Kenya · Digital Rights

Kenya’s Maisha Namba digital ID system is advancing in 2026 despite persistent privacy and data-protection pushback, following the lifting of a court injunction in August 2024.

A biometric passport; Kenya’s Maisha Namba centralises identity data despite privacy objections.

The 2026 rollout

The government reportedly cleared a backlog of more than 600,000 second-generation IDs and printed over 1.7 million Maisha Cards this year. Birth e-notification has reportedly exceeded 90% of new births, signalling an aggressive push to enroll citizens.

These 2026 figures come from secondary reports and indicate that the Maisha Namba infrastructure is being rapidly deployed. The rollout continues despite unresolved legal questions and concerns raised by civil society groups.

For a foreign reader, it helps to understand that Kenya’s previous national ID system relied on a physical card and a separate registration process that often left gaps in coverage. Maisha Namba is designed to close those gaps by linking birth records, biometric data and a lifelong unique number from infancy.

That ambition explains the government’s focus on birth e-notification as a foundation stone: every registered newborn becomes part of the system from day one, theoretically making it harder for anyone to fall through the cracks later.

How courts halted—then cleared—the project

In late 2023 or early 2024, Justice John Chigiti ordered a halt after the Katiba Institute challenged the rollout. The judge ruled that the government had not conducted a Data Protection Impact Assessment (DPIA) as required by Kenya’s 2019 Data Protection Act.

That injunction was lifted in August 2024 by Justice Lawrence Mugambi, allowing the rollout to resume. The court’s reversal removed the immediate legal barrier, enabling the registration drive seen in 2026.

A DPIA is a formal risk-assessment tool that forces organisations to map out how personal data will be collected, stored, shared and protected before processing begins. Under Kenya’s Data Protection Act, it is mandatory for any project that poses a high risk to individual rights—exactly the kind of large-scale biometric undertaking Maisha Namba represents.

The initial court halt turned on the absence of this document, not on a finding that the system was inherently unlawful.

The data-protection case

The Katiba Institute and the Haki na Sheria Initiative brought the legal challenge, arguing that mass biometric collection violated data-protection safeguards. They highlighted the lack of a DPIA, insufficient public participation, and overly broad biometric categories—though 2024 rules reportedly dropped items such as iris, DNA, voice and earlobe geometry.

Petitioners also pointed to risks of identity theft, surveillance and weak deletion and audit safeguards. These concerns remain at the centre of the debate, even as millions of cards are issued.

The narrowing of biometric categories shows that litigation can shape policy even when it does not stop a project outright. Still, the core complaint endures: collecting fingerprints and facial geometry at a national scale creates a single point of failure.

If the central database were ever breached, the stolen biometrics cannot be reset like a password, which is why deletion rules and independent auditing matter so much to privacy advocates.

Who could be excluded

Marginalised communities, including border and stateless populations like the Nubians, have historically struggled to obtain official identification. Critics warn that Maisha Namba’s digital ecosystem may deepen exclusion for groups that already face barriers to registration.

Without strong remedies for those without standard documentation, the system risks disenfranchising some of Kenya’s most vulnerable residents. The case filed by the petitioners specifically flagged this exclusion danger.

In many countries, digital ID systems promise to include people who lack paper documents, but the reality often depends on the flexibility of enrolment rules. If Maisha Namba requires a birth certificate or a parent’s existing ID to register a child, families that never had those documents could remain invisible to the state.

Whether the government introduces alternative pathways—such as witness affidavits or community-based verification—will determine if the system narrows or widens Kenya’s identity gap.

The wider stakes

The dispute encapsulates a global tension between digital identity expansion and privacy norms. Kenya’s 2019 Data Protection Act requires a DPIA for high-risk processing, a standard that mirrors the EU’s General Data Protection Regulation’s approach to accountability.

How Kenyan courts ultimately balance national ID ambitions with data-protection principles could influence other African nations crafting similar systems. The government’s allocation of about 6.88 billion Kenyan shillings (roughly US$53.3 million) in a 2024/25 budget line underlines the scale of the project.

This is not merely a domestic story. Several African countries are modernising their identity infrastructure, and Kenya’s experience—both its legal setbacks and its resumed rollout—is being watched by policymakers from Accra to Kigali.

A ruling that strengthens DPIA enforcement could raise the bar for government tech procurement continent-wide, while a permissive outcome might encourage faster, less consultative rollouts elsewhere.

Background on Maisha Namba

Maisha Namba is Kenya’s national digital identity scheme, built on a unique personal identifier that links a physical Maisha Card, a digital ID and a central database. The programme aims to unify fragmented identity systems into a single, interoperable digital footprint.

The initiative gained momentum with a reported budget allocation of 6.88 billion Kenyan shillings (approximately US$53.3 million) for 2024/25. Its rollout has been marked by legal battles that shaped, but did not permanently stop, the project.

What to watch next is whether the courts will issue a final ruling on the underlying petition, not just the interim injunction. An open question is how the judiciary will treat the adequacy of any DPIA the government may have produced since the injunction was lifted.

Another is whether parliament will amend the data-protection framework in response to the controversy, potentially clarifying the threshold for public participation in future digital-identity projects.

Frequently Asked Questions

What is Kenya’s Maisha Namba digital ID system?

It is a national identity system comprising a Unique Personal Identifier, a physical Maisha Card, a digital ID and a centralised national database.

Why was the Maisha Namba rollout paused by the courts?

Justice John Chigiti halted the rollout in late 2023/early 2024 after the Katiba Institute sued, arguing the government had not carried out a mandatory Data Protection Impact Assessment under the 2019 Data Protection Act.

Is Maisha Namba being rolled out now?

Yes, the injunction was lifted in August 2024 by Justice Lawrence Mugambi, and the 2026 rollout has reportedly printed over 1.7 million Maisha Cards with birth e-notification exceeding 90%.