NTSA addresses privacy concerns amid criticism over motor vehicle searches

Transport Principal Secretary Mohammed Daghar has addressed data privacy concerns and provided updates on key infrastructure projects during a session with the National Assembly Committee on Transport and Infrastructure on Tuesday.

Daghar responded to recent worries about data security on platforms offering National Transport and Safety Authority (NTSA) services. He explained that NTSA services are managed through eCitizen, a platform operated by the Ministry of Interior and National Administration.

“ECitizen was gazetted as a Critical Information Infrastructure (CII), which means it is subject to enhanced protection,” Mohammed noted.

The Principal Secretary further clarified that individuals facilitate access to NTSA services for legal entities like companies and organisations. This measure aids in the secure handling of personal data.

Earlier this year, NTSA faced criticism over data privacy, particularly concerning motor vehicle ownership searches. Mohammed reassured the public that the authority adheres to the Data Protection Act, highlighting the disclosure of only essential details like vehicle specifications and owner names.

“The motor vehicle copy of records does not reveal the email address, ID number, or phone number of registered owners,” he confirmed.

Data privacy questioned

In April, a post on the social media platform X questioned the NTSA's data privacy measures, alleging that searching a vehicle’s license plate could reveal sensitive personal details.

“NTSA doesn’t understand data privacy. You mean to tell me you can get your name, email, KRA pin, phone number, and ID number from searching for a plate number?” the post stated.

In response, NTSA issued a statement on April 26 addressing these concerns. The authority confirmed that the public motor vehicle record includes details about the registered owner(s), such as their name and KRA PIN, along with vehicle-specific information.

However, the NTSA emphasised that the provided records do not include sensitive personal data such as email addresses, ID numbers, and phone numbers.

“Note: The motor vehicle copy of records does not reveal the email address, ID number, or phone number of the registered owner(s),” NTSA stated.

The record also features vehicle details like the chassis number, model, engine number, fuel type, and registration date. NTSA assured the public of its compliance with the Data Protection Act.

“The Authority complies with all requirements of the Data Protection Act,” NTSA affirmed. The motor vehicle copy of records is classified as a public document under the Access to Information Act, with access restricted to the aforementioned details.

The Kenyan Data Protection Act of 2019 governs the collection and processing of personal information, according to the NTSA's privacy page, which elaborates on its commitment to data protection.

To access vehicle details, users must log into the E-Citizen platform, select the NTSA service portal, and follow the steps to complete the transaction for Sh550.