Can I Sue Someone for Recording Me in Kenya (2026)? Evidence, Privacy Rights & Remedies

Recording without consent in Kenya has become one of the fastest-growing triggers for litigation, regulatory complaints and criminal investigations. The convergence of ubiquitous smartphone technology, an increasingly assertive Office of the Data Protection Commissioner (ODPC), and a public that is more aware of its constitutional privacy rights means that secret recordings, whether of phone calls, workplace conversations or intimate moments, now carry serious legal consequences. This guide is a practitioner-level playbook for 2026: it maps the statutes that apply, explains how Kenyan courts treat recordings as evidence, and walks through every available remedy, civil, criminal and regulatory.

Whether you are an individual whose private conversation was captured without permission, a journalist weighing source-protection risks, or an in-house counsel assessing an HR investigation recording, the framework below will help you make an informed decision on your next step.

Quick-answer checklist, five immediate steps if you have been recorded without consent:

• Preserve the evidence. Secure original files, screenshots, URLs and metadata before anything is deleted or altered.
• Send a written cease-and-desist notice to the person who recorded or distributed the material, demanding immediate deletion and non-distribution.
• Apply for an urgent interim injunction in the High Court to restrain further distribution.
• File a complaint with the ODPC under the Data Protection Act, 2019, requesting administrative orders and compensation.
• Report to the police / ODPP if the conduct amounts to a criminal offence under the Computer Misuse and Cybercrimes Act, 2018.

When Is Recording Without Consent Unlawful in Kenya?

There is no single “anti-recording” statute in Kenya. Instead, the legality of a recording depends on the interplay of four principal legal instruments, each addressing a different dimension of privacy and data processing.

Article 31 of the Constitution, the right to privacy

Article 31 of the Constitution of Kenya, 2010, guarantees every person the right to privacy. This includes the right not to have their person, home or property searched, their possessions seized, or information relating to their family or private affairs unnecessarily required or revealed. Crucially, Article 31 also protects the privacy of communications: no person’s communications may be intercepted without lawful authority. A recording made without the knowledge or consent of the speaker in a private setting will, in most circumstances, amount to an interference with this constitutional right, giving rise to both constitutional and statutory remedies.

Data Protection Act, 2019 (DPA)

The Data Protection Act, 2019 defines personal data broadly to encompass any information relating to an identified or identifiable natural person. The ODPC’s Personal Data Protection Handbook (2024) explicitly confirms that voice recordings and call recordings constitute personal data. Processing, which includes collection, recording, storage and dissemination, must satisfy at least one lawful basis under the Act, such as the data subject’s consent. Where a recording is made without consent, the recorder may breach the DPA’s data-processing principles: lawfulness, fairness, purpose limitation and data minimisation.

Computer Misuse and Cybercrimes Act, 2018

The Cybercrimes Act criminalises specific conduct relevant to secret recordings. Section 17 targets the unauthorised interception of electronic communications, while Section 27 addresses the publication of false or misleading information. For intimate images distributed without consent, Section 28 (cyber-harassment) and Section 29 (publication of intimate images) create distinct criminal offences carrying penalties that include imprisonment and fines. These provisions are particularly relevant in domestic disputes, workplace intimidation and revenge-distribution scenarios.

Exceptions, when recording may be lawful

Not every recording without consent is automatically unlawful. Kenyan law recognises exceptions where the recording serves a legitimate, overriding purpose: law-enforcement surveillance authorised under the National Intelligence Service Act or a court warrant; journalistic activity in the public interest (subject to proportionality); whistleblower disclosures protected under the relevant provisions of the DPA and whistleblower legislation; and, in limited circumstances, one-party consent where the person making the recording is themselves a participant in the conversation and no reasonable expectation of privacy applies. Each exception is fact-dependent, and the burden of proving its applicability falls on the person who made the recording.

Admissibility of Recordings as Evidence in Kenya, Best Practice

One of the most common questions litigators face is whether a recording, lawful or not, can be tendered as evidence. The admissibility of recordings as evidence in Kenya turns on statutory rules, judicial discretion and rigorous chain-of-custody requirements.

