When Cybercrime Laws Meet Constitutional Rights: Implications of BAKE v Attorney General for Digital Forensics and Criminal Justice in Kenya

High Court of Kenya, Constitutional and Human Rights Division
Petition №206 of 2018 (Judgment dated 1st October 2018)

Petition: №206 of 2018

Court: High Court of Kenya, Constitutional & Human Rights Division

Judgment: 1 October 2018

Parties: Bloggers Association of Kenya (BAKE) v Attorney General & 5 Others

Abstract

The Bloggers Association of Kenya (BAKE) v Attorney General case, decided by the High Court of Kenya on 1st October 2018, represents a pivotal moment in the intersection of cybercrime legislation and constitutional human rights protection in Kenya. This paper examines the ruling in Petition №206 of 2018, which challenged the constitutionality of specific sections of the Computer Misuse and Cybercrimes Act 2018. The case presents a complex constitutional dilemma: the tension between a state’s legitimate need to regulate cybercrime and combat digital threats while simultaneously protecting citizens’ fundamental rights to freedom of expression, privacy, and digital access. Through a comprehensive analysis of the court’s reasoning, this paper explores the implications of the BAKE judgment for digital forensics practices, criminal justice administration, and Kenya’s broader constitutional framework. Particular emphasis is placed on how the court navigated issues of public interest, due process in exparte proceedings, and the proportionality of legislative measures. The paper concludes that the BAKE judgment serves as a critical precedent for jurisdictions grappling with cybercrime legislation, establishing important principles for constitutional review of digital regulations while maintaining judicial independence and careful oversight of emergency judicial measures.

Keywords: Cybercrime legislation, Constitutional rights, Digital forensics, Criminal justice, Judicial review, Computer Misuse and Cybercrimes Act, Kenya

1. Introduction

In the digital age, the regulation of cybercrime presents one of the most challenging governance problems facing contemporary democracies. States must protect their citizens and infrastructure from the escalating threats posed by cyber criminals, data breaches, and digital fraud, while simultaneously safeguarding fundamental human rights and freedoms. This tension found vivid expression in Kenya in 2018 when the Bloggers Association of Kenya (BAKE) challenged the constitutionality of the newly enacted Computer Misuse and Cybercrimes Act 2018 (the Act), specifically questioning whether key provisions violated citizens’ rights to freedom of expression, privacy, and access to information.

The High Court of Kenya’s judgment in BAKE v Attorney General, delivered on 1st October 2018, addressed far more than a narrow technical question about cybercrime legislation. The ruling grappled with profound constitutional issues concerning the legitimate scope of state power in regulating digital expression, the adequacy of procedural safeguards in urgent constitutional matters, and the appropriate judicial response when public interest arguments conflict with fundamental rights protection. The case also raised important practical questions about the actual implementation of cybercrime laws, the impact of temporary legislative suspensions on criminal justice operations, and the role of courts in overseeing emergency measures.

This paper undertakes a comprehensive examination of the BAKE judgment, analyzing its constitutional significance while exploring its practical implications for two critical domains: digital forensics and criminal justice administration. We examine how the case illuminates the principles that should guide the judicial review of cybercrime legislation, how conservatory orders function in constitutional litigation, and what the judgment tells us about the future trajectory of digital regulation in Kenya and comparable jurisdictions.

2. Background and Context

2.1 The Computer Misuse and Cybercrimes Act 2018

The Computer Misuse and Cybercrimes Act 2018 was enacted in Kenya as a comprehensive legislative response to the growing threat of cybercrime in the East African region. The Act sought to criminalize a broad range of digital offences, including illegal access to computer systems, interference with data, denial of service attacks, and various forms of online fraud and exploitation. As a modern cybercrime statute, it represented Kenya’s attempt to keep pace with international standards for digital security while fulfilling international obligations under mutual legal assistance frameworks and global cybersecurity treaties.

