Internet of Things-Enabled Data Collection in Kenya : Implications for Digital Sovereignty and Data Governance
DOI:
https://doi.org/10.67371/ajsss.v1i1.4Keywords:
Digital Sovereignty, Data governance, Internet of Things, Cross-border Data Flows, Digital Colonialism, Postcolonial Techno-politicsAbstract
The rapid proliferation of the Internet of Things (IoT) across Kenya is reshaping key sectors, including agriculture, healthcare, energy, and urban planning, through data-driven innovations. However, the widespread reliance on foreign-manufactured IoT devices and cloud infrastructure raises pressing concerns about national data governance and sovereignty. This paper examines how the unregulated adoption of IoT technologies affects Kenya's control over its data and digital ecosystem. The study hypothesises that the dominance of off-the-shelf IoT devices, many of which regularly transmit user and infrastructure data to external servers, creates opaque transnational data flows that undermine national oversight and pose significant national security risks. To investigate this, the research employs a mixed-methods approach. First, the study engages in a policy analysis of Kenya's existing ICT laws, data protection regulations, and other relevant frameworks. Second, we undertake infrastructure mapping to identify how IoT deployments interface with foreign data infrastructures. Third, it carries out a systematic review of academic literature, government reports, and grey literature to contextualise the political and economic implications of foreign-dominated IoT ecosystems. The central question guiding the analysis is: How does the unregulated adoption of IoT technologies affect Kenya's control over its data and digital ecosystem? The findings reveal substantial legal, regulatory, and technical gaps in IoT regulation that permit unrestricted data extraction and external surveillance. Framing the analysis within theories of digital sovereignty and postcolonial technopolitics, the paper argues for urgent reforms in Kenya's digital governance strategies. The study proposes a roadmap that includes investing in domestic IoT innovation, strengthening governance mechanisms for cross-border data flows, and establishing enforceable data localisation standards. This paper offers actionable insights for Kenya and emerging economies aiming to reclaim agency over their digital futures.
References
Abraham, R., Schneider, J., & vom Brocke, J. (2019). Data governance: A conceptual framework, structured review, and research agenda. International Journal of Information Management, 49, 424–438. https://doi.org/10.1016/j.ijinfomgt.2019.07.008
Adams, K. (2024, February 1). Kenya introduces "cloud-first" policy for government data. Techweez. https://techweez.com/2024/02/01/kenya-cloud-first-policy-government-data/
Affinito, F., Botta, A., Cinque, M., & Ventre, G. (2023). Mirai-like botnets: A survey of threats and detection techniques. IEEE Access, 11, 38161–38183. https://doi.org/10.1109/access.2023.3267156
African Union. (2020). The digital transformation strategy for Africa (2020-2030). https://au.int/en/documents/20200518/digital-transformation-strategy-africa-2020-2030
African Union. (2024). Data policy framework. https://au.int/en/documents/20220315/au-data-policy-framework
Ari, A. A. A., Ngangngue, A., Titanji, K., & Gueroui, A. M. (2024). Data collection in the internet of things: A survey of techniques and protocols. Journal of King Saud University - Computer and Information Sciences, 36(1), 101861. https://doi.org/10.1016/j.jksuci.2023.101861
Belli, L., de Souza, C. A. P., & Ponce, P. (2024). Digital sovereignty and data portability in Brazil: A critical analysis. Telecommunications Policy, 48(2), 102688. https://doi.org/10.1016/j.telpol.2023.102688
Benamara, H. (2025). Africa’s data centre market: Growth, challenges, and opportunities. UNCTAD. https://unctad.org/system/files/official-document/dtltlb2024d1_en.pdf
Binotto, G., & Ponce, P. (2022). Digital non-alignment: Brazil's strategy for digital sovereignty. International Journal of Communication, 16, 22. https://ijoc.org/index.php/ijoc/article/view/18442
Bowen, O. (2021, July 14). Nigeria to deploy RPMA-based IoT networks. IT News Africa. https://www.itnewsafrica.com/2021/07/nigeria-to-deploy-rpma-based-iot-networks/