Evidence Act provisions on electronic and documentary evidence

The Evidence Act (Cap. 80, Laws of Kenya) governs the admissibility of all forms of evidence in Kenyan proceedings. Section 78A (inserted by amendments addressing electronic evidence) makes electronic records, including audio and video recordings, admissible if certain conditions are met: the record must be shown to be authentic, unaltered and produced by a reliable system. Additionally, under Section 106B, a certificate or statement accompanying the electronic record may be required to attest to its integrity and the manner in which it was produced. Courts have discretionary power to exclude evidence that was obtained illegally or unfairly, particularly where admitting it would compromise the right to a fair trial under Article 50 of the Constitution.

Chain of custody and forensic preservation

Kenyan courts increasingly scrutinise the chain of custody of electronic recordings. A recording that has been forwarded through multiple WhatsApp groups, edited or stripped of metadata will face stiff objections. Best practice demands:

• Immediate forensic imaging of the device on which the recording was made or received, ideally by a certified digital forensics examiner.
• Hash-value verification (e.g., MD5 or SHA-256) of the original file to prove it has not been tampered with.
• Contemporaneous written log noting the date, time, device, storage location and every person who handled the recording.
• Expert witness preparation: engage a digital forensics expert who can testify on authenticity, metadata integrity and any signs of alteration.
• Transcription: a certified transcript, time-stamped and cross-referenced to the original audio, strengthens the evidentiary weight.

How Kenyan courts have approached recordings (2024–2026)

Judicial practice in recent years shows two clear trends. First, courts are more willing to admit electronic recordings as evidence where the party tendering them demonstrates robust chain-of-custody and expert authentication. Second, courts have excluded recordings obtained through flagrant breaches of privacy, particularly where the recorder targeted private domestic conversations, exercising their constitutional discretion to uphold fair-trial rights. Industry observers expect that as the ODPC’s enforcement posture matures, courts will place even greater weight on whether the recording was obtained in compliance with the Data Protection Act when deciding admissibility.

Recording preservation checklist

Civil Claims, Sue for Invasion of Privacy in Kenya

If you decide to sue for invasion of privacy in Kenya, you have several overlapping causes of action, each with distinct requirements and remedies.

Causes of action

• Constitutional petition (Article 31). Any person whose right to privacy has been violated can petition the High Court under Article 22 of the Constitution for a declaration of the violation, compensatory damages and injunctive relief. Constitutional petitions benefit from relaxed locus standi rules and are heard by a dedicated constitutional bench.
• Breach of statutory duty under the Data Protection Act. Section 65 of the DPA allows a data subject who has suffered damage as a result of a contravention of the Act to institute proceedings in court. The data subject may claim compensation for material and non-material damage, including distress.
• Tort of invasion of privacy. Although Kenyan courts have not yet crystallised a stand-alone privacy tort in the manner of some common-law jurisdictions, the High Court has on several occasions recognised a tortious right to privacy derived from Article 31, awarding general and aggravated damages where the invasion was deliberate and malicious.
• Breach of confidence. Where a recording captures information shared in a relationship of confidence, employer-employee, doctor-patient, spousal, the aggrieved party may bring a claim for breach of confidence and seek both damages and an injunction.

Elements to prove and quantifying damages

Across all civil causes of action, the claimant must establish: (a) a reasonable expectation of privacy in the communication or activity recorded; (b) that the recording was made or distributed without consent or lawful justification; and (c) damage, whether financial loss, reputational harm, emotional distress or a combination. Kenyan courts have awarded general damages for distress, and where conduct is particularly egregious, for example, the distribution of intimate images, aggravated or exemplary damages may be sought. The quantum varies widely, but recent High Court decisions suggest increasing willingness to award meaningful sums where the privacy breach is deliberate.

Injunctive relief, stopping distribution urgently

In many cases, the most critical remedy is speed. An interim or interlocutory injunction restraining the respondent from further distribution can be obtained on an urgent basis, sometimes within 24 to 72 hours of filing. The applicant must demonstrate:

• A prima facie case with a probability of success.
• Irreparable harm that cannot be adequately compensated by damages alone (privacy breaches are inherently difficult to undo once material is distributed).
• The balance of convenience favours granting the injunction.

In extreme urgency, for instance, where intimate images are being circulated in real time, the court may grant an ex parte injunction before the respondent is served. This is a powerful but temporary measure: a full inter partes hearing must follow within the time stipulated by the court’s directions.

Criminal Routes and Platform Takedown, Police, ODPP and Cybercrimes Act

Beyond civil remedies, the non-consensual recording or distribution of private material can trigger criminal liability under multiple provisions of Kenyan law.

