BY Milton Were
In today’s digital age, many young Kenyans are unknowingly giving away their most valuable asset — their personal data. From restaurants and clubs to mobile apps and digital giveaways, your information is being collected, stored, and in some cases, sold — and most people have no idea where it ends up or how it will be used.
Personal data includes your name, ID number, phone number, email, photos, location, and even biometric details like fingerprints or iris scans. This information is powerful. It can be used to access your bank or M-PESA account, track your location, manipulate your online activity, or sell your profile to advertisers or data brokers. Worse still, it can be used to impersonate you, commit fraud, or destroy your online reputation.
Many Kenyans recently signed up for the Worldcoin app, scanning their irises in exchange for cryptocurrency. But the big question remains — where did all that biometric data go? Who owns it? Is it stored securely? Can it be sold to third parties or used to build global surveillance systems? The truth is, once you give out your data, you lose control over it — often permanently.
While the Kenyan government, under the leadership of President William Ruto, has emphasized the importance of digital innovation and economic inclusion, the country is still grappling with gaps in digital literacy and data protection awareness. Despite having a progressive Data Protection Act, enforcement remains weak in many sectors. As the Ruto administration pushes for more tech-based solutions and digital platforms, Kenyans must be more alert about who collects their information and why.
Data exposure isn’t just happening through global apps. It’s also happening right around you. You walk into a restaurant or building, and you’re asked for your ID and phone number. You fill out forms at the gym, or you register for a local event with your full name and contact info. Most people don’t ask what that data is for or who will protect it. Many of these organizations don’t have data protection policies — and yet they collect your personal details freely.
As a young person, you need to treat your data like your bank card. You wouldn’t leave it lying around or give your PIN to a stranger — so why are you giving away your personal information without thinking?
Here are some things you should always keep in mind. Never give out your ID number or scan your face unless it’s absolutely necessary. Always ask why someone needs your data and how they plan to use it. Don’t just click “accept” on app permissions without reading what they’re asking for. Use strong passwords, change them regularly, and avoid using public Wi-Fi for sensitive transactions. Think long-term — data once shared can’t be taken back.
You have the right to privacy, and that right starts with awareness. Your digital footprint tells the world who you are, what you like, where you go, and how you live. If this information lands in the wrong hands, the consequences can be long-lasting and devastating.
As Kenya’s digital economy expands, it’s critical that both citizens and government institutions act responsibly. President Ruto’s administration must ensure that all private companies, platforms, and government entities adhere to strict data protection practices — especially as more services move online.
The next time you’re asked to provide your data — pause. Ask yourself: Why do they need it? Who’s collecting it? Where will it end up?
Your data is your identity. Your power. Your future. In a world where data is gold, guard it fiercely — because once it’s gone, you may never get it back.
