In the legal world, some cases don’t just resolve a dispute between two people they redraw the boundaries of what is possible. As of mid-April 2026, the case of David Mokaya v. Safaricom & Others is doing exactly that.
The Phone in Your Pocket: A Sanctuary or a Witness?
The drama began when David Mokaya, a student at Moi University, was arrested over a social media post. While the initial criminal charges were eventually dismissed, a much larger concern emerged during the process: his sensitive data including precise location metadata and call records had been handed over by Safaricom to the Directorate of Criminal Investigations (DCI).
Mokaya’s legal team argued that this wasn’t just an investigation; it was an intrusion. It raised a fundamental question for every Kenyan: Does your service provider work for you, or is it a silent witness for the state?
When Handshakes Replace Warrants: The Rise of Informal Surveillance
The core of the legal “scandal” in this case is the lack of due process. Mokaya discovered that his data was shared without a court order. This case argues that the “backdoor” for data access must be permanently welded shut. If the state wants to peek into your digital life, they must follow the “front door” of the law by convincing a judge that there is a legitimate, legal reason to do so.
Judicial Intervention: Understanding the 2026 Conservatory Order.
In a move that has sent shockwaves through the telecommunications industry, Justice Bahati Mwamuye recently issued a conservatory order. This is essentially a legal “Stop” sign. The ruling bars Safaricom and the DCI from accessing, sharing, or disclosing Mokaya’s personal data without his express written consent or a valid, specific court order. This isn’t just a win for one student; it sets a precedent that the Data Protection Act is a mandatory shield, not a polite suggestion. Mokaya is seeking KSh 200 million in damages. While that number is staggering, the legal intent is purely deterrence.
By asking for such a high amount, the litigation aims to make the cost of breaching privacy higher than the cost of protecting it. If the court awards a significant sum, it will force every tech company in Kenya to move data security from a “technical footnote” to a “boardroom priority.” It sends a message: Privacy breaches aren’t just administrative errors they are expensive liabilities.
Constitutional Shielding: Article 31 in the Age of Metadata
Ultimately, this case is about the “Digital Social Contract.” It reinforces that under Article 31 of the Constitution, your privacy is a fundamental right that doesn’t disappear just because you use a mobile phone.
As the High Court continues to hear this matter throughout April 2026, the outcome will decide if our devices are private sanctuaries or open books. For the average Kenyan, the message is clear: Your data belongs to you, and the law is finally stepping up to make sure it stays that way.