Key criminal offences

• Unauthorised interception (Section 17, Cybercrimes Act). Intentionally intercepting, without lawful authority, any communication within a computer system is an offence. Conviction may result in a fine, imprisonment, or both.
• Cyber-harassment (Section 28, Cybercrimes Act). A person who uses a computer system to repeatedly communicate with another person in a manner that amounts to intimidation, threats, or invasion of privacy commits an offence.
• Publication of intimate images without consent (Section 29, Cybercrimes Act). The non-consensual publication of an intimate image of another person is a distinct offence, carrying imprisonment and a significant fine. This provision is the primary criminal weapon against intimate images distribution in Kenya.
• Publication of false or misleading information (Section 27, Cybercrimes Act). Where a manipulated recording (e.g., selectively edited audio) is published to damage a person’s reputation, this offence may apply.

Reporting: police, ODPP and coordination with civil proceedings

A victim should file a report at the nearest police station, ideally at a specialist cybercrime unit if available, attaching all preserved evidence. The report is forwarded to the Office of the Director of Public Prosecutions (ODPP), which decides whether to charge. Practical tips for coordination:

• Filing a criminal report does not prevent parallel civil proceedings. The two tracks can, and often should, run simultaneously.
• Request that the investigating officer obtains a preservation order from court to prevent the suspect from deleting evidence.
• A conviction in criminal proceedings can be used as evidence in a subsequent or concurrent civil claim for damages.
• If the recording has been shared on social media platforms, file a platform-specific abuse report (Facebook/Meta, X, TikTok, YouTube each have content-removal processes) alongside the criminal report to accelerate takedown.

ODPC and the Data Protection Act Route, Regulatory Complaint and Remedies

The ODPC offers a regulatory pathway that is often faster and more accessible than court proceedings, making it an important tool for victims of recording without consent in Kenya.

ODPC jurisdiction and powers

Under the Data Protection Act, 2019, the ODPC has broad jurisdiction over any processing of personal data that takes place in Kenya or targets Kenyan data subjects. Because voice and video recordings constitute personal data, the ODPC can investigate complaints about non-consensual recording, storage or distribution. Its enforcement powers include issuing compliance orders, imposing administrative fines, ordering the deletion of unlawfully processed data, and directing compensation to the complainant. The ODPC’s Guidance Notes on Processing and Publication of Recorded Media (November 2025) provide detailed instructions on how the Commissioner evaluates recording-related complaints and the factors that influence enforcement decisions.

Filing an ODPC complaint, timeline and evidence

The complaint process is designed to be accessible to individuals without legal representation, although legal advice is recommended for complex cases. Key steps:

• Prepare a written complaint to the Data Commissioner, setting out the facts, identifying the data controller/processor and attaching evidence (the recording, screenshots, correspondence, metadata).
• Submit through the ODPC’s online portal or physical office. The ODPC acknowledges receipt and assigns a reference number.
• Investigation phase: the ODPC may request further information from both parties, conduct its own inquiries and, where appropriate, carry out audits or inspections.
• Decision and enforcement: the Commissioner issues a determination, typically within weeks to a few months for straightforward complaints, though complex cases may take longer.
• Appeal: either party may appeal the ODPC’s decision to the High Court.

Interplay with court proceedings

A data subject is not required to choose between the ODPC route and the courts. The two processes can run in parallel, and each has strategic advantages. The ODPC route may produce a faster administrative order (including deletion and compensation), while court proceedings can yield larger damages awards and binding injunctions. A favourable ODPC determination can also serve as persuasive evidence in court proceedings.

Comparison of non-consensual recording remedies in Kenya

Practical Steps, Immediate Checklist for Victims and Employers

Whether you are an individual whose private conversation was captured or an employer dealing with a workplace recording incident, the following checklist provides a structured response framework.

For individuals

• Do not confront the recorder immediately. Prioritise evidence preservation over an emotional response.
• Preserve everything: take screenshots of any online posts, save URLs (using archive.org or similar), and secure the original recording file if accessible.
• Commission a forensic image of the device containing the recording, performed by a certified digital forensics professional.
• Send a formal written demand for deletion and non-distribution. Retain a copy with proof of delivery.
• File platform takedown requests with every social media or hosting platform where the recording appears. Each major platform (Meta, X, TikTok, YouTube, Google) has a dedicated abuse/privacy-violation reporting process.
• Instruct a lawyer to seek an urgent interim injunction and to advise on the optimal combination of civil, criminal and ODPC remedies.

