Few policy proposals in recent memory have generated as much public anxiety as reports that the Government of Kenya intends to “sell citizens’ data” through the proposed National Data Governance Policy. Social media platforms have since been awash with claims that Kenyans’ personal information on eCitizen will be auctioned to the highest bidder, with some commentators drawing parallels to global data misuse scandals and warning of an imminent erosion of privacy rights.  

Public concern over privacy is both legitimate and necessary. Trust remains the currency of the digital economy. Nevertheless, meaningful policy discourse must be anchored on facts rather than fear. A closer reading of the draft policy reveals a more nuanced reality than the alarmist narrative currently dominating public debate. 

The Misconception: Government Is Not Proposing to Sell Personal Data 

At the centre of the controversy lies a fundamental misunderstanding. The draft National Data Governance Policy does not propose the commercialisation of personal data. Instead, it contemplates the creation of a marketplace for anonymised and aggregated datasets derived from government systems such as eCitizen and other public digital platforms. The policy explicitly distinguishes between personal data, which remains protected under the Data Protection Act, 2019, and non-personal data that has been stripped of identifiers capable of revealing an individual’s identity.  

Consequently, claims that names, ID numbers, telephone numbers, passport details or personal records will be sold to private companies are not supported by the text of the policy itself. Examples of the datasets contemplated include trends in business registrations, regional demand for government services, vehicle registration statistics, agricultural production patterns and aggregated health indicators. Such datasets are intended to provide insights rather than expose individual citizens.  

Data Markets Are Not a Kenyan Invention 

Equally important is the recognition that the concept of monetising non-personal public data is not unique to Kenya. Across the world, governments increasingly regard data as an economic asset capable of supporting innovation, research and evidence-based policymaking. 

Countries within the European Union, the United Kingdom, Singapore and Australia have spent years developing frameworks that facilitate access to government-held datasets while preserving privacy protections. Open data portals, research licensing arrangements and controlled access environments have become important tools for economic planning, scientific research and private-sector innovation. 

Kenya’s proposal, therefore, reflects a broader global shift towards viewing data as an economic resource alongside land, labour and capital. The draft policy itself describes data as a strategic national asset capable of strengthening governance, improving service delivery and accelerating socio-economic transformation.  

Why Government Is Pursuing the Policy 

Context is critical. Kenya’s digital transformation has accelerated significantly over the past decade. Millions of transactions flow through eCitizen every year, while hundreds of thousands of users access the platform daily. Government institutions now hold vast amounts of information that can potentially improve planning and public service delivery.  

However, much of this data remains fragmented across ministries, departments and agencies. The policy seeks to address longstanding challenges including duplication of data collection, inconsistent standards, siloed systems and limited interoperability between institutions. Policymakers argue that better governance of public data could reduce inefficiencies while enabling more evidence-driven decision-making.  

From a public policy perspective, the rationale is understandable. Transport planners can benefit from aggregated mobility data. Agricultural researchers can use crop production trends. Businesses can leverage market insights to develop products tailored to local demand. Governments worldwide increasingly utilise such datasets to improve service delivery and stimulate innovation. 

Trust as the Real Concern 

Many Kenyans are not reacting solely to the contents of the draft policy. Their concerns are informed by broader questions regarding institutional trust, cybersecurity preparedness and historical experiences with data breaches. Online discussions reveal that a significant portion of public anxiety stems from doubts about whether anonymisation safeguards can be effectively implemented and enforced.  

Such concerns deserve serious consideration. International experience demonstrates that anonymisation is not a magic bullet. Advances in data analytics have occasionally enabled the re-identification of supposedly anonymous datasets when combined with information from other sources. Policymakers must therefore avoid presenting anonymisation as an absolute guarantee of privacy. 

Strong governance, independent oversight, robust cybersecurity controls and meaningful accountability mechanisms will ultimately determine whether the policy succeeds or fails. 

Kenya already possesses an important foundation through the Data Protection Act, 2019 and the Office of the Data Protection Commissioner. The challenge now lies in ensuring that any future data marketplace operates within a framework that enhances, rather than weakens, existing privacy protections. 

Conclusion 

Kenya’s digital economy cannot thrive without trust. Equally, the country cannot fully realise the value of public data if fear and misinformation dominate policy discourse. 

Framing the National Data Governance Policy as a scheme to sell citizens’ personal information obscures the more important conversation that the country should be having. The central question is not whether anonymised public data can create economic value. Global evidence suggests it can. The real question is whether Kenya possesses the institutions, safeguards and public confidence necessary to govern such a system responsibly. 

Citizens are right to scrutinise the proposal. Civil society is right to demand stronger protections. Policymakers are equally right to explore how data can support innovation and economic growth. Productive engagement, however, requires a shared commitment to facts. 

Kenya stands at a pivotal moment in its digital transformation journey. Public trust will not be earned through assurances alone. It will be earned through transparency, accountability and demonstrable protection of citizens’ rights. Until then, the debate should remain focused not on the fiction that personal data is being sold, but on the far more consequential task of ensuring that national data governance is worthy of public confidence.