By the Coursel.Online Business Desk
NAIROBI—In the high-octane theater of African telecommunications, Safaricom PLC has long operated in an atmosphere of near-invincibility. As East Africa’s most profitable corporate entity and the pioneer behind the globally transformative M-Pesa mobile money platform, the Nairobi-headquartered telco has historically dictated the terms of regional innovation.
Yet, a succession of recent legal shocks and operational controversies is casting a long, uncomfortable shadow over its boardroom. Safaricom currently finds itself navigating an overlapping set of crises that threaten not only its strategic autonomy but also the bedrock of its commercial empire: public trust. From a stalled multi-billion-dollar divestiture involving the Kenyan state and South Africa’s Vodacom, to a landmark High Court penalty over sweeping data privacy violations, the company is fighting on multiple fronts to defend its corporate integrity.
The $1.6 Billion Deal in Deep Freeze
The most systemic threat currently looming over Safaricom’s corporate governance is the chaotic unravelling of the government’s attempt to offload a substantial portion of its equity.
In a transaction designed to significantly alter the power dynamics within the telco, the Kenyan government agreed to sell a 15% stake in Safaricom to South Africa’s Vodacom Group Ltd. Valued at a staggering Ksh 204.3 billion (approximately US$1.6 billion), the deal was structured to elevate Vodacom’s total holding in Safaricom to a controlling 54.9%. The arrangement included an upfront payment of $310 million in exchange for the rights to future Safaricom dividends that would otherwise flow to the Kenyan Treasury.
However, this corporate maneuvering hit a formidable constitutional wall. In September 2026, a three-judge bench of the High Court—comprising Justices Francis Gikonyo, Roseline Aburili, and Tabitha Wanyama—declared the partial divestiture unconstitutional, null, and void. The court ruled that the government had treated the massive transfer of public wealth as an opaque, closed-door transaction, bypassing both parliamentary scrutiny and the mandatory constitutional threshold for public participation.
The government immediately sought to stay the ruling, arguing that nullifying the deal would trigger severe economic instability. But on October 14, 2026, the Court of Appeal delivered another blow to the Treasury. Appellate Justices Luka Kiprotich Kimaru, Johnson Okello, and Kathurima M’Inoti declined to suspend the High Court’s ruling outright, stating that the government had failed to meet the legal threshold for such a stay.
Instead, the Court of Appeal opted to fast-track the substantive appeal. As a result, the transaction exists in a state of suspended animation. Vodacom remains the registered shareholder, and the purchase funds are preserved under a court-mandated status quo, with further judicial directions scheduled for October 23, 2026.
This legal limbo has created a vacuum of uncertainty at the very top of Safaricom’s strategic hierarchy, leaving investors anxious about Vodacom’s ultimate influence over the company’s future direction. If the original judgment is upheld, Vodacom’s stake would plummet back to approximately 40%, stripping it of majority control.
The Privacy Breach and the Architecture of Surveillance
While Safaricom’s ownership structure remains tied up in appellate litigation, its operational practices have faced an equally damaging judicial reckoning. In May 2026, the High Court delivered a landmark ruling that pierced the telco’s aura of operational security.
The court ordered Safaricom to pay Ksh 900,000 in general damages to each of 11 petitioners. This penalty stemmed from a systemic, large-scale data breach that occurred between 2018 and 2019, wherein the highly sensitive personal data of millions of subscribers—including financial histories, betting wallet activities, and precise geolocation metrics—was unlawfully harvested and shared with third parties.
The revelations from the court documents were staggering. Evidence, including internal WhatsApp communications, suggested that Safaricom had granted its employees essentially unlimited access to violate the personal data of its subscriber base. The ruling framed the breach not as a mere technical glitch, but as a severe violation of constitutional rights.
In delivering the judgment, the court noted that placing the burden of proof entirely on individual subscribers to demonstrate the explicit extraction of their data after a systemic corporate failure would effectively shield massive data controllers from constitutional accountability.
This ruling represents a watershed moment in Kenyan digital jurisprudence. It has triggered a wide-ranging legal and public debate regarding Safaricom’s data protection architecture, the adequacy of its internal corporate safeguards, and its broader accountability as a virtual monopoly that processes the financial lives of millions of Kenyans daily.
M-Pesa’s Evolution: Innovation as a Shield
Faced with severe reputational headwinds, Safaricom has leaned heavily into its historical strength: relentless product innovation. The company is actively attempting to reshape the narrative by rolling out new features aimed at demonstrating responsiveness to both market demands and privacy concerns.
At the center of this strategy is M-Pesa, the crown jewel of its service portfolio. In early October 2026, Safaricom, in collaboration with Gulfcap Investment Bank, secured approval from the Capital Markets Authority to launch the Ziidi Shariah Money Market Fund. This product represents a highly strategic pivot, allowing M-Pesa users to invest their digital balances in a fully Shariah-compliant manner. By tapping into the growing demand for Islamic finance, Safaricom is simultaneously diversifying its financial service offerings and signaling its commitment to ethical, inclusive financial development.
Concurrently, the telco is quietly overhauling M-Pesa’s core merchant infrastructure. Reacting to the backlash from the data privacy ruling, Safaricom is rolling out enhanced privacy features and notification updates for its commercial users, specifically those operating Till numbers and the Pochi la Biashara (business wallet) service. These updates, which include proof-of-payment SMS features designed to reduce confirmation delays without exposing unnecessary customer data, are intended to reassure an increasingly skeptical merchant class that their commercial anonymity is being protected.
The Crisis of Public Trust
Yet, despite these technical innovations, Safaricom is confronting a profound, intangible liability: a severe corporate integrity and public trust deficit.
The telco’s historical model—relying on its indispensability to shield it from criticism—is fracturing. The public discourse surrounding Safaricom has grown increasingly hostile, driven by a perception that the company prioritizes aggressive monetization and stakeholder dividends over customer welfare and data security.
Prominent digital voices and civic watchdogs, such as the influential X (formerly Twitter) commentator @CyprianIsNyakundi, have relentlessly highlighted the disconnect between Safaricom’s polished corporate communications and its operational realities. These criticisms resonate deeply with a Kenyan public that feels trapped within the Safaricom ecosystem, frustrated by opaque data practices, aggressive debt-recovery tactics via its mobile lending platforms, and perceived institutional arrogance.
Restoring this eroded trust will require far more than launching new unit trusts or tweaking SMS notifications. Safaricom must fundamentally overhaul its approach to corporate transparency.
Navigating the Crossroads
The convergence of these crises—the Vodacom appellate battle and the High Court data privacy ruling—places Safaricom at the most critical juncture in its corporate history.
The resolution of the Ksh 204.3 billion stake sale will determine the ultimate locus of control over the company’s strategic direction. Meanwhile, the data privacy ruling has permanently altered the regulatory landscape, proving that even the most powerful corporate entities are no longer immune to judicial oversight regarding digital surveillance.
In a telecommunications sector that is increasingly defined by digital rights and capital maneuvering, Safaricom’s path forward is fraught with risk. The stakes have never been higher. To survive its current turbulence, the telco must execute a delicate balancing act: fiercely defending its commercial interests in the appellate courts while simultaneously embarking on a radical campaign of operational humility and accountability to regain the trust of the millions of Kenyans who fuel its empire.