Buhler, J., Oberländer, A. M., & Röglinger, M. (2023). Decentralized data governance for the internet of things: A design science research study. Journal of the Association for Information Systems, 24(1), 22–54. https://doi.org/10.17705/1jais.00778
Carriere-Swallow, Y., & Haksar, V. (2019). The economics and implications of data: An integrated perspective. IMF Departmental Papers. https://www.imf.org/en/Publications/Departmental-Papers-Policy-Papers/Issues/2019/09/20/The-Economics-and-Implications-of-Data-An-Integrated-Perspective-48590
Chesosi, C. (2022). Regulating the internet of things in Kenya: Challenges and opportunities. Kenya ICT Action Network (KICTANet). https://www.kictanet.or.ke/regulating-the-internet-of-things-in-kenya-challenges-and-opportunities/
Choudhary, R. (2024). Internet of things (IoT): Concepts, architecture, and applications. International Journal of Computer Science and Mobile Computing, 13(5), 114–122. https://doi.org/10.47760/ijcsmc.2024.v13i05.011
CIPESA. (2022). State of data protection and privacy in Africa. https://cipesa.org/wp-content/uploads/2022/11/State-of-Data-Protection-and-Privacy-in-Africa-2022.pdf
CIPIT. (2024). Kenya data protection compliance report 2024. Centre for Intellectual Property and Information Technology Law. https://cipit.strathmore.edu/kenya-data-protection-compliance-report-2024/
CIPIT. (2025). Digital sovereignty and data localization in Kenya. Centre for Intellectual Property and Information Technology Law. https://cipit.strathmore.edu/digital-sovereignty-and-data-localization-in-kenya/
Cohen, J. (2023). The digital divide and IoT adoption in Africa. World Bank Blogs. https://blogs.worldbank.org/digital-development/digital-divide-and-iot-adoption-africa
Coughlin, T. (2024, January 10). 2024: The year of the internet of things. Forbes. https://www.forbes.com/sites/tomcoughlin/2024/01/10/2024-the-year-of-the-internet-of-things/
Couldry, N., & Mejias, U. A. (2019). The costs of connection: How data is colonizing human life and appropriating it for capitalism. Stanford University Press.
Dad, S., & Nguyen, T. (2025). NIST cybersecurity framework 2.0: A guide for small and medium enterprises. Journal of Cybersecurity Research, 10(1), 15–30. https://doi.org/10.1007/s41133-024-00065-4
Dahiya, S. (2023). Digital colonialism: A new era of exploitation. International Journal of Social Science and Economic Research, 8(9), 2845–2858. https://doi.org/10.46609/ijsser.2023.v08i09.004
Denning, D. E. (2012). Stuxnet: What has changed? Ethics and Information Technology, 14(4), 279–287. https://doi.org/10.1007/s10676-012-9294-1
Elksasy, M. (2023). IoT interoperability: Challenges and solutions. International Journal of Advanced Computer Science and Applications, 14(8), 54–63. https://doi.org/10.14569/ijacsa.2023.0140807
Ellie, M. (2023, June 15). IoT in Kenya: Applications and growth. CIO Africa. https://www.cioafrica.co/iot-in-kenya-applications-and-growth/
Feijoo, C., Gomez-Barroso, J. L., & Voigt, P. (2020). The digital sovereignty of the European Union: A critical analysis. Telecommunications Policy, 44(8), 102010. https://doi.org/10.1016/j.telpol.2020.102010
Fleck, A. (2024, September 20). Countries with the most data centers worldwide. Statista. https://www.statista.com/chart/26354/number-of-data-centers-per-country/
Folorunso, O., Akande, A., & Ojewole, A. (2024). California consumer privacy act (CCPA): A review of compliance and challenges. Journal of Privacy and Confidentiality, 14(1). https://doi.org/10.29012/jpc.845
Harvey, J., Joiner, J., & Borole, S. (2024, October). Sector contribution to Kenya’s GDP. GSMA. https://www.gsma.com/solutions-and-impact/connectivity-for-good/mobile-for-development/wp-content/uploads/2024/10/Sector-Contribution-to-Kenyas-GDP.pdf
Hessel, S., & Rebmann, J. (2020). Germany’s IT security act 2.0: New obligations for the internet of things. Computer Law Review International, 21(5), 145–150. https://doi.org/10.9785/cri-2020-210504
Holland, G., & Lenovo. (2024). The impact of COVID-19 on Africa’s digital transformation. Lenovo StoryHub. https://news.lenovo.com/the-impact-of-covid-19-on-africas-digital-transformation/