However, the Act was controversial from its inception. Critics, particularly represented by the Bloggers Association and civil society organizations, argued that key provisions of the legislation were drafted in excessively broad and vague terms, capable of being weaponized to suppress legitimate online speech, journalism, and political discourse. Specific concerns were raised about provisions that could criminalize online criticism of government, satire, and investigative digital reporting. The potential for abuse was heightened by the fact that these provisions would be enforced by law enforcement agencies and prosecutors, with the possibility of criminal sanctions including imprisonment.

2.2 The BAKE Petition and Conservatory Orders

On 29th May 2018, the Bloggers Association of Kenya filed Constitutional Petition №206 of 2018 in the High Court’s Constitutional and Human Rights Division. The petition alleged that specific sections of the Computer Misuse and Cybercrimes Act 2018 were unconstitutional because they violated Articles 33, 31, and 32 of Kenya’s Constitution (protecting freedom of expression, access to information, and privacy, respectively). Crucially, the petition was accompanied by an urgent application for conservatory orders seeking to suspend the operation of the impugned sections pending the full hearing of the petition.

Justice Chacha Mwita, recognizing the urgency and the potential irreparable harm that could flow from the implementation of provisions alleged to violate constitutional rights, granted the conservatory orders on the same day the petition was filed. The orders had the effect of suspending the operation of the contested sections of the Act, preventing their implementation and enforcement. This interim measure was a critical development because it meant that persons could not be prosecuted under the impugned provisions, at least not until the substantive petition was heard and determined. The expedited timetable established by Justice Mwita set directions for hearing the petition on 18th July 2018.

2.3 The State’s Application to Review the Orders

The granting of the conservatory orders proved highly controversial within government circles. On 11th June 2018, the Attorney General (represented by the Solicitor General) filed an application under Articles 25 and 50 of the Constitution and Rule 25 of the Mutunga Rules seeking to review, vary, and set aside the conservatory orders. The Attorney General’s argument proceeded on several fronts. First, it contended that the orders had been issued exparte (without the hearing of all parties) contrary to Article 50’s requirement of fair hearing. Second, the government argued that the orders had created a problematic legal lacuna by suspending the entire Act rather than just the contested sections, leaving previously prosecutable cybercrime offences without a statutory basis.

More substantively, the Attorney General argued that the suspension of the Act undermined Kenya’s international obligations regarding cybersecurity cooperation and data protection. The application specifically referenced Kenya’s obligations under the General Data Protection Regulation (GDPR), which, despite being European Union legislation, applies extraterritorially to all entities processing data of EU residents. The government contended that without the operative provisions of the Act, Kenya could not adequately protect data, investigate cybercrimes affecting EU residents, or fulfill mutual legal assistance obligations. The government also emphasized that the court had failed to give adequate weight to the public interest in having a functional cybercrime statute.

3. Constitutional and Legal Framework

3.1 Freedom of Expression and Article 33 of the Constitution

Kenya’s 2010 Constitution, adopted in the aftermath of the country’s post-election violence, was deliberately crafted to enshrine and protect fundamental human rights. Article 33 of the Constitution protects freedom of expression as follows: ‘Every person has the right to freedom of expression, which includes freedom to seek, receive or impart information or ideas; freedom of media and other types of communication; and the right to impart information or ideas to the public without interference.’

This formulation is notably expansive. It does not merely protect passive reception of information but actively guarantees the right to ‘impart’ information to the public ‘without interference.’ The Constitution recognizes that freedom of expression encompasses multiple modalities of communication, explicitly mentioning media and ‘other types of communication’, language broad enough to encompass digital and online forms of expression. The BAKE petitioners’ argument was grounded in the proposition that provisions of the cybercrime statute that criminalized online speech, even speech that was critical of government or engaged in digital journalism, amounted to impermissible interference with this constitutionally protected freedom.

The Constitution does permit limitations on freedom of expression, but only those that are lawful and demonstrably justified in an open and democratic society. This means that any law limiting freedom of expression must be carefully scrutinized by courts to ensure it pursues a legitimate purpose, employs means that are rationally connected to that purpose, and does not go further than necessary to achieve the objective. This proportionality standard became central to analyzing whether the contested provisions of the cybercrime statute could survive constitutional review.

