Data Commissioner Immaculate Kassait.

The Data Protection Commissioner, Immaculate Kassait has raised alarm over the growing trend of Kenyans uploading their personal photos to artificial intelligence (AI) platforms for customised images, warning that the practice could expose sensitive biometric data to misuse.

According to Kassait AI presents economic opportunities, it also poses serious privacy risks, especially when users share their images without understanding how the data will be used.

“Artificial intelligence is both a concern and an opportunity because it is slowly becoming like electricity we cannot ignore it,” she said.

Her remarks come amid a surge in Kenyans sharing AI-generated portraits on social media, including enhanced profile pictures and simulated ageing images showing how users looked years ago or might look in the future.

Kassait warned that by uploading such photos, users may unknowingly be sharing their biometric data, which could be used to train AI systems.

Enjoying this article? Subscribe for unlimited access to premium sports coverage.
View Plans

“What you have just done is shared your biometrics. You have helped train AI. In future, somebody can construct your profile and tell many things about you,” she said.

She noted that many people are drawn to the attractive results generated by AI tools but fail to question the purpose of data collection, how long the information will be stored, or whether it could be used commercially.

An example of an AI generated photo of a proffessional accauntant.

The commissioner described the practice as part of what experts call “capitalist surveillance,” where companies collect and monetise user data, sometimes without users fully understanding the implications.

Despite the risks, Kassait said Kenya has legal safeguards under the Data Protection Act to protect citizens from misuse of their personal information. The law requires organisations collecting data to disclose why they are collecting it, how long they will retain it, and how users can delete it.

She emphasised that individuals also have the right to ask companies what data they hold about them

However, Kassait stressed that personal responsibility remains critical.

“It is like your house. If you don’t lock the door, your responsibility starts with you. We have guardrails, but the call for action begins with the individual,” she said.

She urged Kenyans to read terms and conditions carefully and always question how their personal data will be used before uploading photos or other sensitive information online.

Her warning comes as AI adoption accelerates globally, raising fresh debate on balancing innovation, privacy, and economic growth.