Hongladarom, S. (2020). Surveillance capitalism and the erosion of digital sovereignty in the global south. Journal of Information, Communication and Ethics in Society, 18(3), 321–335. https://doi.org/10.1108/jices-12-2019-0136
Hummel, P., Braun, M., Tretter, M., & Dabrock, P. (2021). Data sovereignty: A concept in need of clarification. Minds and Machines, 31(1), 1–19. https://doi.org/10.1007/s11023-020-09557-y
Hutchinson, J., Mejias, U. A., & Couldry, N. (2024). Data colonialism and the global south: A critical assessment. New Media & Society, 26(4), 1845–1862. https://doi.org/10.1177/14614448231223456
Ihirwe, F., Di Ruscio, D., Mazzini, S., Pierantonio, A., & Trubiani, C. (2020). Modeling the components of the IoT ecosystem. In proceedings of the 23rd international conference on model driven engineering languages and systems (pp. 314–324). https://doi.org/10.1145/336512.3409432
Ienca, M., & Malgieri, G. (2022). Mental data protection and the GDPR. International Data Privacy Law, 12(2), 105–124. https://doi.org/10.1093/idpl/ipac003
Jamesju, S. (2025). Risk mitigation and data minimisation in IoT systems: A NIST perspective. Journal of Information Security, 16(2), 45–60. https://doi.org/10.4236/jis.2025.162004
Joiner, J., Patsioura, C., & Borole, S. (2023, March). IoT for development: Use cases, measurable impact and scaling in low- and middle-income countries. GSMA. https://www.gsma.com/solutions-and-impact/connectivity-for-good/mobile-for-development/wp-content/uploads/2023/04/IoT-for-Development-Use-cases-measurable-impact-and-scaling-in-LMICs.pdf
Karbekova, A., Zak, J., & Milenkovic, M. (2025). IoT and big data: A synergetic approach for autonomous operations. Journal of Big Data, 12(1), 10. https://doi.org/10.1186/s40537-024-00987-6
Kenya News Agency. (2025, January 10). Government scales up Ajira digital program to boost youth employment. https://www.kenyanews.go.ke/government-scales-up-ajira-digital-program-to-boost-youth-employment/
KIPPRA. (2024). Kenya economic report 2024: Enhancing digital governance for sustainable development. Kenya Institute for Public Policy Research and Analysis. https://kippra.or.ke/kenya-economic-report-2024/
Kuchuk, H., & Malokhvii, O. (2024). Data transmission and processing in edge-fog-cloud architectures for IoT. International Journal of Computing, 23(1), 45–56. https://doi.org/10.47839/ijc.23.1.3412
Kumar, N., & Mallick, S. P. (2018). Cloud computing for IoT: A review. International Journal of Advanced Research in Computer Science, 9(2), 541–545. https://doi.org/10.26483/ijarcs.v9i2.5896
Kumar, S., Tiwari, P., & Zymbler, M. (2019). Internet of things is a revolutionary approach for future technology enhancement: A review. Sensors, 19(5), 1119. https://doi.org/10.3390/s19051119
Lasi, H., Fettke, P., Kemper, H. G., Feld, T., & Hoffmann, M. (2014). Industry 4.0. Business & Information Systems Engineering, 6(4), 239–242. https://doi.org/10.1007/s12599-014-0334-4
Lawi, A. (2024, May 15). Challenges facing the office of the data protection commissioner in Kenya. The Star. https://www.the-star.co.ke/news/2024-05-15-challenges-facing-the-office-of-the-data-protection-commissioner-in-kenya/
Llp, B., & Llp, M. (2025). IoT regulation and security in Kenya: A legal perspective. Bowmans. https://www.bowmanslaw.com/insights/technology-media-and-telecommunications/iot-regulation-and-security-in-kenya-a-legal-perspective/
Mathew, J. (2024, April 20). Data sovereignty in the age of the internet of things. TechCrunch. https://techcrunch.com/2024/04/20/data-sovereignty-in-the-age-of-the-internet-of-things/
Matsubara, M. (2016). Japan’s cybersecurity strategy and the internet of things. Journal of Cyber Policy, 1(2), 241–254. https://doi.org/10.1080/23738871.2016.1245643
Minerva, R., Biru, A., & Rotondi, D. (2015). Towards a definition of the internet of things (IoT). IEEE IoT Initiative. https://iot.ieee.org/images/files/pdf/IEEE_IoT_Towards_Definition_Internet_of_Things_Revision1_27MAY15.pdf
Ministry of Information, Communications and the Digital Economy. (2023). Kenya digital economy strategy 2023-2032. https://www.ict.go.ke/wp-content/uploads/2023/05/Kenya-Digital-Economy-Strategy-2023-2032.pdf
Morozov, E. (2013). To save everything, click here: The folly of technological solutionism. PublicAffairs.
