Data Protection Act, 2019
01Consent, purpose limitation & data minimisation for anyone collecting personal data.
Why it matters to you
Your volunteer and voter database must be collected and stored lawfully.
Youth Agenda · NextVote ProjectFacilitator training
DigitalIntegrity &Influence
A practical programme for young people preparing to contest elective office in Kenya: to run campaigns that are credible, ethical, secure and winnable.
28 – 30 September 2026 Nairobi, Kenya
or press Space
Kenya votes in
— days
Tuesday, 10 August 2027
3 days
11 modules
02Partners
Two youth movements, one mission
Technology gives young people more access to information, to each other and to power than ever before. The same tools can also be used to manipulate them. This manual equips youth aspirants to use them with integrity.
Youth Agenda
Making the youth factor count · since 1996
A national NGO championing youth inclusion in Kenyan governance, leadership and socio-economic development. YAA protects and promotes youth access to social, economic and political opportunities, and works to increase the number of young people in leadership and decision-making.
Venstres Ungdom
Partner · Denmark
Venstres Ungdom (VU), the youth organisation of Denmark’s liberal party Venstre, is Youth Agenda’s partner on this manual. Together the two youth movements back young people’s participation in democratic politics, from Nairobi to Copenhagen.
Designed for a facilitated 2–3 day workshop, and as a self-study reference for aspirants and their teams.
Who this toolkit is for
1
First-time and returning youth aspirants: MCA, MP, Senate, Woman Rep, Governor
2
Youth wings of political parties and civic education organisations
3
Campaign managers, agents and volunteers supporting youth candidates
4
Facilitators, trainers and mentors delivering civic programmes
Compiled by Joshua Changwony & Duncan Maigua · July 2026
Making the youth factor count
The people this work is for
03Programme
Three days, eleven modules
Part One builds electoral and campaign foundations. Part Two turns to digital integrity: security, safety, tools, content, data and truth.
Mon 28 Sep 2026
Electoral fundamentals & campaign foundations
- 08:30
Registration, welcome & pre-training assessment
30 min
30 min - 09:00
Electoral Cycle, Laws and Regulations of Elections in Kenya
M140 min
M140 min - 09:40
Vision and Mission Formulation for Youth Aspirants
M290 min
M290 min - 11:10
Tea break
15 min
15 min - 11:25
Campaign Strategy for Youth Aspirants
M3120 min
M3120 min - 13:25
Lunch
50 min
50 min - 14:15
Ethical, Secure and Policy-Driven Campaigning
M490 min
M490 min - 15:45
Tea break
15 min
15 min - 16:00
Online Electoral Gender-Based Violence and Political Harassment
M590 min
M590 min
04Electoral CycleModule 1
An election is a cycle, not a day
Know where 2027 preparations sit in the cycle, the laws and institutions that govern it, and the deadlines for your seat.
01
Pre-election
- Legal & institutional reform
- Boundary & voter register review
- Civic and voter education
- Party primaries & nominations
02
Election
- Campaigning
- Polling
- Counting & tallying
- Declaration of results
03
Post-election
- Disputes & petitions
- Transition of office
- Oversight of the term
- Feeds the next cycle
Key dates to track
9 Feb 2027
Deadline for public officers intending to contest to resign (six months before polling).
May – 7 Aug 2027
Formal campaign period on the IEBC roadmap, ending three days before polling.
10 Aug 2027
General Election: the second Tuesday of August, every five years.
Electoral law is under active review ahead of 2027. Verify requirements, forms and deadlines with the IEBC (iebc.or.ke), the Registrar of Political Parties and the Attorney-General before relying on them.
Every vote, every voice
Key institutions
IEBC
Independent Electoral and Boundaries Commission
Runs elections, registers voters and candidates, enforces the code of conduct.
ORPP
Registrar of Political Parties
Registers parties, keeps membership lists, oversees compliance.
PPDT
Political Parties Disputes Tribunal
Resolves nomination and internal party disputes.
Courts
Judiciary / Election Courts
Hear petitions challenging results within strict timelines.
NCIC
National Cohesion and Integration Commission
Monitors hate speech and cohesion risks, including online.
