Communications Authority Introduces New Customer Registration Rules for Cyber Cafés

The Communications Authority of Kenya (CA) has introduced new customer registration and record-keeping requirements for cyber cafés, with the measures set to take effect on Friday, August 142026.

Under the new requirements, cyber café operators will be required to register customers and maintain basic records of their sessions when customers use public internet access facilities.

Communication Authority Requires Cyber Cafés to Record Customer Details

According to the new requirements, cyber café operators will be required to establish a mechanism for registering customers and maintain a basic customer session log.

The session log will capture the terminal ID used by a customer, as well as the time their session starts and ends. Operators will be required to retain the records for at least three years.

The Communications Authority said the requirements are intended to strengthen accountability in public internet access facilities amid growing concerns over cybercrime.

Also Read: CA Allowed to Switch Off KTN, Radio Maisha and 4 Other Standard Group Stations

However, while cyber cafés will be required to record basic information about customers and their computer sessions, the session log will not include personal browsing history.

The requirements therefore focus on identifying the user of a particular terminal and establishing when the computer was accessed, rather than documenting individual customers’ websites or online activities.

Required to Issue Receipts and Allow Inspections

The Communications Authority also stated that the new measures will require cyber café operators to issue receipts to customers.

Operators will therefore need to maintain proper records of their services and customer sessions to comply with the new requirements.

The Authority will have the power to access cyber café premises, systems, equipment and records when carrying out an inspection, audit or investigation.

Additionally, operators will be required to install software and network filters that block access to illegal websites.

Web traffic will also be required to undergo real-time scanning to prevent dangerous downloads or the transfer of illegal files.

The Authority said the rules also target internet-enabled offences and abuses, including piracy, document forgery, identity theft and cyberbullying.

Also Read: Communication Authority Clarifies On Banning Low-Cost Phones

Authority Restricts Bandwidth Reselling

The Communications Authority is also restricting bandwidth reselling by cyber cafés.

Under the rules, cyber cafés will not be allowed to purchase bulk or high-capacity internet connectivity and divide it among customers without the regulator’s approval.

Businesses that breach the licensing conditions will face financial and operational consequences. The rules provide for fines equivalent to 0.2% of annual turnover, with a minimum penalty of Ksh500,000.

In addition to the financial penalties, businesses could face closure or suspension of licensed services for breaching the requirements.

Follow our WhatsApp channel for instant news updates.

Communications Authority of Kenya office headquarters in Nairobi
PHOTO/CA