Kenya’s 2017 presidential election annulment: when results transmission fails the verifiability test

Kenya’s 2017 presidential election annulment was a September 1, 2017 decision of the Supreme Court of Kenya, by a four to two majority, setting aside the August 8, 2017 presidential result because the Independent Electoral and Boundaries Commission (IEBC) had not conducted the election in line with the constitution, which requires that “whatever voting method is used, the system is simple, accurate, verifiable, secure, accountable and transparent”.⁠^1,2 According to the Carter Center, which observed the proceedings, the court found no evidence supporting claims of fraud or hacking and no malfeasance by IEBC staff, but it faulted the electronic results transmission, the tally forms, and the IEBC’s refusal to give court-ordered access to its servers; the October 26 rerun, boycotted by the main opposition, returned the incumbent with 98.27 percent of the vote.⁠¹

In plain words

Kenya used tablets at every polling station to check voters’ fingerprints and to send results to the national tally center. Polling station officials also filled out paper results forms, which were supposed to be scanned and sent along with the numbers.

On election night, numbers flowed in fast, but many scanned forms did not. The commission declared the winner after three days using district-level summary forms, before it had all the polling station forms. The losing candidate went to court, claiming fraud and hacking.

The Supreme Court did not find proof of fraud or hacking. But it found that the commission could not show its work: forms were missing security features, the electronic and paper records did not line up, and the commission did not open its computer servers when the court ordered it to. Kenya’s constitution requires elections to be verifiable, and the court said this one was not. It ordered a new election. The opposition boycotted it, and the president won again.

Defined terms

• IEBC. Kenya’s Independent Electoral and Boundaries Commission.
• KIEMS (Kenya Integrated Election Management System). Tablets used for biometric voter identification and electronic transmission of results.⁠¹
• Form 34A. The polling station results form for the presidential race; by law, scanned copies were to accompany electronic results.⁠¹
• Form 34B. The constituency level tally form compiled from 34As.⁠¹
• Form 34C. The final national tally form.⁠¹
• Parallel vote tabulation (PVT). An independent estimate of results by citizen observers from a random sample of polling stations.
• Verifiable. One of the qualities Article 86 of Kenya’s constitution requires of “whatever voting method is used”;⁠² in this case, the standard that results can be checked by those with a stake in them, including through access to records and systems.

What happened

Kenya’s 2017 cycle began with a larger voter register: two registration drives brought it to 19.6 million, a 36 percent increase over 2013.⁠¹ The law required the IEBC to procure an integrated electronic system for voter identification and results transmission and to test it at least 60 days before the election; legal challenges delayed procurement, kits arrived from April 14 to early June, and a countrywide simulation was held on August 2, less than a week before the election, with results displayed only from a limited number of counties.⁠¹

On August 8, 2017, the Carter Center found voting and counting “generally well-administered,” but problems in electronic transmission and county tallying.⁠¹ By the afternoon of August 9, provisional results showed President Uhuru Kenyatta with 54 percent and opposition candidate Raila Odinga with about 45 percent, a margin of some 1.4 million votes.⁠¹ The opposition National Super Alliance (NASA) claimed massive fraud and hacking.⁠¹ The IEBC declared results on August 11, three days after the vote, based on 34B forms and before receiving all 34As, rather than using the seven days the law allowed.⁠¹ A citizen observer group, ELOG, released a parallel vote tabulation from a random sample collected by about 1,700 observers whose estimates “were consistent with the IEBC’s official results”.⁠¹

Odinga and NASA filed a petition. Kenya’s constitution allows a petition within seven days of the declaration, requires the Supreme Court to decide within fourteen days of filing, and requires a fresh election within sixty days if the result is invalidated.⁠² On September 1, the Supreme Court annulled the presidential result and ordered fresh polls within 60 days; Chief Justice David Maraga, Deputy Chief Justice Philomena Mwilu, and Justices Smokin Wanjala and Isaac Lenaola formed the majority, and Justices Jackton Ojwang’ and Njoki Ndung’u dissented.⁠¹ Detailed reasons followed on September 20.⁠¹