For employers and HR managers

• Review your workplace surveillance and recording policy. Under the DPA, employees must be informed if workplace monitoring is in place, and the monitoring must have a lawful basis. A policy gap creates significant exposure.
• If an employee has been recorded without consent, treat the matter as a potential data-protection breach and initiate an internal investigation.
• If a recording is offered as evidence in a disciplinary hearing, assess its admissibility: was the employee who made it a party to the conversation? Was there a reasonable expectation of privacy? Seek legal advice before relying on it.
• Document every step of the investigation to demonstrate good faith and compliance with the DPA, particularly if the ODPC later inquires.

Can you tell someone to stop recording you?

Yes. Any person has the right to object to being recorded. In practice, a clear, calm verbal statement, “I do not consent to being recorded; please stop”, creates a contemporaneous record of non-consent that strengthens any subsequent legal claim. If the recording continues after an express objection, this is strong evidence of intentional disregard for your privacy rights, which can influence both the ODPC’s enforcement response and a court’s assessment of damages.

Limitations, Defences and Lawful Exceptions

Not every secret recording gives rise to liability. Kenyan law recognises several situations in which recording without consent may be lawful or defensible:

• Public interest and journalism. The Constitution protects press freedom (Article 34), and a journalist may argue that a recording was necessary to expose corruption, crime or a matter of significant public concern. The defence requires proportionality: the intrusion on privacy must be justified by the gravity of the public interest served.
• Whistleblowing. An employee who records evidence of illegal conduct in the workplace may be protected, provided the recording is disclosed through proper channels and the disclosure meets the criteria for whistleblower protection.
• Law enforcement. Surveillance and interception authorised by a court warrant or under the National Intelligence Service Act fall outside the scope of unlawful recording. The authority must be specific and time-limited.
• Workplace policies with notice. An employer that has notified employees of workplace monitoring in its employment contract or policy, and has a lawful basis under the DPA, may record calls or CCTV footage without individual per-instance consent, though the data-processing principles still apply.
• One-party consent in limited contexts. Where the person making the recording is a participant in the conversation and there is no overriding expectation of privacy (e.g., recording a business negotiation for one’s own records), some practitioners argue this falls within a grey zone. Industry observers expect that future court decisions or ODPC guidance will clarify the boundaries of this exception.

Recording Without Consent in Kenya, Conclusion and Next Steps

The legal landscape around recording without consent in Kenya has shifted decisively in favour of privacy protection. The Constitution, the Data Protection Act, the Cybercrimes Act and the ODPC’s growing enforcement capacity now provide victims with a robust, multi-track remedy framework, from urgent injunctions and civil damages to criminal prosecution and regulatory orders. For individuals, the priority is speed: preserving evidence, stopping distribution and choosing the right combination of remedies. For employers and journalists, the imperative is compliance, ensuring that any recording activity is supported by a lawful basis, transparent policies and proportionality.

The law in this area continues to evolve rapidly. ODPC guidance, judicial decisions and potential statutory amendments are expected to further refine the rules around admissibility of recordings as evidence in Kenya and the scope of non-consensual recording remedies. Specialist legal advice tailored to the specific facts is essential before taking action, whether you are the person who was recorded, the person who made the recording, or an organisation caught in between. Consult a qualified Kenya-based litigation lawyer through the Global Law Experts directory to assess your position and act without delay.

Sources

1. Office of the Data Protection Commissioner, Personal Data Protection Handbook (2024)
2. ODPC, Guidance Notes: Processing on Publications of Recorded Media (November 2025)
3. Anne Babu & Company, Admissibility of Secret Recordings in Disciplinary Hearings and Court Proceedings (2024)
4. Manwa OH Advocates, Kenya’s Data Privacy Rules: Legal Tips for Content Creators
5. Manwa OH Advocates, Non-Consensual Recording and Distribution of Intimate Content: Legal Rights and Remedies under Kenyan Law
6. Njogu & Associates, Call Recordings as Personal Data: Lessons from Andrew Alston v Liquid (2025)
7. Daily Nation, Sue Estranged Husband for Secretly Recording Phone Calls (2026)
8. CIPIT (Strathmore University), Exposed & Vulnerable: Tackling Non-Consensual Sharing of Personal Images in Kenya