3.2 Right to Fair Trial and Due Process (Article 50)

Article 50 of Kenya’s Constitution protects the right to a fair trial and due process of law. It provides that every person has the right to a fair trial and a public hearing by an independent court. The Attorney General’s application to set aside the conservatory orders hinged significantly on an Article 50 argument: that Justice Mwita’s decision to grant conservatory orders without according the Attorney General a hearing violated this fundamental protection.

This raised an important legal question about the relationship between procedural fairness (the requirement of fair hearing) and substantive rights protection. In normal circumstances, no party should be subject to a judicial order that prejudices their position without having an opportunity to be heard. However, conservatory orders occupy a unique procedural space. They are granted on an urgent basis to preserve the subject matter of litigation pending full hearing. If conservatory orders could only be granted after the other party had been heard, the entire purpose of such orders would be defeated; the harm that the orders are meant to prevent would occur during the hearing process itself.

3.3 Conservatory Orders and Exparte Proceedings

Conservatory orders represent an important equitable tool in constitutional litigation. These orders are intended to maintain the status quo pending the hearing and determination of the substantive petition. They differ from interlocutory injunctions in civil or commercial litigation because they carry a distinctly public law character. As the Supreme Court noted in Gatirau Peter Munya v Dickson Mwenda Githinji (2014), conservatory orders ‘bear a more decided public law connotation’ and are granted ‘on the inherent merit of the case bearing in mind the public interest, the Constitutional values and the proportionate magnitudes, and priority levels attributable to the relevant causes.’

A critical principle emerging from constitutional jurisprudence is that applicants seeking conservatory orders must demonstrate: (1) a prima facie case with a likelihood of success; (2) that without the orders, they would suffer irreparable prejudice; and (3) that granting the orders would advance constitutional values and the public interest. This last criterion is particularly important because conservatory orders are not granted simply because a private party would suffer harm, but because their grant advances the court’s constitutional mandate and serves the broader public interest.

The rules governing conservatory orders explicitly permit courts to dispense with service and to proceed with exparte hearing when justice requires it. Rule 23(2) of the Mutunga Rules (the Constitutional and Human Rights Division Practice and Procedure Rules 2013) provides that service may be dispensed with ‘with leave of the court.’ This is a necessary accommodation to the urgent nature of constitutional rights protection. However, this power must be exercised with great caution, and the courts have consistently held that exparte orders should ordinarily only be granted in exceptional circumstances.

4. Analysis of the Judgment

4.1 Jurisdiction and Scope of Review

The petitioner (BAKE) raised a preliminary objection to the Attorney General’s application, arguing that the court lacked jurisdiction to entertain what was in essence an appeal from Justice Mwita’s decision disguised as a review application. This objection raised important questions about the separation of judicial authority and the principle against re-litigation of settled questions.

The presiding judge, Justice W. A. Okwany, extensively analyzed relevant case law on the distinction between review applications and appeals. He relied on decisions such as Wanjiru Gikonyo v National Assembly (2016) and Benjoh Amalgamated Ltd v Kenya Commercial Bank Ltd (2014), which established that review applications should not be used to re-argue the merits of a decision but should be confined to correcting manifest errors, oversights, or procedural irregularities. Justice Okwany noted that a second judge should be reluctant to interfere with the discretionary exercise of a fellow judge of equal jurisdiction, as to do so would amount to sitting on an informal appeal and would improperly usurp the other judge’s authority.

4.2 Principles of Conservatory Orders

Justice Okwany engaged in a thorough analysis of the principles governing conservatory orders, noting that these orders serve a critical constitutional function. He emphasized that conservatory orders are not purely a matter of private party convenience but are intrinsically linked to the court’s constitutional mandate to protect fundamental rights. The judge quoted extensively from Centre for Rights Education and Awareness v Attorney General (2011), emphasizing that conservatory orders require demonstration of: (1) a prima facie case with likelihood of success; (2) likelihood of irreparable prejudice absent the orders; and (3) that granting relief would enhance constitutional values and serve the public interest.

