The High Court in Kenya held that a new digital identity system could only be implemented subject to the improvement of the existing data protection laws.