Communications Authority orders telcos to comply with Digital Certification directive by 2026
The Communications Authority of Kenya (CA) has directed all telecommunications companies and other critical information infrastructure (CII) providers to comply with the use of licensed and accredited digital certification services by January 1, 2026.
In a public notice issued on Tuesday, October 7, 2025, the Authority stated that the move follows a determination made by the National Computer and Cybercrimes Coordination Committee (NC4) on August 1, 2024.
You might also like
Also watch: Communications Authority of Kenya issues a stern warning to young people who misuse social media
“All systems that are designated as Critical Information Infrastructure (CII) as stipulated in Gazette Notice No. 1043 MUST adopt and only use digital certificates, digital certification, and Public Key Infrastructure (PKI) services from Electronic Certification Service Providers (E-CSPs) who have been both licensed and accredited by the Communications Authority of Kenya,” CA said.
“This public notice serves as a notification to all owners of CII systems in the telecommunications sector that effective January 1, 2026, the Authority shall inspect the relevant licensees to ensure compliance with this directive.”
CA warned that non-compliance would constitute a breach of regulations and could attract regulatory actions as provided for under existing laws and frameworks.
The directive is part of Kenya’s broader effort to strengthen digital security, enhance data protection, and safeguard the integrity of online communications and transactions within the country’s critical ICT infrastructure.
CA also noted that a list of licensed and accredited Electronic Certification Service Providers (E-CSPs) is available on its official website under the Telecommunications Services Licensee Register.
Digital certificates
Digital certificates serve as essential security tools that authenticate digital identities and encrypt sensitive data, preventing unauthorised access or tampering within online platforms.
Also watch: Court blocks internet shutdown by telcos, CA
The directive is also expected to make it more challenging to forge documents such as contracts and cheques, while enabling executives to sign official paperwork remotely from anywhere in the world.
Additionally, the electronic certification licences issued by the CA will allow the ICT Authority to provide digital signatures for e-government services, promoting efficiency, transparency, and trust in online transactions.