The judge carefully examined Justice Mwita’s grant of the orders, finding that the learned judge had clearly satisfied the necessary conditions. Justice Mwita had reasoned that the petitioner had established a prima facie case that the impugned provisions threatened to violate constitutional rights to freedom of expression. The judge had further noted that if persons were prosecuted under these provisions and subsequently imprisoned or fined, and if the provisions were ultimately found unconstitutional, no adequate compensation could remedy the rights violation. Conversely, if the provisions were found constitutional, they could be reinstated with no harm to the state or public interest.

This reasoning reflects sound constitutional logic: when fundamental rights are at stake and the potential for irreparable harm exists, the appropriate response is to preserve the status quo pending full judicial determination. Justice Okwany found this analysis persuasive and was reluctant to overturn a carefully reasoned exercise of discretion by a fellow judge.

4.3 The Court’s Balancing of Public Interest

The Attorney General had invested significant effort in arguing that the public interest favored setting aside the conservatory orders. The government contended that the state’s interest in having a functional cybercrime statute, the international obligations Kenya had undertaken, and the need to protect critical national infrastructure all weighed heavily on the side of allowing the Act to come into force.

Justice Okwany acknowledged the legitimacy of these concerns. The judge noted that ‘nothing can be of greater public interest than the court playing its constitutional mandate of ensuring that the individual rights and freedoms under the Constitution are protected and that all laws, especially those creating offences, conform to the Constitution.’ This formulation elegantly resolves the apparent tension between public security and rights protection by establishing that the public interest ultimately consists in a state governed by constitutional law, not in the technical availability of particular criminal provisions.

The judge further noted that the Attorney General would have the opportunity to demonstrate at the hearing of the substantive petition that the contested provisions were constitutional and passed the proportionality test. ‘The applicant will at the hearing of the petition be required to demonstrate that the impugned sections of the Act are consistent with the Constitution.’ In other words, the conservatory orders did not prejudge the constitutional question; they simply ensured that this important question would be determined after full hearing on the merits, rather than being rendered moot by criminal prosecutions undertaken in the interim.

5. Implications for Digital Forensics

Digital forensics, the science of collecting, preserving, analyzing, and presenting digital evidence in legal proceedings, stands at a critical intersection of law, technology, and constitutional protection. The BAKE judgment carries profound implications for how digital forensics must be practiced and regulated in Kenya.

5.1 The Legal Validity of Digital Evidence

The BAKE case highlights a fundamental challenge: digital forensics relies entirely on the statutory basis provided by cybercrime legislation. When provisions of such legislation are challenged as unconstitutional and conservatory orders suspend their operation, digital forensic investigators face uncertainty about what evidence is legally collectible and under what authority investigations may proceed. The temporary suspension of sections of the Act raises a critical question: what is the legal status of digital evidence collected during the period of suspension?

The Attorney General had raised concerns about this precise issue, arguing that the conservatory orders created a ‘lacuna in the law’ by leaving offences previously criminalized without statutory underpinning. While Justice Okwany was not persuaded that this concern should override the protection of constitutional rights, the practical reality is that this lacuna does affect digital forensics operations. Investigators and prosecutors must grapple with the reality that evidence collected under provisions subsequently found unconstitutional may be inadmissible, and prosecutions undertaken under such provisions may be quashed.

5.2 Proportionality and the Scope of Investigative Powers

The BAKE judgment emphasizes the importance of proportionality as a governing constitutional principle. This principle has direct application to digital forensics. Any statutory power granted to investigators for collecting digital evidence, whether through access to computer systems, interception of communications, or acquisition of digital records, must be proportionate to the legitimate objective being pursued.