Before the rerun, the IEBC standardized forms 34A and 34B, reconfigured KIEMS to transmit scanned images with numerical results, and gave observers and parties read-only access to servers, databases, and logs.⁠¹ Odinga withdrew, citing a lack of reform, and called for a boycott; a scheduled Supreme Court hearing on October 25 did not take place for lack of a quorum.⁠¹ Voting was postponed in 25 constituencies for security reasons.⁠¹ The IEBC announced Kenyatta’s re-election with 7,483,895 votes; turnout was 42.36 percent in constituencies that voted and 38.84 percent of registered voters nationwide.⁠¹ On November 20, 2017, the Supreme Court unanimously dismissed petitions challenging the rerun.⁠¹

How it worked

Kenya’s 2017 results process had two parallel tracks. On the electronic track, KIEMS tablets identified voters biometrically (with a paper-based complementary mechanism for voters not recognized) and, after counting, transmitted numerical results to the national tally center.⁠¹ On the paper track, presiding officers completed form 34A, signed by party agents, which went physically to the constituency, where returning officers compiled form 34B; 34Bs fed the national 34C.⁠¹ The law required that the scanned 34A accompany the electronic numbers and that the presidential results forms be published on a public portal.⁠¹

In August, the tracks came apart. Numbers were transmitted without their scanned forms; of 40,883 results forms, only about 30,000 scanned 34As were published on August 9, and the rest were uploaded only after the August 25 deadline for filing petitions; 34Bs were posted two days before that deadline.⁠¹ The Carter Center notes that unofficial electronic results broadcast on television were not clearly labeled as provisional.⁠¹ Turnout figures also conflicted, because voters identified through the paper complementary mechanism were missing from initial KIEMS-based counts.⁠¹

The design was meant to let anyone match a published scan of each polling station form against the transmitted number and the constituency tally. When scans were late, missing, or of questionable authenticity, that cross-check was impossible within the time allowed to challenge the result.

Evidence: measured findings

The Supreme Court’s findings, as summarized by the Carter Center, which observed the full proceedings:⁠¹

• The IEBC acted contrary to law by announcing results on 34Bs before receiving all 34As, and failed to transmit results electronically together with the tally forms, in violation of Section 39(1c) of the Elections Act.
• Form 34C had “neither a watermark nor a serial number” and appeared to be a photocopy.
• Of 291 constituency forms (34B), 56 had no watermark, 5 were unsigned by the returning officer, 31 had no serial number, and 32 were unsigned by party agents; hand-over sections of 189 forms and take-over sections of 287 forms were blank.
• The IEBC failed to comply with the court order to grant access to its servers, user log-in history, and transmission logs. The Carter Center reports the court’s reasoning that this meant either the system was infiltrated and data interfered with, or IEBC officials interfered with the data, or the IEBC “simply refused to accept that it had bungled the transmission system and were unable themselves to verify the data fully.”
• The IEBC could not explain why there were approximately 500,000 more votes in the presidential election than in gubernatorial or parliamentary elections.
• The court declined to find criminality by individuals, referring instead to “systemic institutional problems.”

The Carter Center’s own check of forms in the constituencies it observed found none of the 34Bs had the take-over section signed, 16 (43 percent) had the hand-over section signed, 6 (16 percent) lacked a watermark, and 3 (8 percent) lacked a serial number.⁠¹

This review could not open the judgment text itself on the Kenya Law website (the page did not load) and relies on the Carter Center’s detailed summary. Readers should consult the judgment for the court’s exact language.

Failures and criticisms

Kenya’s 2017 process drew criticism on several fronts.

