Fresh questions have emerged over the creation of Kenya’s National Cybersecurity Agency, a new State body established through a presidential order and tasked with overseeing the country’s cybersecurity operations.
The agency was introduced through the National Cybersecurity Agency Order, 2026, with the government presenting it as a necessary response to rising cyber threats targeting public institutions, businesses, and critical national infrastructure.
However, the move has triggered debate among lawmakers, governance experts, and legal observers over whether the agency followed the proper legal and parliamentary procedures before becoming operational.
At the centre of the controversy is the question of authority: can such a powerful institution be fully established through a presidential order, or should Parliament have played a larger role before implementation?
The confusion has been intensified by differing statements from government offices and parliamentary actors, creating uncertainty over whether all required approvals and consultations were completed.
Supporters of the agency argue that Kenya needs a stronger and more coordinated response to modern cyber risks, especially as digital systems become central to government and economic activities.
Critics, however, warn that the agency’s broad mandate could raise concerns around accountability, oversight, and the protection of citizens’ rights if not clearly defined.
Soource attributed:Nation Newspaper