyershubkenya @MUHURIkenya @InformAction_KE @lawsocietykenya Court notes risks don't depend on whether database is centralized or decentralized, even if risks in centralized database may be magnified in terms of impact

Unauthorized access & use or use for unintended purposes can exist in both systems

#HudumaNamba #NIIMS #DataProtection
@privacyint @BBCAfrica @citizentvkenya @thekhrc @HakiKNCHR @Haki_na_Sheria @HakiCentre @lawyershubkenya @MUHURIkenya @InformAction_KE @lawsocietykenya All systems need detailed security policy that comply with international standards

For court's purposes, what is relevant is that the same standards should be provided in regulations that govern operation of the system
@privacyint @BBCAfrica @citizentvkenya @thekhrc @HakiKNCHR @Haki_na_Sheria @HakiCentre @lawyershubkenya @MUHURIkenya @InformAction_KE @lawsocietykenya Similar regulations in India - Aadhaar Data Security Regulations, Aadhaar Data Sharing Regulations, etc.

Respondents said there are no similar regulations
@privacyint @BBCAfrica @citizentvkenya @thekhrc @HakiKNCHR @Haki_na_Sheria @HakiCentre @lawyershubkenya @MUHURIkenya @InformAction_KE @lawsocietykenya On 4th sub-issue: reasonable to limit privacy

Court notes right to privacy can be limited under Constitution (b/c not listed as those that cannot be limited)

Limitation is permissible if meets criteria in 24(1) of the Constitution
@privacyint @BBCAfrica @citizentvkenya @thekhrc @HakiKNCHR @Haki_na_Sheria @HakiCentre @lawyershubkenya @MUHURIkenya @InformAction_KE @lawsocietykenya Court finds to require DNA & GPS without legislation on how the information would be used is a limitation to the right to privacy which is not justifiable

DNA & tracking of GPS could lead to considerable harm to data subjects

#HudumaNamba #NIIMS
@privacyint @BBCAfrica @citizentvkenya @thekhrc @HakiKNCHR @Haki_na_Sheria @HakiCentre @lawyershubkenya @MUHURIkenya @InformAction_KE @lawsocietykenya There cannot be any collection of DNA & GPS without legislation that authorizes the manner of that collection

That is a provision that limits right to privacy without justification
@privacyint @BBCAfrica @citizentvkenya @thekhrc @HakiKNCHR @Haki_na_Sheria @HakiCentre @lawyershubkenya @MUHURIkenya @InformAction_KE @lawsocietykenya Any law that limits fundamental rights must be clear about criminal penalties

This applies to any law that relates to collection of personal data
@privacyint @BBCAfrica @citizentvkenya @thekhrc @HakiKNCHR @Haki_na_Sheria @HakiCentre @lawyershubkenya @MUHURIkenya @InformAction_KE @lawsocietykenya It is contrary to principles of democratic governance & #ruleoflaw not to have comprehensive legislative framework when collecting data under impugned amendments

No reasons given by respondents as to lack of regulatory framework

Process of establishing #NIIMS was rushed
@privacyint @BBCAfrica @citizentvkenya @thekhrc @HakiKNCHR @Haki_na_Sheria @HakiCentre @lawyershubkenya @MUHURIkenya @InformAction_KE @lawsocietykenya Justice Ngugi will read the summary of findings related to equality & non-discrimination
@privacyint @BBCAfrica @citizentvkenya @thekhrc @HakiKNCHR @Haki_na_Sheria @HakiCentre @lawyershubkenya @MUHURIkenya @InformAction_KE @lawsocietykenya Court considered Constitution Article 27, various decisions of the courts related to findings of discrimination, & they have set out definitions of discrimination
@privacyint @BBCAfrica @citizentvkenya @thekhrc @HakiKNCHR @Haki_na_Sheria @HakiCentre @lawyershubkenya @MUHURIkenya @InformAction_KE @lawsocietykenya Court notes treatment of different groups is sometimes allowed, and judges have set out conditions that allow differentiation in treatment
@privacyint @BBCAfrica @citizentvkenya @thekhrc @HakiKNCHR @Haki_na_Sheria @HakiCentre @lawyershubkenya @MUHURIkenya @InformAction_KE @lawsocietykenya Court to determine if law differentiates, and if it does, if that differentiation is unfair
@privacyint @BBCAfrica @citizentvkenya @thekhrc @HakiKNCHR @Haki_na_Sheria @HakiCentre @lawyershubkenya @MUHURIkenya @InformAction_KE @lawsocietykenya With respect to burden of proof, it lies on the person to establish his/her claim