05Digital IntegrityModule 7
Four tests for every post
Digital integrity is the practice of engaging online in ways that are honest, lawful, secure, and respectful of other people's rights, even when a shortcut might appear to offer a short-term campaign advantage.
Truthful
What you publish about yourself, your record and opponents is accurate and can be substantiated.
Lawful
Complies with the Data Protection Act, the Elections Act & Code of Conduct, and the Computer Misuse and Cybercrimes Act.
Secure
Reasonable steps to protect your own accounts, devices and supporters' data from compromise.
Respectful
No harassment, gendered attacks or manipulated content against opponents, and you know how to protect your team.
Shared vocabulary
Digital Rights
Privacy, expression and access to information, as they apply online.
Digital Literacy
The ability to use, evaluate and create digital content safely and critically.
Algorithmic Amplification
Platforms boosting sensational content because it drives engagement, regardless of accuracy.
Micro-targeting
Using data profiles to deliver different, often incompatible, messages to narrow voter segments.
Gendered Disinformation
Disinformation that exploits a candidate's gender to discredit women in politics.
Data Minimisation
Collecting only the personal data a campaign genuinely needs, and no more.
06The LawModule 7.3
Kenya’s digital rulebook
You don't need to be a lawyer. You do need to name these four instruments and roughly what each one restricts or requires.
Elections Act & Code of Conduct
02Conduct obligations on candidates and parties, including digital campaigning.
Why it matters to you
Coordinated harassment or disinformation linked to a candidate can trigger a complaint.
Computer Misuse & Cybercrimes Act
032018, amended 2025
Criminalises unauthorised access, false publications, cyber harassment, impersonation and phishing.
Why it matters to you
Protects you if targeted; binds you if your campaign is the source.
The 2025 cyber-harassment clause (s.27(1)) is under an active court challenge.
Draft National AI Strategy 2025–2030
04+ IEBC AI guidance
Proposes mandatory disclosure of AI-generated political content.
Why it matters to you
If your campaign uses AI for content, translation or outreach, disclose it.
Democratic resilience test
Before using a digital tactic, ask: does it expand participation, protect rights and increase trust? If it silences opponents, exploits private data, spreads fear or hides who sponsored a message, it fails.
07Campaign StrategyModule 3 · 10
From scattered posts to a coordinated campaign
A digital campaign strategy is a structured plan for using digital platforms to reach specific campaign goals, driven by objectives rather than trends or ad hoc decisions.
Strategy = who · what · where · how
Who
the campaign seeks to reach
What
it wants to communicate
Where
communication will occur
How
messages are delivered and measured
The seven components
Select a component to explore it.
Component 1 of 7
Define clear campaign objectives
SMART: specific, measurable, achievable, relevant, time-bound.
Increase candidate visibility and recognitionRaise awareness of a policy issueRecruit volunteersMobilise supporters for eventsEncourage voter registration and turnoutCounter misinformationBuild public trust
Without clear objectives it is hard to choose messaging, platforms or measures of success.
08Message & PlatformsModule 10.5
Simplify, don’t oversimplify
Effective messages are clear, consistent, accurate, authentic and solution-oriented. Use a simple formula to turn policy into content voters remember.
1Problem
“Youth unemployment remains high.”
2Solution
“I will expand county innovation hubs and support local entrepreneurs.”
3Benefit
“Together, we can create opportunities for young people.”
4Call to action
“Join the movement for inclusive economic growth.”
Also taught as Issue → Impact → Solution → Action. People remember stories more than statistics.
Go where your audience already is
Prioritise, rather than maintaining an equally strong presence everywhere.
TikTok
Short-form video for younger audiences
30–60s video · one issue, one solution
Visual storytelling and lifestyle content
Carousel or infographic · minimal text
Community engagement and broad reach
Short post with image or video
Grassroots mobilisation and coordination
Graphic + short message · one screen
X
Real-time updates and policy debate
Thread · bite-sized points
YouTube
Speeches, interviews, documentaries
Long-form video
Professional networking and policy
Policy explainers
Short video checklist
- Under 60 seconds
- Strong hook up front
- One issue at a time
- Captions for accessibility
- Clear call to action
Educate · engage · inspire · mobilise
Informational
- Policy explanations
- Community issues
- Civic education
- Fact-checks
Engagement
- Polls and questions
- Live sessions
- Community stories
Campaign
- Candidate activities
- Rally announcements
- Volunteer recruitment
- Event reminders
Human interest
- Personal stories
- Behind-the-scenes
- Community visits
- Testimonials
A content calendar keeps communication consistent and prevents repetitive or reactive posting.