Digital forensics has inherent characteristics that make it particularly susceptible to abuse and overreach. Digital investigation techniques can be extraordinarily intrusive, potentially accessing vast amounts of personal data, intimate communications, and sensitive information. A single warrant to access a digital device may yield information concerning dozens of individuals, not merely the target of investigation. The petitioners in BAKE were concerned that vague and overbroad cybercrime provisions could be used to justify digital investigations that far exceed what is necessary to investigate specific criminal conduct.

The BAKE judgment establishes that courts must carefully scrutinize whether statutory provisions authorizing digital forensic techniques meet proportionality standards. Specifically, legislation must clearly define the offences for which digital investigation is authorized, specify the circumstances under which such investigation may be undertaken, and establish meaningful oversight mechanisms. Vague provisions that could encompass legitimate online speech are particularly vulnerable to constitutional challenge because they authorize investigative intrusion without adequate constitutional safeguards.

5.3 Digital Evidence and Right to Privacy

Kenya’s Constitution protects the right to privacy under Article 31. Digital forensics necessarily implicates privacy rights because digital devices and communications contain highly personal information. The BAKE case indirectly reinforces the principle that digital forensic investigations must be conducted in a manner that respects privacy rights while pursuing legitimate law enforcement objectives.

For digital forensics practitioners, this means that investigation techniques and the scope of evidence collection must be carefully calibrated. Investigators cannot lawfully collect digital evidence by exploiting vague or overbroad statutory provisions. Each collection activity should be justified by reference to a specific, articulable suspicion of criminal wrongdoing. Further, investigators should be trained to understand that the legality of evidence collection depends not merely on whether an investigation was technically competent but on whether it was conducted within the bounds of constitutional propriety.

6. Implications for Criminal Justice

6.1 The Doctrine of Constitutional Validity

The BAKE judgment has important implications for criminal justice administration in Kenya. Justice Okwany emphasized a fundamental principle: all laws must pass the constitutional validity test. This doctrine is not merely theoretical but has direct practical consequences for how criminal justice actors must approach legislation.

Prosecutors, judges, and law enforcement officers cannot proceed on the assumption that legislation validly enacted by Parliament is necessarily constitutional. Under Kenya’s constitutional architecture, statutory validity does not automatically establish constitutional propriety. This means that when a criminal statute is challenged as unconstitutional, criminal justice practitioners must understand that they cannot simply assume the statute will be upheld. They must be prepared to litigate constitutional questions seriously and to accommodate the possibility that provisions under which they have been operating may be found unconstitutional.

6.2 Conservatory Orders and Criminal Proceedings

The BAKE case reveals important dynamics regarding how conservatory orders in constitutional litigation interact with criminal justice proceedings. When a High Court issues conservatory orders suspending the operation of criminal legislation, criminal courts at lower levels must comply with these orders. They cannot proceed with prosecutions under suspended provisions, even if they believe the suspension is unwarranted.

This has significant practical implications. During the period between Justice Mwita’s issuance of conservatory orders on 29th May 2018 and the expected hearing of the substantive petition on 18th July 2018, no criminal prosecutions could be undertaken under the suspended provisions. Any person who committed conduct that would have constituted an offence under the Act during this period could not be prosecuted for that conduct. This created exactly the legal lacuna that the Attorney General had identified and argued against.

However, Justice Okwany’s judgment indicates that this consequence, while practically inconvenient for law enforcement, is constitutionally justified. The principle is that the protection of fundamental constitutional rights takes precedence over the temporary unavailability of particular criminal sanctions. This principle reflects a deep commitment to ensuring that persons are not prosecuted under provisions that may violate the Constitution. Better to have a temporary gap in criminal law than to have persons imprisoned under unconstitutional provisions.

6.3 Prosecutorial Discretion and Constitutional Limits

The BAKE case has implications for how prosecutors should exercise discretion when applying cybercrime statutes. Prosecutors have traditionally been granted considerable discretion in deciding which cases to prosecute and which to decline. However, the BAKE judgment suggests that this discretion must be informed by constitutional considerations.