Judges have set out conditions on this in judgement as well
@privacyint @BBCAfrica @citizentvkenya @thekhrc @HakiKNCHR @Haki_na_Sheria @HakiCentre @lawyershubkenya @MUHURIkenya @InformAction_KE @lawsocietykenya Court looks to section 9(a) that sets up the #NIIMS system

The impugned law applies to all persons resident in Kenya whether they are nationals or foreigners

The law does not differentiate, & everyone inc. members of the Nubian, Shona community are entitled to register
@privacyint @BBCAfrica @citizentvkenya @thekhrc @HakiKNCHR @Haki_na_Sheria @HakiCentre @lawyershubkenya @MUHURIkenya @InformAction_KE @lawsocietykenya Petitioners allege the differentiation is in access to ID cards due to vetting, which is established in Reg of Persons Act in section 8(1)(a)

Judges set out response

Petitioners established violation of right to equality in that regard
@privacyint @BBCAfrica @citizentvkenya @thekhrc @HakiKNCHR @Haki_na_Sheria @HakiCentre @lawyershubkenya @MUHURIkenya @InformAction_KE @lawsocietykenya Judges understand to register for #NIIMS, one must provide an identification card

Whatever conditions are for ID cards must be met

Court understands issuance of ID cards & birth certificates will continue under Reg of Persons Act & Births/Deaths Act
@privacyint @BBCAfrica @citizentvkenya @thekhrc @HakiKNCHR @Haki_na_Sheria @HakiCentre @lawyershubkenya @MUHURIkenya @InformAction_KE @lawsocietykenya Section 8(1)(a) is not part of impugned amendments, but was established in Security Laws Amendments Act 2014

Court can only address amendment that establishes #NIIMS
@privacyint @BBCAfrica @citizentvkenya @thekhrc @HakiKNCHR @Haki_na_Sheria @HakiCentre @lawyershubkenya @MUHURIkenya @InformAction_KE @lawsocietykenya Challenges to those statutes & conditions for issuance to identity documents is entirely different
@privacyint @BBCAfrica @citizentvkenya @thekhrc @HakiKNCHR @Haki_na_Sheria @HakiCentre @lawyershubkenya @MUHURIkenya @InformAction_KE @lawsocietykenya This would depend on petitioner to prove factual basis of the violations of rights to equality & non-discrimination

Would require evidence from community on how NIIMS or vetting process violates their rights
@privacyint @BBCAfrica @citizentvkenya @thekhrc @HakiKNCHR @Haki_na_Sheria @HakiCentre @lawyershubkenya @MUHURIkenya @InformAction_KE @lawsocietykenya The judges cite the case of Ahmed Khalil Kafe, who worked for the police force in the 1960's & lost his ID card in the 1970's

He now has a waiting card, after applying most recently in 2018
@privacyint @BBCAfrica @citizentvkenya @thekhrc @HakiKNCHR @Haki_na_Sheria @HakiCentre @lawyershubkenya @MUHURIkenya @InformAction_KE @lawsocietykenya Petitioners also shared information about Nubians only being able to apply for an ID on certain days of the week, etc.