Mouha, R. A. (2021). Internet of things (IoT) sensors: A review. Sensors, 21(22), 7432. https://doi.org/10.3390/s21227432
Musyoka, S., Kibet, A., & Agata, E. (2024). Digital sovereignty and data governance in Kenya: Challenges and opportunities in the IoT era. African Journal of Information Systems, 16(2), 45–62. https://digitalcommons.kennesaw.edu/ajis/vol16/iss2/3
N V, S. (2024). Changing human-device interaction in the IoT era. International Journal of Human-Computer Interaction, 40(5), 1120–1135. https://doi.org/10.1080/10447318.2023.2245678
Naha, R. K., Garg, S., Georgakopoulos, D., Jayaraman, P. P., Gao, L., Xiang, Y., & Ranjan, R. (2018). Fog computing: Survey of trends and technologies. IEEE Access, 6, 47944–47974. https://doi.org/10.1109/access.2018.2866491
Njogu, J. (2023). Data stewardship and sovereignty in Kenya’s public sector. KICTANet. https://www.kictanet.or.ke/data-stewardship-and-sovereignty-in-kenyas-public-sector/
Perera, C., Zaslavsky, A., Christen, P., & Georgakopoulos, D. (2014). Context aware computing for the internet of things: A survey. IEEE Communications Surveys & Tutorials, 16(1), 414–454. https://doi.org/10.1109/surv.2013.042313.00197
Phapale, A., Kadam, S., & Patil, S. (2025). Nairobi as a regional data hub: A study of data center growth and impact. International Journal of Cloud Computing, 14(1), 15–30. https://doi.org/10.1504/ijcc.2025.100654
Purnamaningsih, P., Santoso, A. S., & Handayani, P. W. (2024). Consent mechanisms and data governance in IoT: A comparative study. Journal of Data and Information Quality, 16(1), 1–18. https://doi.org/10.1145/3631234
Schaupp, S. (2021). Technopolitics from below: The internet of things and the politics of data. New Media & Society, 23(10), 3045–3063. https://doi.org/10.1177/1461444820943152
Steinbach, A. (2024). Digital sovereignty: A legal and political analysis. European Law Journal, 29(1), 15–32. https://doi.org/10.1111/eulj.12456
Tan, T., Li, X., & Wang, Y. (2023). Strengthening digital sovereignty: Strategies for emerging economies. Telecommunications Policy, 47(5), 102555. https://doi.org/10.1016/j.telpol.2023.102555
Tuli, S., Casale, G., & Jennings, N. R. (2023). Voice assistants and real-time responsiveness in IoT. IEEE Internet of Things Journal, 10(12), 10541–10555. https://doi.org/10.1109/jiot.2023.3241234
Tunde, O. (2025, February 10). The risks of processing personal data offshore: A Kenyan perspective. Business Daily. https://www.businessdailyafrica.com/bd/opinion-analysis/ideas-debate/risks-of-processing-personal-data-offshore-a-kenyan-perspective-4521342
UNCTAD. (2025). Data protection and privacy legislation worldwide. https://unctad.org/page/data-protection-and-privacy-legislation-worldwide
Van Rensburg, R. (2021). Barriers to IoT adoption in rural Africa: A study of connectivity and cost. African Journal of Science, Technology, Innovation and Development, 13(4), 451–462. https://doi.org/10.1080/20421338.2020.1816234
Venske, S. (2023). Data ownership and surveillance in the internet of things: A critical review. Information, Communication & Society, 26(8), 1567–1582. https://doi.org/10.1080/1369118x.2022.2145678
Weathersby, T. (2024, January 5). Industry 4.0: The future of manufacturing. Manufacturing Today. https://www.manufacturing-today.com/industry-4-0-the-future-of-manufacturing/
White, S., Joiner, J., & Patsioura, C. (2023). IoT and essential utility services: Kenya market case study. GSMA. https://www.gsma.com/solutions-and-impact/connectivity-for-good/mobile-for-development/wp-content/uploads/2023/04/IoT-and-Essential-Utility-Services-Kenya-market-case-study.pdf
Wu, T. (2013, April 12). Opinion | book review: ‘to save everything, click here’ by Evgeny Morozov - The Washington Post. https://www.washingtonpost.com/opinions/book-review-to-save-everything-click-here-by-evgeny-morozov/2013/04/12/0e82400a-9ac9-11e2-9a79-eb5280c81c63_story.html
Zaoui, C., Benabbou, F., & Ettaoufik, A. (2023). Edge-Fog-Cloud Data Analysis for eHealth-IoT. International Journal of Online and Biomedical Engineering (iJOE), 19(07), 184–199. https://doi.org/10.3991/ijoe.v19i07.38903
Zorrilla, M., & Yebenes, J. (2021). A reference framework for the implementation of data governance systems for industry 4.0. Computer Standards & Interfaces, 81, 103603. https://doi.org/10.1016/j.csi.2021.103603