Specifically, if a prosecutor becomes aware that criminal charges would be brought under provisions that are constitutionally vulnerable provisions that appear vague, overbroad, or impermissibly restrict freedom of expression the prosecutor should consider whether to proceed. This does not mean prosecutors should decline to prosecute out of mere suspicion; rather, it means that when there is a reasonable basis for believing a provision may be unconstitutional, prosecutors should carefully consider whether proceeding would advance justice or would instead involve prosecuting persons under provisions that courts may subsequently void.

6.4 Rights of Persons Prosecuted Under Suspended Provisions

An important question that the BAKE judgment raises is what should happen to persons who were prosecuted or convicted under provisions that are subsequently found unconstitutional. The judgment does not directly address this question, but it creates an important foundation for answering it.

If a provision of the cybercrime statute is found unconstitutional, persons previously convicted under that provision should have a right to seek review of their convictions. This is not a question of mercy or equitable discretion but of fundamental justice. A conviction under an unconstitutional provision is itself constitutionally defective and should not stand. Kenya’s criminal justice system should establish mechanisms for identifying such cases and providing appropriate remedies, whether through retrial, acquittal, or other appropriate relief.

7. Comparative Analysis and International Context

7.1 Similar Challenges in Other Jurisdictions

The tensions revealed in BAKE v Attorney General are not unique to Kenya. Many jurisdictions have grappled with similar challenges in regulating cybercrime while protecting human rights. The Indian Information Technology Act, Sri Lanka’s computer crime legislation, and South Africa’s cybercrimes framework have all been subjects of constitutional scrutiny for similar reasons: provisions drafted in broad language that could restrict freedom of expression and access to information.

The European Union’s approach to cybersecurity legislation emphasizes proportionality and necessity at every stage, reflecting the rigorous human rights framework that applies across EU Member States. The EU’s Network and Information Security Directive (NIS Directive) and subsequent NIS2 Directive attempt to balance critical infrastructure protection with respect for privacy and fundamental freedoms. Similarly, the General Data Protection Regulation (GDPR), which the Attorney General cited in the BAKE case, establishes a framework for data protection that prioritizes individual rights even while enabling law enforcement activities.

In the United States, First Amendment jurisprudence has developed extensive doctrine limiting the government’s ability to criminalize online speech. Cases addressing statutes that criminalize online harassment, cyberbullying, or hacking have resulted in numerous constitutional challenges grounded in free speech principles. The American approach reflects a deep skepticism toward criminal legislation that could chill protected speech, a skepticism that informs the BAKE petitioners’ arguments.

7.2 International Human Rights Standards

Kenya is party to multiple international human rights instruments that protect freedom of expression and impose obligations regarding the regulation of criminal law. Article 19 of the International Covenant on Civil and Political Rights (ICCPR) protects freedom of expression, and the International Court of Human Rights has emphasized that restrictions on freedom of expression must be prescribed by law, pursue a legitimate aim, and be necessary in a democratic society.

The BAKE judgment, while grounded in Kenya’s own constitutional text, is consistent with and supportive of these international standards. By insisting that cybercrime legislation meet constitutional standards for protection of freedom of expression, the judgment ensures that Kenya’s domestic law operates in harmony with international human rights obligations. The petitioners in BAKE explicitly invoked Article 19 East Africa, an international civil society organization, which participated in the litigation as an interested party. This international engagement reinforces the judgment’s significance beyond Kenya’s borders.

8. Conclusion and Future Directions

The judgment of the High Court of Kenya in BAKE v Attorney General stands as an important precedent for the regulation of cybercrime in an age of expanding digital connectivity and rising online threats. The case demonstrates that the legitimate state interest in combating cybercrime must be pursued in a manner that respects constitutional limits and protects fundamental human rights. This is not a counsel of paralysis or an obstacle to effective cybercrime enforcement; rather, it is a recognition that sustainable and legitimate law enforcement must operate within a framework of rights protection.