But main evidence is from one community member

1st petitioner has partnered with government to mobilize applications for documentation
@privacyint @BBCAfrica @citizentvkenya @thekhrc @HakiKNCHR @Haki_na_Sheria @HakiCentre @lawyershubkenya @MUHURIkenya @InformAction_KE @lawsocietykenya The second contention was on the centralization of the printing of documents and that public services can only be offered to persons who surrender their personal biometric information & acquire a Huduma Namba
@privacyint @BBCAfrica @citizentvkenya @thekhrc @HakiKNCHR @Haki_na_Sheria @HakiCentre @lawyershubkenya @MUHURIkenya @InformAction_KE @lawsocietykenya Relates to whether Huduma Namba is mandatory, thus violating right to non-discrimination
@privacyint @BBCAfrica @citizentvkenya @thekhrc @HakiKNCHR @Haki_na_Sheria @HakiCentre @lawyershubkenya @MUHURIkenya @InformAction_KE @lawsocietykenya Court has two scenarios presented to them -

First is gloomy scenario of petitioners that would lead to exclusion of large proportion of population due to failure to register - by choice or inability to reg b/c of lack of identification documents
@privacyint @BBCAfrica @citizentvkenya @thekhrc @HakiKNCHR @Haki_na_Sheria @HakiCentre @lawyershubkenya @MUHURIkenya @InformAction_KE @lawsocietykenya Second is optimistic scenario painted by respondents - services will be easy & efficient due to access to personal data, with ongoing registration
@privacyint @BBCAfrica @citizentvkenya @thekhrc @HakiKNCHR @Haki_na_Sheria @HakiCentre @lawyershubkenya @MUHURIkenya @InformAction_KE @lawsocietykenya All parties have agreed digital data is way of the future, but must not allow for exclusion from NIIMS or related services

Could result from lack of documents or lack of biometric data
@privacyint @BBCAfrica @citizentvkenya @thekhrc @HakiKNCHR @Haki_na_Sheria @HakiCentre @lawyershubkenya @MUHURIkenya @InformAction_KE @lawsocietykenya Court's view is that there may be a segment of the population that may be excluded - need clear regulatory framework that addresses the possibility of exclusion of NIIMS

Including those that lack docs or biometrics

But, not a sufficient reason to declare NIIMS unconsitutional
@privacyint @BBCAfrica @citizentvkenya @thekhrc @HakiKNCHR @Haki_na_Sheria @HakiCentre @lawyershubkenya @MUHURIkenya @InformAction_KE @lawsocietykenya Need clear regulatory framework to ensure all residents of Kenya can access documentation & the NIIMS system

#HudumaNamba
@privacyint @BBCAfrica @citizentvkenya @thekhrc @HakiKNCHR @Haki_na_Sheria @HakiCentre @lawyershubkenya @MUHURIkenya @InformAction_KE @lawsocietykenya 1. Collection of DNA & GPS for purposes of identification is intrusive & unnecessary to the extent it is not authorized by anchoring legislation is unconstitutional

5(1)(g) & 5(1)(h)(a) requires collection of GPS & DNA - the same sub-sections conflict w/constitution & null/void
@privacyint @BBCAfrica @citizentvkenya @thekhrc @HakiKNCHR @Haki_na_Sheria @HakiCentre @lawyershubkenya @MUHURIkenya @InformAction_KE @lawsocietykenya 2. Respondents can proceed with implementation of NIIMS and utilize the data on the condition that a comprehensive regulatory framework compliant with requirements set out in judgement is first enacted

3. Each party bear its own costs
@privacyint @BBCAfrica @citizentvkenya @thekhrc @HakiKNCHR @Haki_na_Sheria @HakiCentre @lawyershubkenya @MUHURIkenya @InformAction_KE @lawsocietykenya The petitioners challenged the Statute Law Misc. Amendments Act

