By 
If you have ever sat through a full day of dead Wi-Fi with no explanation and no refund, the government just handed you some leverage. On July 1, 2026, the Kenya Information and Communications (Consumer Protection) Regulations, 2026 officially came into force, replacing the 2010 rules that have governed telecom consumer rights for the past 16 years.
This is not a minor update. It is part of a much larger overhaul of 15 sets of regulations under the Kenya Information and Communications Act (KICA), covering everything from phone charging ports to satellite internet licensing. But for the average Kenyan consumer, the Consumer Protection Regulations are the ones that actually change how your relationship with Safaricom, Airtel, Telkom, or your local ISP works day to day.
Here is everything you need to know, plus why a separate and far more controversial bill in Parliament could undo a lot of the goodwill these new rules are meant to create.
The Outage Credit System: Getting Paid for Bad Service
The headline change is what has been dubbed the "Outage Credit" system. If your internet or phone service goes down and the fault lies with your provider, you are now entitled to compensation, either automatically or upon request.
The important detail that many early reports glossed over is that this is not a vague, goodwill gesture left to each company's discretion. Licensees must submit their outage credit system to the Communications Authority of Kenya (CA) for approval, and once approved, it becomes a binding part of your subscriber agreement. That is a meaningful difference. It means the CA gets to review whether a provider's compensation formula is fair before it ever reaches your bill.
There is one exemption worth knowing about: force majeure events, think natural disasters or other circumstances outside a provider's control, are excluded from compensation. So a fibre cut caused by a landslide will not qualify, but a fibre cut caused by poor maintenance likely will.
This provision did not come out of nowhere. Earlier this year, CA Director-General David Mugonyi told a National Assembly committee that KICA 1998 "lacks clear provisions to mandate compensation for consumers during service disruptions." MPs had been pressing regulators for months over data bundles that expire before customers can use them and network outages that go uncompensated. The Outage Credit system looks like a direct response to that pressure.
No More Surprise Charges
The regulations explicitly ban telcos from charging you for premium SMS services or digital products you never opted into. If you have ever noticed a mysterious KES 20 or KES 50 deduction from your airtime for a "service" you do not remember signing up for, this is the rule meant to stop it.
Paired with this is a broader restriction on marketing communication. Companies can no longer add you to a marketing list without your prior consent, and every promotional message must clearly identify the sender and include a working opt-out option. If you have been fielding unsolicited SMS blasts for years, this gives you an actual legal basis to push back.
Free, Itemized Billing on Request
Consumers can now request a fully detailed breakdown of their data or airtime usage at no cost. The regulations go further than just granting this right. They set a minimum standard for what every bill must include:
The billing period covered
A full breakdown of charges
The applicable rates
The total amount due
The payment deadline
Providers are also required to notify you in advance of any changes to tariffs or billing structures. In other words, no more discovering a price hike only when your balance disappears faster than usual.
A Complaints Process With Actual Teeth
Previously, filing a complaint with your provider could feel like shouting into a void. The new regulations require licensees to run multi-channel customer care, covering physical locations, phone lines, and electronic channels, and to make these accessible to people with disabilities.
Complaints must now be acknowledged within 30 days, assigned a tracking reference number, and resolved free of charge. If your provider fails to resolve the issue, you can escalate directly to the CA.
Child Protection Gets Written Into Telecom Law
One provision that has received less attention but is arguably just as significant is the new child protection requirement. Licensees must now provide parental control tools and take reasonable steps to block unlawful, violent, abusive, or sexually explicit content. Providers are also explicitly barred from knowingly helping children access such content.
This is the first time child safety obligations have been this directly written into Kenya's telecom consumer framework, reflecting a broader global trend of regulators treating internet providers as gatekeepers rather than neutral pipes.
Emergency Access and Service Discontinuation
Two more provisions round out the package. Emergency numbers must remain free at all times, and where technically feasible, providers should be able to forward relevant personal data to emergency responders during an emergency call, a detail that will matter more in accident and crisis response scenarios.
On the other end, if a provider wants to discontinue a service entirely, they now need CA approval and must give subscribers at least three months' notice, along with a clear explanation. Customers must be allowed to exit penalty-free, with any unused balances or deposits refunded.
What Happens If Providers Ignore These Rules
Violating the regulations is now a criminal offense. Providers face fines of up to KES 1 million, up to six months in prison, or both. Licensees have a three-month compliance window from the regulations' effective date, with the CA able to grant extensions for good reason.