09Metrics & AIModule 10.3 · 10.4
Followers don’t vote. Volunteers turn out.
A common trap is optimising for likes rather than the outcomes that actually win votes.
Vanity metrics
Easy to inflate, weakly linked to turnout.
- Follower counts
- Likes
- Impressions
- Views without engagement
Genuine mobilisation signals
Harder to fake, far more predictive of election day.
- Volunteer sign-ups
- Event RSVPs honoured
- Verified turnout commitments
- Small-donor contributions
A Nairobi ward example
0
WhatsApp group members. Means little on its own.
0
Confirmed door-to-door volunteers turning out on polling day. Means everything.
AI in the 2027 campaign
IEBC leadership has publicly acknowledged AI's growing significance for 2027 and joined regional dialogue on AI, digital and social media in elections.
A July 2026 UN scientific panel report warns AI-generated deepfakes and adaptive disinformation could outpace fact-checkers.
Kenya's draft National AI Strategy (2025–2030) signals disclosure will likely become an expectation before the 2027 vote.
Practical rule
Disclose AI-assisted content. Never use AI-generated audio or video of an opponent, or yourself, in a way that could mislead.
10Digital SecurityModule 8
Security is a habit, not a setup
Youth aspirants are attractive, under-resourced targets: high-visibility accounts, shared devices, and rarely any IT support.
Highest impact, lowest cost
MFA + a password manager
Strong passwords + a manager
One compromised password should never unlock every account. Free tools like Bitwarden work for zero-budget campaigns.
MFA on every critical account
Email, social media and cloud storage at minimum. The single highest-value free security step.
Regular software updates
Updates patch known vulnerabilities; an out-of-date phone or laptop is an open door.
Encrypted communication
End-to-end encryption for sensitive discussions; avoid strategy docs over unencrypted SMS or email.
Device discipline
Screen locks on every device touching campaign accounts, and a clear off-boarding policy for volunteers.
Protect campaign data
Access-controlled, backed-up contact lists. Collect only what you'll use.
Spot it. Respond fast.
Most attacks exploit a moment of urgency or trust. Slow down and verify independently.
Warning signs
Urgent requests for credentials or payment; suspicious links impersonating a platform, bank or colleague.
Immediate response
Do not click. Verify through a separate, known channel. Report it on the platform.
11Online GBVModule 5 · 9
Online violence is real violence
Technology-facilitated gender-based violence targets a person because of their gender. It causes real psychological, reputational and financial harm, and often precedes offline threats.
This is the most sensitive session. Confidentiality ground rules apply, and anyone may step out at any time.
2022 Kenyan elections
Facebook accounts of candidates targeted with online violence
Women candidates55.7%
Men candidates35.4%
Source: Byte Bullies / Pollicy research, cited in the YAA toolkit (Module 9.2).
Recognised forms
DoxxingTrolling & pile-onsCyberstalkingNon-consensual imagesDeepfakesBlackmailDefamationIdentity theftSexual objectification
Most of it aims to silence women in politics and push them out of public life. Most women who experience digital abuse in Kenya do not report it, held back by victim-blaming, distrust and slow legal processes.
If it happens: five steps
1
Document
Screenshot the content, handle, URL, date and time before it can be deleted.
2
Don't engage
Engaging publicly often increases algorithmic amplification of the attack.
3
Report
Use the platform's tools, and the DCI cybercrime unit where content is threatening or criminal.
4
Seek support
A trusted peer, a women-in-politics network or a counsellor, alongside any reporting.
5
Be an ally
Believe them, help them document, and don't pressure them on whether to report.
Where to report
The legal picture is real but incomplete. Survivors often need to combine criminal, civil, platform and psychosocial routes at once.
Platform
Report and block any harassing post or account, after saving evidence.
DCI Cybercrime Unit
Cybercrime, impersonation, account compromise, phishing, threats, blackmail.
