We all know how painful getting a Police Clearance Certificate (Certificate of Good Conduct) is in Kenya. You pay your KES 1,050 on eCitizen, line up at a Huduma Centre, get your fingers smeared with ink, and then wait weeks, praying your form doesn’t get lost in the bureaucratic abyss.

Starting Monday, July 20, the Directorate of Criminal Investigations (DCI) promises to change all that. They are rolling out the Multi-Biometric Identification System (MBIS)-ABIS version 5. The promise? “No more long waits. Better technology. Better experience.”

But let’s be honest: the relationship between Kenyans and our security apparatus is deeply fractured. When we hear new technology from Kiambu Road, our surveillance paranoia understandably spikes. So, what is this new system, and what are we actually giving up in exchange for convenience?

What is MBIS-ABIS version 5?

Until now, the DCI used an Automated Fingerprint Identification System (AFIS). It only cared about your friction ridges. If you’ve ever applied for a certificate, you know the drill: ten fingers, flat and rolled.

“MBIS-ABIS” changes the game. The “M” stands for Multi-Biometric, and “ABIS” is an Automated Biometric Identification System. This version doesn’t just scan your fingertips; it is built to fuse multiple physiological traits into a single digital profile. Under this new system, the police will likely require more than just your hands. We are talking high-definition facial recognition, palm prints, and potentially even iris scans. We’ve already seen the IEBC introduce iris scanning during voter registration, so it wouldn’t be anything new if the DCI adopts it.

While the DCI hasn’t confirmed if you’ll be forced to stare into an iris scanner at Huduma Centre next week, make no mistake: for this new MBIS engine to achieve the optimum results it promises, it is engineered to cross-reference more than just your fingers. The architecture is designed to fuse your fingerprints, facial recognition data, and iris scans into a single, inescapable digital profile.

When you apply, the system converts these physical traits into an encrypted mathematical hash. It then runs a high-speed 1:N (One-to-Many) search against the DCI’s national criminal database. Instead of human eyes manually sorting through records, the new system’s algorithmic engine cross-references your multi-biometric profile in seconds.

While the state rarely names its private tech partners, we don’t have to look far to guess who is likely supplying this enterprise-grade software. Kenya’s biometric history is deeply tied to French multinational IDEMIA (formerly Safran Morpho), the group behind our controversial Huduma Namba system and IEBC voter kits. However, Kenyan MPs’ vote to block the company from doing business for at least 10 years could stand in the way. But the recent visit by President Macron could have some influence in the final decision, if any.

Other likely culprits include German biometric giant Dermalog or id3 Technologies, another French-linked company, who specialize in high-speed algorithmic matching engines. These foreign corporations build the core engines, while the DCI’s National Forensic Lab manages the physical servers. For obvious reasons, we cannot rule out the Chinese from this deal.

Why you should keep your guard up

Faster certificates are great, but this tech upgrade introduces deep privacy risks we cannot ignore:

The surveillance hook: Capturing your face (and/or iris) alongside your prints creates a highly potent identification profile.
The biometric honeypot: Unlike a password, you cannot reset your face or fingerprints if this database is hacked. Centralizing millions of biometric hashes on DCI servers creates a prime target for cybercriminals.
Function creep: What starts as a “Good Conduct” check could easily be linked to other state databases like Maisha Namba, KRA, or even the recent NTSA surveillance systems.

The DCI is offering convenience. But in exchange, they are asking for total biometric intimacy. As the new technology rolls out next week, we must demand transparency on where our data is stored, who has the keys, and exactly how safe our digital identities really are.