My take here is that the penalty structure is a genuine departure from how Kenya has historically handled telecom accountability, which has mostly relied on administrative fines that operators treat as a cost of doing business. Attaching criminal liability, even if enforcement ends up being selective, changes the calculus for compliance teams inside these companies.
The Elephant in the Room: The KICA Amendment Bill
Here is where the story gets complicated. While the Consumer Protection Regulations 2026 are being welcomed as a win for consumers, a separate and far more contentious piece of legislation is moving through Parliament that could reshape how you pay for internet entirely.
The Kenya Information and Communication (Amendment) Bill, 2025, sponsored by Aldai MP Marianne Kitany, is currently before the National Assembly's Communication, Information and Innovation Committee. Its core proposal is to force ISPs to abandon flat-rate "unlimited" home internet packages in favor of a metered billing system, similar to how water or electricity is billed.
How the Metering System Would Work
The bill amends Section 2 of KICA to expand the definition of "telecommunication operator" to explicitly include ISPs, which would require them to be licensed under the new framework (though existing licenses remain valid until they expire). It then amends Section 27A to require ISPs to operate a meter billing system that assigns every customer a unique, identifiable internet meter number, tracks real time data consumption, and generates invoices based strictly on usage.
ISPs would also be required to submit detailed billing system data, including customer meter numbers, to the CA at least once every financial year.
Kitany's argument is straightforward: she believes flat-rate billing lets ISPs profit from data that customers never actually use. "Internet service providers know that consumers will not use all data bundles they purchase leading to huge profits," she has said, framing the bill as a consumer protection measure grounded in Article 46 of the Constitution.
Why Civil Society Is Furious
Two objections keep surfacing in analysis from legal and digital rights groups, including ICJ Kenya and several Nairobi law firms that have published detailed breakdowns of the bill.
The first is surveillance. Linking every household to a traceable meter number, and requiring ISPs to report that data to the CA annually, creates exactly the kind of pipeline that privacy advocates worry about. The bill currently has no defined limits on how long this data is stored, what happens to it once the CA receives it, or what consent mechanisms apply. That is a significant gap, especially under a Data Protection Act framework that is supposed to demand exactly those kinds of safeguards.
The second objection is economic. Shifting from flat-rate to consumption-based billing would likely raise costs substantially for heavy users, including remote workers, software developers, students taking online courses, and streaming-heavy households. Critics argue this risks widening Kenya's digital divide rather than closing it, since the people most likely to get squeezed by metered billing are often the ones for whom the internet is doing the most economic and educational heavy lifting.
There is also a less-discussed provision worth noting separately: the bill introduces mandatory age verification for social media users based on national ID numbers, aimed at protecting minors online. While the intent is defensible, critics point out that a blanket ID requirement could exclude younger users and people without formal identification, cutting against the same digital inclusion goals the bill claims to support.
Two Different Philosophies Colliding
Here is the tension worth sitting with. The Consumer Protection Regulations 2026 are built around giving consumers more visibility and more compensation within the current unlimited-package model. The KICA Amendment Bill wants to replace that model entirely with a utility-style metering approach. Both are pitched as consumer protection, but they pull in fairly different directions. One assumes the flat-rate model stays and just needs better guardrails. The other assumes the flat-rate model itself is the problem.
Whether these two efforts end up reinforcing each other or working against each other will depend a lot on how the metering bill is amended, if it survives committee stage at all. Given how strongly civil society groups have pushed back, and the fact that similar surveillance-adjacent provisions have drawn constitutional challenges in Kenya before, it would not be surprising to see this bill significantly watered down before any final vote.
What This Means for You Right Now
The Consumer Protection Regulations 2026 are already law as of today. Practically speaking, here is what to watch for over the next three months as providers work through their compliance window:
Check whether your provider publishes an approved outage credit policy and how to claim it
Request an itemized bill if you have ever suspected hidden charges
Keep an eye out for unsolicited premium SMS subscriptions and use the new grounds to dispute them
If you are a parent, ask your ISP about the parental control tools they are now required to offer
As for the metering bill, it is still in committee, which means there is time for public participation to shape its final form. If the idea of a household internet meter number reported annually to a regulator concerns you, now is the moment to engage with the process rather than after it becomes law.
Comments