The judgment’s affirmation of the principles governing conservatory orders establishes important procedural protections for constitutional litigation. It recognizes that when fundamental rights are at stake and temporary suspension of contested provisions is necessary to preserve those rights pending full judicial determination, courts have the authority and the obligation to issue such orders. The judge’s reluctance to second-guess the discretionary exercise of Justice Mwita reflects an important principle of judicial comity and respect for the equal authority of fellow judges of coordinate jurisdiction.

For digital forensics practitioners, the BAKE judgment signals the importance of ensuring that investigative techniques are authorized by statutory provisions that meet constitutional standards. Digital forensics must not merely be technically competent but must be conducted within the bounds of constitutional propriety. Vague or overbroad statutes cannot legitimize investigations that would otherwise violate privacy or freedom rights.

For criminal justice administrators, the judgment reinforces the principle that legislative validity is not synonymous with constitutional propriety. Prosecutors and judges must engage actively with constitutional questions and must be prepared to limit the scope of enforcement when provisions are constitutionally vulnerable. The goal of criminal justice is not merely to prosecute all technically prosecutable cases but to advance justice while respecting constitutional rights.

Looking forward, several issues merit further attention in the context of cybercrime regulation:

• Substantive constitutional review: The conservatory orders were temporary; the substantive petition remains to be heard. When finally determined, the court will need to engage carefully with proportionality, weighing cybercrime regulation against freedom of expression and other rights.
• Digital forensics guidelines: Kenya would benefit from clear, constitutionally grounded guidelines for digital forensics, specifying authorization, oversight, and legal authority for invasive investigations.
• Legislative review: Parliament should consider a comprehensive review of the Computer Misuse and Cybercrimes Act, involving civil society, experts, and technology companies, to ensure it meets constitutional standards while addressing genuine cyber threats.
• Specialized digital rights court: Kenya could establish a specialized division with judges trained in technology law and human rights to handle the complex intersection of cybersecurity, criminal law, and fundamental rights.

The BAKE v Attorney General case ultimately represents a triumph of constitutional governance. It demonstrates that even in matters where significant public interests are at stake — cybercrime prevention and international security obligations courts must remain steadfast in their commitment to protecting fundamental rights. The judgment affirms the principle that in a constitutional democracy, the rule of law itself requires that all governmental action, including criminal law enforcement, operate within constitutional boundaries. This is not a limitation on legitimate state power but rather a definition of what it entails.

References

Cases

• Bloggers Association of Kenya (BAKE) v Attorney General & 5 Others [2018] eKLR, High Court of Kenya, Petition No. 206 of 2018, Judgment delivered 1st October 2018.
• Benjoh Amalgamated Ltd v Kenya Commercial Bank Ltd [2014] eKLR.
• Centre for Rights Education and Awareness v Attorney General, HCCP No. 16 of 2011.
• Gatirau Peter Munya v Dickson Mwenda Githinji & 2 Others [2014] eKLR.
• Jacqueline Okuta & Another v Attorney General & 2 Others [2017] eKLR.
• Nancy Makokha Baraza v Judicial Service Commission & 9 Others [2012] eKLR.
• Okiya Omtatah Okoiti v Commissioner General of Kenya Revenue Authority & 2 Others [2017] eKLR.
• Thomas Edison Ltd. v Bathok (1912) 15 C.L.R. 679.
• Wanjiru Gikonyo & 2 Others v National Assembly & 4 Others, HCCP No. 453 of 2015 [2016] eKLR.

Constitutional and Statutory Instruments

• Constitution of Kenya (2010).
• Computer Misuse and Cybercrimes Act, 2018 (Kenya).
• Constitution of Kenya (Protection of Rights and Fundamental Freedoms) Practice and Procedure Rules, 2013 (Mutunga Rules).
• Kenya Information and Communication Act.
• Sexual Offences Act, 2011 (Kenya).
• Mutual Legal Assistance Act (Kenya).

International Instruments

• General Data Protection Regulation (EU) 2016/679 (GDPR).
• International Covenant on Civil and Political Rights (ICCPR).
• Network and Information Security Directive (NIS Directive) 2014/65/EU.