Safaricom reaffirms commitment to data privacy amid public concerns

Safaricom has responded to growing discussions about customer data privacy and the sharing of information with security agencies, allaying any fears customers may have.

In a statement on Thursday, the firm said its commitment to Kenya’s data protection laws is non-negotiable.

The telecommunications company emphasized that customer data is only shared with third parties when legally mandated. 

“We respect our customers’ privacy and adhere strictly to the country’s data protection laws,” Safaricom stated. 

“As such, we do not share any customer data unless explicitly required of us via a court order.”

The company clarified that Call Data Records (CDRs) do not provide real-time locations or track customer movements. 

“A customer's Call Data Record (CDR) does not show any live location and movements of customers,” Safaricom explained. 

Instead, CDRs are generated solely for billing purposes, after a call ends or a text message is sent or received.

Safaricom also detailed its efforts to prevent fraud, highlighting its 2012 partnership with Neural Technologies, a global leader in fraud management solutions. 

“Neural Technologies is a global brand operating in over 30 countries, providing support to telcos and utility companies to prevent and detect fraud with no third-party access,” the statement read.

Additionally, the company announced it had recently received the ISO 27701 Privacy Information Management System (PIMS) certification from the British Standards Institute (BSI). 

Commitment to data privacy

This certification, Safaricom said is “the highest certification an organisation can attain in management of privacy information systems”.

The telco giant reassured customers of its dedication to transparent operations.

“We have always been transparent and honest in how we engage with our stakeholders, and we will continue to do so in order to maintain the trust that we have built over the years,” the statement concluded.