NCIC
Hate speech, ethnic contempt, incitement, dangerous political language.
NGEC
Gender-based discrimination or harassment linked to candidacy.
IEBC
Harassment by another candidate or agent that breaches the code of conduct.
Lawyer / legal aid
Formal complaints, protection orders or petitions.
12Mis · Dis · MalModule 11
Same lie, different intent
From 2017's false voting claims to TikTok in 2022 and the 2024 Gen Z protests, Kenya's information space is exposed. AI makes persuasive, targeted content easier to produce at scale.
No intent to harm
Misinformation
False or misleading, shared by mistake. A genuine error, not an attack.
Deliberate
Disinformation
False information created and spread on purpose to deceive or manipulate.
Genuine, weaponised
Malinformation
Real information shared with false context, or private information exposed to cause harm.
Six content typesMisleadingImpostorFabricatedManipulatedFalse connectionFalse context
Identify → Verify → Respond
1 · Identify
- Check the source’s track record, domain and “About” page
- Cross-check against multiple reputable outlets
- Examine the author’s credentials and possible bias
- Look for data, official reports, named experts
2 · Verify
Text & claims
PesaCheck · Africa Check · Snopes
Has it already been fact-checked? Cross-reference IEBC and major outlets.
Images
Google Reverse Image · TinEye · FotoForensics
Has the image appeared before, in a different context or date?
Video
InVID · Amnesty YouTube DataViewer
Metadata, first appearance date, signs of splicing or synthetic generation.
3 · Respond
Report & flag
Use platform tools; fact-checkers often review flagged content.
Correct gently
Lead with accurate information, avoid confrontation, share as widely as the claim spread.
Educate
Build supporters’ own verification habits, not just win one exchange.
Digital crisis protocol
A hacked account, a viral deepfake, a leaked database: have the plan before the crisis starts.
1
Pause and classify
2
Secure evidence
3
Protect people first
4
Verify before responding
5
Assign one spokesperson
6
Issue a short factual update
7
Escalate through the right channel
8
Review after 24 hours
13Data EthicsModule 10.6
Personal data is a public trust
Campaign convenience does not justify collecting excessive information. Misuse undermines trust, violates privacy and exposes you to legal risk.
01
Lawfulness
Collect personal information only through legitimate and transparent means.
02
Consent
People understand what is collected and how it will be used.
03
Purpose limitation
Data collected for one purpose isn't automatically used for another.
04
Data minimisation
Collect only what campaign activities genuinely need.
05
Security
Protect it from theft, loss, unauthorised sharing or misuse.
Before you collect or analyse data
Can you answer yes to all five?
If the answer to any question is “no”, reconsider your approach.
✓ Youth-focused civic messages · county updates · language-specific info
✕ Contradictory messages to different groups · data without consent
14ScenariosActivity · Values check
Proceed, adapt or refuse?
Score each scenario against the four tests. The goal is discussion, not a single correct answer.
Scenario 1
The Anonymous Insider
A trusted volunteer has screenshots, reportedly from inside your opponent's campaign, that appear to show plans to spread misleading information about your candidate. The source must stay anonymous. Nothing independently confirms they're genuine, but if authentic, voters arguably deserve to know. Your comms team wants to publish immediately with a statement condemning the opponent.
The big questions
- TruthfulIs the information truthful enough to share?
- LawfulIs using leaked internal information lawful?
- SecureCould publishing the source material create security risks?
- RespectfulIs it respectful to accuse the opponent before verification?
Your score · 1 to 5
Average
3.00
Adapt
Significant concerns in one or more dimensions. Modify the approach before proceeding.
4.0–5.0 Proceed · 2.5–3.9 Adapt · 1.0–2.4 Refuse
15Framework
Putting it all together
A practical loop for every digital campaign, from objective to continuous improvement.
1
Set the campaign objective
2
Identify and understand the audience
3
Develop a clear, consistent message
4
Select the most appropriate platforms
5
Produce engaging, relevant content
6
Monitor performance and feedback
7
Review, adapt and improve continuously
All activity remainsTruthfulLawfulSecureRespectful
YAA NextVote 2027
Your vote. Your voice. Your integrity.
Thank you for taking part. Please complete the post-training assessment before you leave.