Purpose and Scope

This HRD's Forensic Guidebook provides a structured, legally grounded, and trauma-informed framework enabling HRDs, Social Justice Organisations, and their technical support networks to:

• Detect, document, and respond to digital security incidents
• Collect and preserve evidence in a manner admissible under Kenyan law
• Navigate mandatory reporting obligations under the Data Protection Act (2019) and the Computer Misuse and Cybercrimes Act (2018)

Build sustained organisational resilience through formal policies, playbooks, and collaborative ecosystems.

Survey Methodology

To establish a robust, evidence-based foundation for this guidebook, data were collected between February and March 2026 utilising a comprehensive mixed-methods approach. This multi-layered strategy captured both wide-ranging quantitative trends and nuanced qualitative insights to ensure a holistic understanding of the operational environment.

The primary research relied on a targeted online survey distributed to Human Rights Defenders (HRDs) and civil society organisations (CSOs) across Kenya, which gathered critical statistical data on digital habits and structural vulnerabilities. To complement these metrics, physical focus group discussions were organised across major regions in Kenya, fostering localised conversations regarding regional threats. Furthermore, key informant interviews were held with digital security experts and legal professionals, while valuable institutional knowledge was synthesised from the inputs and feedback of previous digital safety training and workshops by Tatua.