Kenyan High Court Orders Safaricom to Pay KES 9.9 Million for Data Breach Violations The Kenyan High Court has ruled that Safaricom, the country’s largest telecommunications provider, must compensate 11 subscribers a total of KES 9.9 million (KES 900,000 each) for violating their constitutional rights to privacy, dignity, and consumer protection. The case, filed by Austin Taabu and 10 other complainants, stemmed from a 2018-19 data breach in which Safaricom’s internal systems were compromised, leading to unauthorized access to customer data. The court determined that Safaricom failed to adequately safeguard personal information, exposing subscribers to potential misuse. The ruling underscores growing legal accountability for data protection failures in Kenya, particularly under constitutional and consumer rights frameworks. The case highlights the financial and reputational risks companies face when mishandling sensitive customer data.