[kictanet] Has IEBC Voter Register Been Compromised

Wed Feb 13 09:19:25 EAT 2013

Morning,

I think that CCK should take the lead here, especially since they are under
a duty to enforce the consumer protection regulations under the KIC Act,
and the relevant provisions Constitution on privacy and consumer rights.

Phone numbers are private, and as such CCK should crack the whip on telcos,
mpesa/mobile money agents, security firms, IEBC, and any other persons who
collect such information and charge those who share the info without the
prior informed consent of the owners. CCK might as well pass additional
regulations under KICA to guide the management of private information to
curb the abuse pending the adoption of the data protection bill.

Victor
On 12 Feb 2013 22:59, "meshack emakunat" <memakunat at yahoo.com> wrote:

> Is this a matter of cybersecurity and privacy right (confidenciality ).
> Someone please enlighten. If so don't we have a functional organ that seeks
> to limit the extend of exposure of private info data from online
> Or ofline access
>
> Sent from Yahoo! Mail on Android
>
>  ------------------------------
> * From: * Esther Muchiri <emuchiri at andestbites.com>;
> * To: * <memakunat at yahoo.com>;
> * Cc: * 'KICTAnet ICT Policy Discussions' <kictanet at lists.kictanet.or.ke>;
>
> * Subject: * Re: [kictanet] Has IEBC Voter Register Been Compromised
> * Sent: * Tue, Feb 12, 2013 6:57:27 PM
>
>   Joe – yes, ‘truecaller’ works.
>
>
>
> Last week I met an old friend in town and when I gave her my phone number,
> she dialed it to confirm and my full name appeared on her phone! That was
> real ‘weird’…
>
>
>
> Esther
>
>
>
> *From:* kictanet [mailto:kictanet-bounces+emuchiri=
> andestbites.com at lists.kictanet.or.ke] *On Behalf Of *Joseph Mucheru
> *Sent:* Tuesday, February 12, 2013 9:22 PM
> *To:* emuchiri at andestbites.com
> *Cc:* KICTAnet ICT Policy Discussions
> *Subject:* Re: [kictanet] Has IEBC Voter Register Been Compromised
>
>
>
> Does anyone else on the list use the app "truecaller" this is a global app
> and links caller names with their phone numbers from social networks and
> other online sources.
>
> www.truecaller.com:
>
> Search and find people all over the world with number lookup and get info
> from Truecaller, Facebook And LinkedIn
>
> Joe Mucheru
>
> On Feb 12, 2013 4:57 PM, "Grace Mutung'u (Bomu)" <nmutungu at gmail.com>
> wrote:
>
> when the voter register was open for inspection,  anyone with your ID
> Number could have accessed your voter information.....
> but again,  i am advised that voter information is not private....so
> if thats the case, then to what extent do data protection laws apply
> to the voters register?  and is it unauthorized access if i check
> others registration details?
>
> 2013/2/12, Harry Karanja <kkairo at gmail.com>:
>
> > On interrogation of legislation I've actually found that the Kenya
> > Communication (Amendment) Act imposed stiff penalties for unauthorized
> > access of data. So whether it came from retail agents or telcos (which is
> > highly improbable) this MP is not supposed to have my data. I'd also
> > discount the idea of cell broadcasting - which to the best of my
> knowledge
> > had not been activated in Kenya for commercial use. The SMS originated
> from
> > a UK number.
> >
> > What is indisputable is that the aspiring MP accessed my personal data
> > without authorization. The next challenge is who should be held
> accountable
> > and how do I do this?  As mentioned earlier, targeted campaigning or
> > marketing is only one use of this data - but what if someone based on my
> > surname surmises that I do not fit into the electoral map, will there be
> > another form of targeting to evict me from that constituency? (Here lies
> the
> > futility of SIM registration as these SMS can easily be sent from UK or
> > India)
> >
> > The fears I have are real, for its happened before, and as most on this
> list
> > can attest, technology has the power to make this process more efficient.
> >
> > Regards,
> > Harry Karanja
> >
> > Sent from my iPad
> >
> > On Feb 11, 2013, at 10:40 AM, Edith Adera <eadera at idrc.ca> wrote:
