On March 6, 2026, the Kenyan Court of Appeal delivered a landmark constitutional judgment that significantly alters the legal landscape of digital expression, media regulation, and state surveillance in East Africa. The appellate Court formally declared Sections 22 and 23 of the Computer Misuse and Cybercrimes Act (2018)—which explicitly criminalized the publication of "false" or misleading information—unconstitutional and void. The ruling successfully concluded a protracted, multi-year constitutional battle initiated by the Bloggers Association of Kenya (BAKE), supported by a robust coalition of media and civil society groups including Article 19 East Africa, the Kenya Union of Journalists, and the Law Society of Kenya.
The judicial reasoning embedded in the decision highlighted the inherent constitutional dangers of statutory vagueness in the digital age. The Court ruled that the legislative provisions were overly broad and chronically ill-defined, creating an unacceptable and chilling risk of criminalizing private citizens who unknowingly shared information that was only subsequently deemed false by state authorities. The appellate judges recognized the profound epistemological difficulty of determining "absolute truth or falsehood" in a highly polarized, fast-moving political and digital environment. Consequently, the Court concluded that the state's aggressive attempt to legislate and enforce absolute truth via the penal code unjustifiably infringed upon explicit constitutional guarantees of freedom of expression, access to information, and media freedom.
This ruling represents a critical third-order shift in the governance of online spaces within Kenya. By completely removing the state's prosecutorial power to criminally punish the dissemination of unverified digital information, the judiciary has effectively decentralized the responsibility for addressing misinformation. The legal and operational burden now shifts heavily away from state prosecutors and onto the internal governance, algorithmic transparency, and platform moderation policies of major technology companies and Internet Service Providers (ISPs).
Crucially, the Court did not dismantle the nation's cybercrime framework entirely. It explicitly upheld the constitutionality of court-ordered data requests, surveillance powers, and the law's provisions regarding targeted cyber harassment. However, the judgment legally demands that such state surveillance and digital data extraction must meet exceptionally strict standards of specificity and proportionality to prevent unchecked government overreach. This highly nuanced decision serves as a powerful constitutional precedent for neighboring African jurisdictions currently grappling with the tension between combating digital misinformation and protecting democratic dissent. It signals a clear judicial consensus to regional lawmakers that while the state retains a legitimate and necessary interest in cybersecurity, it cannot weaponize "fake news" legislation as a dragnet to silence critical journalism, political opposition, or public discourse.
Source: BOWMANS