f. Arbitrary or Unlawful Interference with Privacy, Family, Home, or Correspondence

The constitution and law prohibit such actions, except “to promote public benefit,” but authorities sometimes infringed on citizens’ privacy rights. The law permits police to enter a home without a search warrant if the time required to obtain a warrant would prejudice an investigation. Although security officers generally obtained search warrants, they occasionally conducted searches without warrants in the course of large-scale security sweeps to apprehend suspected criminals or to seize property believed stolen. For example, in 2017, according to multiple press and NGO reports, police conducted house-to-house operations in Kisumu County in connection with protests in the wake of the August 2017 election. In one of the homes, police allegedly beat a husband, wife, and their six-month-old daughter (known as “Baby Pendo”). The Kenya National Commission on Human Rights confirmed the infant died of her injuries. In February 2019 the magistrate found five senior police officers culpable in the death of the infant and forwarded the inquest results to the ODPP to press charges. She also ordered the DPP to investigate 31 other police officers who may have been involved in the infant’s death. IPOA, in coordination with ODPP, launched a new investigation on the case during the year to collect additional evidence.

Human rights organizations reported police officers raided homes in informal settlements in Nairobi and communities in the coast region in search of suspected terrorists and weapons. The organizations documented numerous cases in which plainclothes police officers searched residences without a warrant, and household goods were confiscated when residents were unable to provide receipts of purchase on demand. Rights groups reported police in numerous locations broke into homes and businesses and extorted money from residents while enforcing measures to control the pandemic.

The government continued efforts to roll out the National Integrated Identity Management System through the Statute Law (Miscellaneous Amendments) Act No. 18 of 2018. This act requires citizens to register their personal details, including biometrics, in order to receive a unique identifier number required to access public services. In January the High Court ruled the government could only continue implementation of the program after it put in place “an appropriate and comprehensive regulatory framework,” including on data protection and security. The government issued new data protection rules and regulations in October, but some civil society groups alleged the rules did not fully satisfy the court conditions. The Nubian Rights Council and other human rights organizations expressed concerns the program could exclude minority groups from accessing government services. President Kenyatta presented the first 12 identifier cards, widely known as Huduma Namba cards, in a public ceremony in October. In November the government stated nationwide issuance of cards would begin on December 1 and existing national identity cards would be phased out by the end of 2021. In November the president appointed the country’s first data commissioner to oversee the implementation of the data protection law enacted in late 2019 and the accompanying regulations.

f. Arbitrary or Unlawful Interference with Privacy, Family, Home, or Correspondence

The law forbids officials from entering a private residence except in cases prescribed by federal law or when authorized by a judicial decision. The law also prohibits the collection, storage, utilization, and dissemination of information about a person’s private life without his or her consent. While the law previously prohibited government monitoring of correspondence, telephone conversations, and other means of communication without a warrant, those legal protections were significantly weakened by laws passed since 2016 granting authorities sweeping powers and requiring telecommunications providers to store all electronic and telecommunication data (see section 2.a., Internet Freedom). Politicians from minority parties, NGOs, human rights activists, and journalists alleged that authorities routinely employed surveillance and other measures to spy on and intimidate citizens.

Law enforcement agencies required telecommunications providers to grant the Ministry of Internal Affairs and the FSB continuous remote access to client databases, including telephone and electronic communications, enabling them to track private communications and monitor internet activity without the provider’s knowledge. The law permits authorities with a warrant to monitor telephone calls in real time, but this safeguard was largely pro forma. The Ministry of Information and Communication requires telecommunications service providers to allow the FSB to tap telephones and monitor the internet. The Ministry of Information and Communication maintained that authorities would not access information without a court order, although the FSB is not required to show it upon request.

In January a Novaya Gazeta investigation revealed that personnel of the Internal Affairs Ministry’s antiextremism division had installed a secret video camera in 2018 in the bedroom of Anastasiya Shevchenko, an Open Russia activist facing criminal charges for participating in an “undesirable” organization. The camera recorded her for five months without her knowledge.

The law requires explicit consent for governmental and private collection of biometric data via facial recognition technology. Laws on public security and crime prevention, however, provide for exceptions to this consent requirement. Human rights activists claimed the law lacks appropriate safeguards to prevent the misuse of these data, especially without any judicial or public oversight over surveillance methods and technologies.

As of September almost 200,000 government surveillance cameras have been installed in Moscow and equipped with Russian-developed automated facial recognition software as part of its Safe City program. The system was initially installed in key public places, such as metro stations and apartment entrances, in order to scan crowds against a database of wanted individuals. The first major test of this system occurred in the spring, as the Moscow city government began enforcing mandatory COVID-19 self-isolation requirements using facial recognition. The personal data of residents and international visitors placed under quarantine in Moscow were reportedly uploaded into the system in order to monitor the public for self-isolation violations. The Moscow city government announced that additional cameras would be installed throughout the city, including in one-quarter of the city’s 6,000 metro cars, by the end of the year.

In July, two activists, Alyona Popova and Vladimir Milov, filed a complaint against the country’s facial recognition program with the ECHR. Popova and Milov claimed closed-circuit television cameras were used during a large September 2019 protest in Moscow to conduct mass surveillance of the participants. They claimed that the government’s collection of protesters’ unique biometric data through the use of facial recognition technology violated the right to privacy and freedom of assembly provided for in the European Convention on Human Rights. Popova and Milov also argued the use of the technology at an opposition rally amounted to discrimination based on political views. The pair had previously filed a complaint in a local Moscow court, which was dismissed in March when the court ruled the government’s use of the technology legal.

On May 21, the State Duma adopted a law to create a unified federal register containing information on all the country’s residents, including their names, dates and places of birth, and marital status. According to press reports, intelligence and security services would have access to the database in their investigations. There were reports that authorities threatened to remove children from the custody of parents engaged in political activism or some forms of religious worship, or parents who were LGBTI persons. For example, on October 2, Russian media reported that authorities were threatening to arrest and take away the children of gay men who have fathered their children through surrogacy, accusing them of child trafficking. Several families reportedly left the country due to fear of arrest. As of December no formal arrest related to this threat had been reported.

The law requires relatives of terrorists to pay the cost of damages caused by an attack, which human rights advocates criticized as collective punishment. Chechen Republic authorities reportedly routinely imposed collective punishment on the relatives of alleged terrorists, including by expelling them from the republic.