Ruto Signs Cybercrime Amendment Bill as Crypto Law Awaits Signature
By CMN News Desk | Nairobi | October 15,
President William Ruto has given his assent to the Computer Misuse & Cybercrimes (Amendment) Bill, 2024, bringing into force expanded powers for government agencies to regulate, block, and remove digital content deemed unlawful. Meanwhile, Parliament has passed the Virtual Asset Service Providers (VASP) Bill to regulate digital assets — but it is still awaiting his approval before becoming law.
What the Cybercrime Amendment Bill Changes
According to local media and technology news outlets, the new law includes:
-
Preemptive shutdown authority: Courts and investigators can now apply for orders to block websites or content before harm occurs if a platform is suspected of enabling illicit acts such as child pornography, terrorism, or extremist conduct. People Daily
-
Expanded definitions: The law broadens what constitutes “computer misuse” to include accessing or modifying data without permission, even if no physical damage is done. People Daily+1
-
Stricter penalties: Unauthorized SIM card takeover, phishing, and digital impersonation are now criminal offenses under the law, with fines and jail terms specified. People Daily
-
Content removal orders: The law allows formal requests to remove content from devices or platforms. People Daily
The law was assented on Wednesday, October 15, 2025 — the same day news broke of Raila Odinga’s death. People Daily
The Status of the Crypto / Digital Assets Bill
While the VASP Bill has passed both houses of Parliament and been hailed as a landmark for Kenya’s fintech sector, it has not yet been signed by President Ruto. Reuters+2CIO Africa+2
Key features of the VASP Bill as passed by Parliament include:
-
Regulation of stablecoins and other virtual assets by the Central Bank of Kenya (CBK). Reuters+2Coinspeaker+2
-
Oversight of crypto exchanges and trading platforms by the Capital Markets Authority (CMA). Reuters+1
-
Removal of a controversial clause that would have established a separate Virtual Asset Regulatory Authority with board representation by private crypto groups. Kenyan Wall Street+1
-
Licensing and compliance obligations for entities offering digital asset services. Kenyan Wall Street+2Tech Labari+2
Once signed, Kenya would join a select group of African nations with formal crypto legislation.
Reaction & Concerns
Supportive Voices
Proponents argue that the cyber amendment is necessary to deal with fast-evolving digital threats and crimes. They maintain the law strikes a balance between regulation and national security.
Some fintech advocates see the VASP Bill as a much-needed step to bring certainty into Kenya’s digital finance space, offering clarity to local and international investors. Reuters+1
Opposition & Criticism
Critics warn that the cyber law’s language is too broad and ambiguous, potentially giving the state sweeping powers to censor dissent or stifle press freedom. Civil society groups caution that without strong checks, the law could be misused. Tech-ish+1
Regarding the crypto law, critics say the removed clause on regulator capture was one of many checks in the original draft, and the final framework may still concentrate power in the hands of regulators without sufficient transparency. Kenyan Wall Street+2Tech Labari+2
What Happens Next?
-
The cyber amendment law is now active, and its provisions can immediately be enforced once implementing regulations are developed.
-
For the VASP Bill, its next step is to be assented by President Ruto before becoming law.
-
After assent, the government will issue regulations and guidelines to operationalize both laws, including licensing rules, compliance standards, and enforcement mechanisms.
-
Legal challenges are expected, especially around sections of the cyber law that affect freedom of expression, data rights, and privacy.