Of the IEBC. The Carter Center wrote that results transmission broke down, that the IEBC declared results hastily without using the full seven days, and that parties could not verify results in time to include evidence in court, which “critically undermined the transparency of the tallying process”.⁠¹ Late procurement and limited testing left the system unproven before election day.⁠¹

Of the ruling. The ruling party and other legal experts criticized the court for annulling without evidence that irregularities were large enough to change the outcome; the Carter Center notes that this “guiding principle is commonplace in international election law,” but that Kenyan law at the time did not require such a finding.⁠¹ The Center concluded that, on the evidence and the IEBC’s failure to respond to legitimate concerns, the court “was well within its bounds”.⁠¹ The dissenting justices disagreed with the majority;⁠¹ their reasoning is in the judgment, which this review could not open.

Of the petitioners’ claims. NASA saw the ruling as vindication of its claims of fraud and hacking, but the Carter Center notes the court “found no evidence to support either claim”.⁠¹

Of the time limits. The constitution requires the court to decide presidential petitions within 14 days of filing; the Carter Center and the court itself found this too short to order recounts or scrutinize materials that might have clarified the accuracy of results.⁠¹

Of the aftermath. The rerun took place amid boycott, violence, and postponed polling in 25 constituencies, which the Carter Center said “undermined the credibility of the election”.⁠¹ The Center described the extended process overall as “a major setback in Kenya’s democratic development”.⁠¹

Competing interpretations

A landmark for process integrity. On this view, the court enforced the constitution’s demand that elections be verifiable, regardless of margin, and showed that a court can hold an election body to account even in a presidential race. The IEBC’s improvements before the rerun, including read-only server access, followed directly.⁠¹

An overreach without outcome evidence. Critics argue that annulling a result with a 1.4 million vote margin, consistent with an independent parallel vote tabulation,⁠¹ punished voters for administrative failures, and that the remedy (a new election) produced a boycotted, lower-legitimacy result.⁠¹ Many legal systems require proof that irregularities could have changed the outcome.⁠¹

A failure of both technology and trust. A third reading holds that the technology was neither the villain nor the hero. Biometric identification provided “a strong safeguard against multiple voting”,⁠¹ while the transmission design failed because of late procurement, inadequate testing, and an operator unwilling to open its systems. The legal question of remedy is separate from the technical lesson.

Lessons

These are interpretations drawn from the record.

1. Electronic results need a verifiable paper anchor. The design depended on matching each transmitted number with a scanned, signed form; when that link broke, results could not be verified.⁠¹
2. Access is part of verifiability. Refusing court-ordered access to servers and logs weighed heavily against the IEBC.⁠¹ See audits and verification.
3. Test early and publicly. A simulation less than a week before the vote, with limited display, gave little assurance.⁠¹
4. Label provisional results. Unlabeled fast electronic tallies on television fed suspicion.⁠¹
5. Independent statistical checks matter. The citizen PVT offered evidence about the outcome even when official records were incomplete.⁠¹
6. Dispute timelines must allow scrutiny. A 14-day limit constrained what the court could examine.⁠¹

Application to this framework

Kenya’s annulment bears on the My Vote Forward framework in two ways. First, for any future official voting component, the framework requires that results be independently verifiable and that disputes have a fair, timely path to resolution, which is the standard Kenya’s constitution applied (see audits and verification and governance).

Second, it applies to the framework’s published releases about priorities and opinions. A release should never be announced before its underlying records can be checked, provisional figures must be labeled as provisional, and methods and inputs must be available to reviewers on a fixed schedule (see published releases). Kenya shows how quickly trust is lost when a fast number arrives without the records that justify it.

Unresolved questions

• What did the dissenting justices argue in detail, and how has Kenyan law on annulment thresholds changed since 2017?
• What did forensic access to IEBC servers, provided for the rerun, show about the August transmission?
• How should electoral bodies balance speed of results against completeness of records in tense elections?
• Can results transmission systems publish each polling station’s signed form image before any national tally is shown?
• What remedy short of a full rerun could address verifiability failures without disenfranchising voters?