Safaricom CEO Peter Ndegwa has acknowledged that the company shares Call Data Records (CDRs) with law enforcement agencies when mandated by a court order.
This admission follows growing public scrutiny after a Daily Nation report alleged that telecommunications companies, including Safaricom, provide security agencies with unrestricted access to sensitive customer data, sparking concerns over potential privacy violations.
Addressing these concerns, Ndegwa urged Kenyans to be tolerant and cautious about misinformation, asserting that Safaricom adheres strictly to the country’s data protection laws.
“We respect our customers’ privacy and only disclose information to authorities under clear, legal orders,” he said. According to Ndegwa, Safaricom’s data-sharing practices are firmly within legal boundaries, and any suggestion of indiscriminate data sharing is misleading.
Safaricom clarified that CDRs contain limited information and do not provide real-time location data or live movement tracking. Instead, CDRs are used only for billing purposes after calls are terminated or messages sent.
“We do not share any customer data unless explicitly required via a court order,” Safaricom emphasized, reinforcing its commitment to customer privacy.
To further reassure the public, Safaricom highlighted its robust Fraud Management System (FMS), which has been operational for over a decade.
The system prevents unauthorized third-party access to customer data, protecting users from potential misuse of sensitive information.
Additionally, Safaricom recently achieved the ISO 27701 Privacy Information Management System (PIMS) certification from the British Standards Institute (BIS), marking the highest global standard for privacy protection.
“This certification attests to our commitment to customer privacy and providing a worry-free experience on our network,” Safaricom stated.
Ndegwa concluded by emphasizing the company’s transparency in its interactions with stakeholders, assuring customers that Safaricom remains devoted to preserving the trust it has built over the years.
Safaricom’s statement seeks to address public concerns and clarify its dedication to user privacy in line with Kenya’s data protection regulations.