> >
> >> Harry,
> >>
> >> Indeed the sources are many as others have said. Do we have a data
> >> protection law (and FOI law) in place? Or the 10th parliament left
> >> “hurriedly” without enacting it?
> >>
> >> The scenarios of how an individual voter can be targeted are many and
> >> scary, to say the least.
> >>
> >> Edith
> >>
> >> From: kictanet
> >> [mailto:kictanet-bounces+eadera=idrc.ca at lists.kictanet.or.ke] On
> Behalf Of
> >> Harry Karanja
> >> Sent: February 10, 2013 10:44 PM
> >> To: Edith Adera
> >> Cc: KICTAnet ICT Policy Discussions
> >> Subject: [kictanet] Has IEBC Voter Register Been Compromised
> >>
> >> Listers,
> >>
> >> This morning I received the oddest message. Through a bulk sms provider,
> >> one of the aspirants for MP in my constituency sent me an SMS appealing
> me
> >> to vote for him in the upcoming elections? Now I say odd because to the
> >> best of my knowledge I have never communicated to this politician my
> >> number and my constituency. In fact the only person I have ever given
> this
> >> dual information is the IEBC during voter registration.
> >>
> >> Which begs the question, could IEBC or its registration clerks be making
> >> voter registers available to politicians for consideration or otherwise?
> >> I'm also curious if this is an isolated event or its happening
> elsewhere?
> >>
> >> Now I don't need to emphasize on the very serious implications if
> >> politicians are in possession of such specific data on the electorate. I
> >> previously blogged
> >> (
> http://www.startupkenya.info/2010/08/chopping-up-big-green-giant-safaricom.html
> )
> >> on the dangers of telcos in possession of too much personal data, but it
> >> is nothing compared to politicians with this data especially in a
> country
> >> that has experienced deadly post election violence.
> >>
> >> I'm curious what measures IEBC has in place for the protection of our
> >> personal information and if my experience this morning portends the
> >> compromise of all future governmently held e-data?
> >>
> >> Regards,
> >> Harry Karanja
> >>
> >> Sent from my iPad
> >
>
> --
> Grace L.N. Mutung'u (Bomu)
> Kenya
> Skype: gracebomu
> Twitter: @Bomu
> Website: http://www.diplointernetgovernance.org/profile/GraceMutungu
>
>
> _______________________________________________
> kictanet mailing list
> kictanet at lists.kictanet.or.ke
> https://lists.kictanet.or.ke/mailman/listinfo/kictanet
>
> Unsubscribe or change your options at
> https://lists.kictanet.or.ke/mailman/options/kictanet/mucheru%40google.com
>
> The Kenya ICT Action Network (KICTANet) is a multi-stakeholder platform
> for people and institutions interested and involved in ICT policy and
> regulation. The network aims to act as a catalyst for reform in the ICT
> sector in support of the national aim of ICT enabled growth and development.
>
> KICTANetiquette : Adhere to the same standards of acceptable behaviors
> online that you follow in real life: respect people's times and bandwidth,
> share knowledge, don't flame or abuse or personalize, respect privacy, do
> not spam, do not market your wares or qualifications.
>
> _______________________________________________
> kictanet mailing list
> kictanet at lists.kictanet.or.ke
> https://lists.kictanet.or.ke/mailman/listinfo/kictanet
>
> Unsubscribe or change your options at
> https://lists.kictanet.or.ke/mailman/options/kictanet/vkapiyo%40gmail.com
>
> The Kenya ICT Action Network (KICTANet) is a multi-stakeholder platform
> for people and institutions interested and involved in ICT policy and
> regulation. The network aims to act as a catalyst for reform in the ICT
> sector in support of the national aim of ICT enabled growth and development.
>
> KICTANetiquette : Adhere to the same standards of acceptable behaviors
> online that you follow in real life: respect people's times and bandwidth,
> share knowledge, don't flame or abuse or personalize, respect privacy, do
> not spam, do not market your wares or qualifications.
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.kictanet.or.ke/pipermail/kictanet/attachments/20130213/234cb345/attachment.htm>