Cyber cafés in Kenya will be required to register customers and keep basic user logs, including terminal IDs and session start and end times, for at least three years under new rules issued by the Communications Authority of Kenya. The Communications Authority added that public cyber cafés can also expose users when computers or networks lack proper security. The CA rules also require cyber cafés to display the charges they apply and issue receipts when fees apply. Under the rules, cyber cafés must not resell bandwidth or wholesale internet capacity without the Authority’s appropriate approval. The CA had earlier proposed mandatory CCTV surveillance for all cyber cafés, but it removed that requirement from the latest licensing conditions.