Contextual Background and Methodology

Contextual Background and Key Findings

The empirical evidence gathered through this research underpins a deeply concerning reality regarding the cybersecurity posture and digital safety of human rights defenders and their institutions in Kenya and across the wider region. The findings expose a profound asymmetry between the high-risk environments in which HRDs operate and the severely limited legal, institutional, and technical safeguards currently available to protect them.

Most notably, the assessment revealed that 51% of human rights defenders entirely lack access to professional legal counsel. In the absence of formal support networks, an overwhelming 82% of these defenders rely on high-risk, informal channels, such as WhatsApp, for incident reporting, which inadvertently exposes sensitive operational data to commercial surveillance and data breaches. This vulnerability is further compounded at the organisational level, where a mere 21% of Kenyan HRD institutions possess a formalised, written Incident Management Policy to guide their response to digital threats.

The security perimeter is further strained by device management practices, as 100% of HRDs surveyed heavily depend on mobile devices for their day-to-day operations under Bring Your Own Device (BYOD) arrangements. Despite this total reliance on personal hardware for sensitive human rights work, technical forensic capacity remains a critical, unaddressed gap across the entire community, leaving defenders highly exposed to sophisticated digital targeting.