The silence from a disconnected phone line often signals the end of a service contract, but for millions of Kenyans, it has quietly become the gateway to a digital identity crisis. In a decisive judgment delivered on March 19, 2026, the High Court has dismantled the standard industry practice of recycling inactive mobile phone numbers, declaring them a protected extension of an individual’s digital self.

This ruling, stemming from Constitutional Petition No. E290 of 2024, marks a critical pivot in Kenya’s telecommunications landscape. Justice Lawrence Mugambi determined that the automatic reallocation of mobile numbers after periods of inactivity—previously a standard operational procedure for major network operators—is unconstitutional. By framing mobile numbers as essential digital identifiers linked to financial, social, and personal data, the court has placed the burden of privacy squarely on telecommunication providers and regulators, granting them six months to overhaul the current system.

A Digital Lifeline Severed

The case was ignited by Erastus Ngura Odhiambo, an inmate serving a 20-year sentence, whose experience highlighted the profound vulnerability inherent in modern connectivity. During his incarceration, his dormant mobile line was recycled and reassigned by a service provider, effectively severing his access to family communications and critical personal affairs. For the court, this was not merely a loss of a telephone service it was the unauthorized displacement of a person’s digital existence.

Justice Mugambi noted that a mobile number is no longer just a conduit for voice calls. In the digital economy, it functions as a primary authenticator for mobile banking, tax filings, social media access, and government services. When a number is recycled and passed to a new subscriber, the previous owner’s digital footprint remains accessible, creating a vector for significant data breaches, unauthorized account takeovers, and identity theft. The court explicitly labeled the existing 90-day inactivity policies as "unreasonable and arbitrary," particularly for those who, like prisoners, students, or expatriates, face legitimate barriers to keeping a SIM card active.

The Privacy Stakes

The judicial intervention underscores the tension between telecommunications efficiency and constitutional privacy protections. While mobile operators have long defended number recycling as a necessary measure to combat the exhaustion of the numbering plan, the High Court has asserted that such efficiency cannot override the Article 31 right to privacy. The ruling establishes that a phone number is inextricably linked to an individual’s private affairs, meaning that any reassignment must now be preceded by "informed and verifiable consent."

• Financial Risk: Potential access to M-PESA wallets, mobile banking apps, and loan facilities.
• Security Risk: Exposure of 2FA codes for sensitive email, social media, and government service accounts (e.g., eCitizen).
• Privacy Risk: Unauthorized access to historical text messages, family conversations, and personal contact lists stored by third-party cloud backups.
• Legal Risk: Unintended association of a new owner with the legal or civil debts of the previous user.

A Six-Month Regulatory Deadline

The High Court has issued a strict directive to the Attorney General, the Communications Authority of Kenya (CA), and the Office of the Data Protection Commissioner. These agencies are mandated to formulate a new regulatory framework by September 19, 2026. This framework must safeguard the interests of vulnerable subscribers, including those in custodial care, to ensure that their digital identities are preserved until they can reclaim them.

Telecommunications companies now face a significant operational challenge. They must move away from the "use it or lose it" model toward a consent-based approach that includes robust public notices and thorough verification processes before a number can be returned to the pool. For the average Kenyan, this is a long-overdue fortification of digital rights, shifting the power dynamic from the service provider back to the subscriber.

The Global Precedent

This Kenyan ruling resonates with broader, global debates on digital sovereignty. As nations grapple with the definitions of personal data, the recognition of a phone number as a permanent digital identifier sets a high bar for regulatory agencies worldwide. While many European markets operating under GDPR have strict data minimization rules, the Kenyan High Court has gone further by codifying the "right to a permanent digital identifier," preventing corporations from monetizing the recycling of numbers at the expense of individual security.

As the six-month clock begins ticking, the telecommunications sector must now reconcile its inventory management with the constitutional right to privacy. For millions of Kenyans who have spent years building their lives around a single number, this ruling ensures that their digital history remains theirs alone, safe from the casual reach of a recycled connection.