<html><head><meta http-equiv="content-type" content="text/html; charset=utf-8"></head><body dir="auto"><div>On interrogation of legislation I've actually found that the Kenya Communication (Amendment) Act imposed stiff penalties for unauthorized access of data. So whether it came from retail agents or telcos (which is highly improbable) this MP is not supposed to have my data. I'd also discount the idea of cell broadcasting - which to the best of my knowledge had not been activated in Kenya for commercial use. The SMS originated from a UK number.</div><div><br></div><div>What is indisputable is that the aspiring MP accessed my personal data without authorization. The next challenge is who should be held accountable and how do I do this? As mentioned earlier, targeted campaigning or marketing is only one use of this data - but what if someone based on my surname surmises that I do not fit into the electoral map, will there be another form of targeting to evict me from that constituency? <span style="-webkit-tap-highlight-color: rgba(26, 26, 26, 0.292969); -webkit-composition-fill-color: rgba(175, 192, 227, 0.230469); -webkit-composition-frame-color: rgba(77, 128, 180, 0.230469); ">(Here lies the futility of SIM registration as these SMS can easily be sent from UK or India)</span></div><div><br></div><div>The fears I have are real, for its happened before, and as most on this list can attest, technology has the power to make this process more efficient.<br><br>Regards, <div>Harry Karanja<div><div><br></div><div>Sent from my iPad</div></div></div></div><div><br>On Feb 11, 2013, at 10:40 AM, Edith Adera <<a href="mailto:eadera@idrc.ca">eadera@idrc.ca</a>> wrote:<br><br></div><blockquote type="cite"><div>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
<meta name="Generator" content="Microsoft Word 14 (filtered medium)">
<style><!--
/* Font Definitions */
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
{font-family:Tahoma;
panose-1:2 11 6 4 3 5 4 4 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0cm;
margin-bottom:.0001pt;
font-size:12.0pt;
font-family:"Times New Roman","serif";}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:purple;
text-decoration:underline;}
span.EmailStyle17
{mso-style-type:personal-reply;
font-family:"Calibri","sans-serif";
color:#1F497D;}
.MsoChpDefault
{mso-style-type:export-only;
font-size:10.0pt;}
@page WordSection1
{size:612.0pt 792.0pt;
margin:72.0pt 72.0pt 72.0pt 72.0pt;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
<div class="WordSection1">
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D">Harry,<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D">Indeed the sources are many as others have said. Do we have a data protection law (and FOI law) in place? Or the 10<sup>th</sup> parliament left “hurriedly”
without enacting it?<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D">The scenarios of how an individual voter can be targeted are many and scary, to say the least.<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D">Edith<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D"><o:p> </o:p></span></p>
<div>
<div style="border:none;border-top:solid #B5C4DF 1.0pt;padding:3.0pt 0cm 0cm 0cm">
<p class="MsoNormal"><b><span lang="EN-US" style="font-size:10.0pt;font-family:"Tahoma","sans-serif"">From:</span></b><span lang="EN-US" style="font-size:10.0pt;font-family:"Tahoma","sans-serif""> kictanet [<a href="mailto:kictanet-bounces+eadera=idrc.ca@lists.kictanet.or.ke">mailto:kictanet-bounces+eadera=idrc.ca@lists.kictanet.or.ke</a>]
<b>On Behalf Of </b>Harry Karanja<br>
<b>Sent:</b> February 10, 2013 10:44 PM<br>
<b>To:</b> Edith Adera<br>
<b>Cc:</b> KICTAnet ICT Policy Discussions<br>
<b>Subject:</b> [kictanet] Has IEBC Voter Register Been Compromised<o:p></o:p></span></p>
</div>
</div>
<p class="MsoNormal"><o:p> </o:p></p>
<div>
<p class="MsoNormal">Listers,<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<p class="MsoNormal">This morning I received the oddest message. Through a bulk sms provider, one of the aspirants for MP in my constituency sent me an SMS appealing me to vote for him in the upcoming elections? Now I say odd because to the best of my knowledge
I have never communicated to this politician my number and my constituency. In fact the only person I have ever given this dual information is the IEBC during voter registration. <o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<p class="MsoNormal">Which begs the question, could IEBC or its registration clerks be making voter registers available to politicians for consideration or otherwise? I'm also curious if this is an isolated event or its happening elsewhere?<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<p class="MsoNormal">Now I don't need to emphasize on the very serious implications if politicians are in possession of such specific data on the electorate. I previously blogged (<span style="font-size:11.5pt"><a href="http://www.startupkenya.info/2010/08/chopping-up-big-green-giant-safaricom.html">http://www.startupkenya.info/2010/08/chopping-up-big-green-giant-safaricom.html</a>) </span>on
the dangers of telcos in possession of too much personal data, but it is nothing compared to politicians with this data especially in a country that has experienced deadly post election violence. <o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<p class="MsoNormal">I'm curious what measures IEBC has in place for the protection of our personal information and if my experience this morning portends the compromise of all future governmently held e-data?<br>
<br>
Regards, <o:p></o:p></p>
<div>
<p class="MsoNormal">Harry Karanja<o:p></o:p></p>
<div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<p class="MsoNormal">Sent from my iPad<o:p></o:p></p>
</div>
</div>
</div>
</div>
</div>
</div></blockquote></body></html>