Police, KRA Gain Backdoor Access to Your Parcels — And Consumers Should Be Worried
Starting September 20, every parcel moving through Uber, Bolt, Glovo and Little will carry a digital paper trail accessible to the Communications Authority of Kenya, the Kenya Revenue Authority, and the police — on request, no warrant required.
The Communications Authority’s new 10-year courier licence, aimed at ride-hailing platforms diversifying into parcel delivery, compels these firms to record sender and recipient details, verify package contents, and hand that data over to regulators “upon request” whenever there’s suspicion of prohibited goods.
On its face, this is framed as an anti-smuggling measure — stopping drugs, weapons and stolen goods from riding shotgun on a boda boda. In practice, it hands three state agencies standing access to the movement of ordinary citizens’ goods, with no judicial oversight built into the “on request” trigger.
The consumer cost is buried in the fine print.
Digital delivery firms will pay a Sh5,000 application fee, a Sh100,000 initial licence fee, and an annual operating fee of Sh100,000 or 0.4% of gross turnover — whichever is higher — plus a universal service levy of 0.5% of annual turnover.
Those costs don’t stay with Uber or Bolt. They flow downstream to delivery charges, and ultimately to the price of everything moved through these platforms — food, medicine, documents, small business stock.
There is a genuine consumer-protection upside buried in here too: firms must now compensate customers for lost, delayed or damaged goods within 90 days of a complaint, and customers gain a formal right to verify a rider’s identity and track parcels in real time.
That’s overdue accountability in a sector that has operated largely on trust and app ratings. But compensation carves out an exception the moment a parcel’s contents weren’t declared — which, given how casually most people book a boda for a random item, could let firms dodge liability on a technicality.
The bigger question is one of proportionality and precedent. Postal Corporation of Kenya, the state-owned incumbent losing ground to these digital entrants, operates under a different — arguably lighter — surveillance regime for the same activity: moving parcels.
Layering compliance costs and data-access mandates onto private couriers while a competing state entity is spared the same scrutiny raises fairness questions Uber is already testing by separately seeking a national courier operator licence,
There’s also the KRA angle.
Framing this as a tax-compliance tool — “digital tools… emerging as weapons in the fight against tax cheats” — signals that ordinary parcel data will increasingly double as a revenue-collection dragnet, blurring the line between regulating a courier sector and surveilling informal trade.