The court says they cannot supervise the day to day actions of Parliament
@privacyint @BBCAfrica @citizentvkenya @thekhrc @HakiKNCHR @Haki_na_Sheria @HakiCentre @lawyershubkenya @MUHURIkenya @InformAction_KE @lawsocietykenya However, Amendments to Public Finance Management Act was not in the newspaper yet the Act amended it by introducing section 24(2)(a)

For the amendment to section 24, there was no public participation - and therefore unconstitutional, null & void
@privacyint @BBCAfrica @citizentvkenya @thekhrc @HakiKNCHR @Haki_na_Sheria @HakiCentre @lawyershubkenya @MUHURIkenya @InformAction_KE @lawsocietykenya Overall, the court finds sufficient public participation for the other amendments in the Act
@privacyint @BBCAfrica @citizentvkenya @thekhrc @HakiKNCHR @Haki_na_Sheria @HakiCentre @lawyershubkenya @MUHURIkenya @InformAction_KE @lawsocietykenya The court's findings on role of the Senate and on violation of the right to privacy are similar in petition 163 as noted above for petitions 56, 58, & 59
@privacyint @BBCAfrica @citizentvkenya @thekhrc @HakiKNCHR @Haki_na_Sheria @HakiCentre @lawyershubkenya @MUHURIkenya @InformAction_KE @lawsocietykenya Amendments to Section 6 of Kenya Information & Communication Act also unconstitutional
@privacyint @BBCAfrica @citizentvkenya @thekhrc @HakiKNCHR @Haki_na_Sheria @HakiCentre @lawyershubkenya @MUHURIkenya @InformAction_KE @lawsocietykenya Orders:

1. Declare section 6 of KICA as amended by Misc. Amendments Act is null & void

2. Declare section 24 of Public Finance Mgmt Act as amended is null & void

3. Collection of DNA & GPS intrusive, unnecessary, & to the extent it's not auth. by legis. is unconstitutional
@privacyint @BBCAfrica @citizentvkenya @thekhrc @HakiKNCHR @Haki_na_Sheria @HakiCentre @lawyershubkenya @MUHURIkenya @InformAction_KE @lawsocietykenya Respondents can continue with NIIMS upon enactment of comprehensive regulatory framework compliant with requirements of the judgement and passed before implementation

Each party to bear its own costs
@privacyint @BBCAfrica @citizentvkenya @thekhrc @HakiKNCHR @Haki_na_Sheria @HakiCentre @lawyershubkenya @MUHURIkenya @InformAction_KE @lawsocietykenya Justice Nyamweya wishes to thank all parties in all the petitions for the robust participation and detailed evidence & arguments
@privacyint @BBCAfrica @citizentvkenya @thekhrc @HakiKNCHR @Haki_na_Sheria @HakiCentre @lawyershubkenya @MUHURIkenya @InformAction_KE @lawsocietykenya Judgement is about 500 pages

The judges have summary for presentation purposes

Judges need to do a final proof-read, hopefully over the weekend, of the main judgement in both cases
Missing some Tweet in this thread? You can try to force a refresh.

Enjoying this thread?

Keep Current with Nubian Rights Forum

Profile picture

Stay in touch and get notified when new unrolls are available from this author!

Read all threads

This Thread may be Removed Anytime!

Twitter may remove this content at anytime, convert it as a PDF, save and print for later use!

Try unrolling a thread yourself!

how to unroll video

1) Follow Thread Reader App on Twitter so you can easily mention us!

2) Go to a Twitter thread (series of Tweets by the same owner) and mention us with a keyword "unroll" @threadreaderapp unroll

You can practice here first or read more on our help page!

Follow Us on Twitter!

Did Thread Reader help you today?

Support us! We are indie developers!


This site is made by just three indie developers on a laptop doing marketing, support and development! Read more about the story.

Become a Premium Member ($3.00/month or $30.00/year) and get exclusive features!

Become Premium

Too expensive? Make a small donation by buying us coffee ($5) or help with server cost ($10)

Donate via Paypal Become our Patreon

Thank you for your support!