Something remarkable just happened in the legal universe of the internet. The Kenyan Court of Appeal looked at a law meant to punish online “false information” and essentially said this: the government should not be the official referee of truth. That single idea sits at the heart of its ruling in the case brought by the Bloggers Association of Kenya against the Attorney General, and it could reshape how digital speech is regulated not only in Kenya but across emerging democracies navigating the messy terrain of online expression.
At the centre of the case was the controversial Computer Misuse and Cybercrimes Act, a law introduced to tackle cybercrime but which also contained provisions criminalising the publication of “false information.” Specifically, Sections 22 and 23 allowed the state to prosecute individuals accused of spreading misleading or inaccurate content online. Critics had long warned that such provisions were dangerously vague and open to abuse, especially in a political climate where journalists, bloggers and activists frequently rely on digital platforms to scrutinise power.
The court’s reasoning was rooted in a surprisingly philosophical problem: truth is not always fixed. Scientific history offers plenty of examples where ideas once dismissed as false later became accepted reality. The judges referenced this intellectual uncertainty in their reasoning, warning that criminalising “being wrong” risks suppressing the very process through which knowledge evolves. The law, they argued, treated truth as if it were a static commodity that the state could easily identify and enforce. In reality, public discourse, journalism and scientific inquiry are constantly testing assumptions and revising what society believes to be true.
By striking down the provisions, the court removed the possibility that a person could face prison simply for publishing information authorities later deemed incorrect. In effect, the decision dismantled one of the most controversial pillars of the cybercrime law. Supporters of press freedom quickly described the ruling as a watershed moment, arguing that criminal sanctions for false information often become tools used by governments to silence dissent rather than protect the public.
Yet the ruling did not declare open season for misinformation. Instead, the court shifted responsibility for addressing harmful falsehoods from the criminal justice system to the civil legal arena. Kenya already has defamation laws that allow individuals to seek damages if they believe their reputation has been harmed by inaccurate reporting or statements. The judges also pointed to the National Cohesion and Integration Act, which addresses speech that threatens social harmony or incites hostility.
This shift may appear subtle, but its implications are significant. In criminal cases, the state prosecutes the accused and must prove intent beyond reasonable doubt. Civil cases operate differently. A private individual brings the case and must show that reputational harm occurred. For journalists and bloggers, the risk does not disappear. It simply changes form. Instead of fearing arrest or imprisonment, they may now face costly lawsuits from individuals with the financial resources to pursue legal action.
Some analysts believe this could create a new dynamic in Kenya’s media environment. Wealthy or powerful figures might increasingly rely on civil defamation suits as a strategy to discourage aggressive reporting. The threat of expensive litigation can sometimes produce a chilling effect similar to criminal prosecution, especially for smaller media outlets with limited legal budgets.
Another striking aspect of the ruling is what the court chose not to strike down. While rejecting the state’s authority to criminalise false information, the judges upheld several investigative powers contained in the cybercrime law. These provisions allow authorities, with judicial approval, to access digital data during investigations. Law enforcement agencies can obtain warrants to search electronic devices, compel internet service providers to release traffic data, and in some cases conduct real time monitoring of digital communications.
From a legal standpoint, the court justified this by emphasising judicial oversight. The key safeguard, according to the judges, is that these powers cannot be exercised unilaterally by the executive branch. A judge must approve them. In other words, the court placed its trust in the judiciary as a gatekeeper of digital privacy rather than allowing the executive branch to decide what counts as misinformation.
This creates an intriguing paradox. The state, the court suggests, may be too blunt an instrument to define truth, but it can still hold powerful investigative tools to examine the digital lives of citizens. The logic rests on institutional checks and balances. The judiciary, the court believes, can provide the necessary restraint that prevents surveillance powers from becoming instruments of abuse.
The ruling also addressed another dimension of internet regulation. The judges rejected the argument that cyberspace should operate without legal constraints. For instance, they upheld provisions dealing with cybersquatting, a practice where individuals register domain names linked to established brands or organisations in order to profit from them. By maintaining these rules, the court reinforced the idea that the internet is not a lawless frontier but a regulated digital marketplace where property rights and commercial protections still apply.
Taken together, the judgment redraws the boundaries of digital governance in Kenya. On one side lies freedom of expression, strengthened by the removal of criminal penalties for false information. On the other lies a framework of regulation that still permits surveillance, protects digital property rights and allows individuals to defend their reputation through civil litigation.
Kenya’s experience reflects a broader global dilemma. Governments around the world are grappling with how to address misinformation without undermining democratic freedoms. Social media platforms have amplified the speed at which false claims can spread, from election rumours to public health misinformation. Yet attempts to regulate such content often collide with constitutional protections for free speech.
The court’s decision suggests one possible path forward. Rather than granting the state sweeping authority to determine truth, the ruling encourages a system where competing voices, independent courts and civil legal remedies collectively shape accountability. It is a model that recognises both the dangers of misinformation and the dangers of excessive government control over public discourse.
For Kenya, the judgment marks a pivotal moment in the evolution of its digital legal framework. It signals a judiciary willing to confront the complexities of regulating online speech while defending constitutional freedoms. At the same time, it reminds journalists, bloggers and ordinary internet users that freedom of expression carries its own responsibilities and legal risks.
In practical terms, the internet in Kenya will not become a lawless territory. Speech may be freer, but it will still exist within a web of legal accountability, surveillance powers and civil remedies. The court has simply shifted the balance away from criminal punishment and toward a more nuanced system of regulation.
History often shows that societies struggle most when trying to legislate truth. Kenya’s Court of Appeal has now entered that long debate with a clear message: governments may enforce laws, but they should not own reality.