We would like to bring to your attention a recent decision (ODPC Complaint No. 1667 of 2024: Everlyn Lavuha Mugita Suing On Behalf of NSM..

Today, we turn our focus to the recently proposed Data Sharing Code, 2024, which aims to establish a structured and ethical framework for the sharing..

In 2024, the Office of the Data Protection Commissioner (ODPC) published two sets of draft regulations, and a guidance note aimed at enhancing data protection..

In recent years, Kenya has witnessed significant developments in data protection. One key development has been the commitment to safeguarding personal and sensitive information, which..

On 5th of October 2022, the Office Data Protection Commissioner (“ODPC”) issued a public statement citing a raft of enforcement measures against 40 digital lenders..

Policy development is a key consideration for any organisation looking to comply with data protection laws. Data protection policies are a set of principles, rules..

In our previous article, we shared our thoughts on the importance of baseline training and why it  should be the first step in data privacy..

Conducting a privacy assessment is crucial to your data protection compliance journey. A privacy assessment is an in-depth evaluation of the personal data an organisation..

In our previous article, we shared our thoughts on the importance of baseline training and why it  should be the first step in data privacy..

Following the enactment of the Data Protection Act (the ‘Act’), 2019 and its supporting regulations, many organisations are gearing toward compliance. Privacy compliance has several..

In the course of doing business, it is common to interact with personal data relating to clients, suppliers, contractors and employees. You must handle this..

One of the key aspects of data protection compliance is procurement or third party vendor compliance. The Data Protection Act provides that where a data..

One of the most challenging areas in data privacy compliance is on data breach management. The Data Protection Act, 2019 places an obligation on data..

Data Protection compliance is a buzz word right now. What is it? Who is responsible? What is the cost of non-compliance? If you are in..

If you are pursuing privacy compliance, you may need to consider appointing a Data Protection Officer (“DPO”). Although the Act provides for the designation of..

Prior to 2020, digital lending witnessed an unprecedented rise and growth in Kenya. According to a 2019 FSD report, the boom was fuelled by widespread..

Successful privacy compliance programs hinge on the development and implementation of a wide range of policies. One such policy is the privacy policy. In this..

Post Summary:

On 7th April 2021, the Task Force on Development of Data Protection General Regulations tabled draft data protection regulations before the Cabinet Secretary, Ministry of..

It has been over 100 days since the appointment of Kenya’s first Data Commissioner. The Data Commissioner is in charge of data protection compliance and..

In the last article, we considered the potential impact of the Data Protection Act on businesses in Kenya. This week, we consider how creating data..

The Data Protection Act (“DPA”) became law on 25th November 2019. However, over fourteen months later, very few businesses have complied with the requirements of..

The Kenya Data Protection Act is set to impact all areas of business and more so, the HR or staffing function. In the “HR Professionals..

The operationalization Kenya Data Protection law is gaining momentum. The appointment of the Data Commissioner shall pave way for enforcement and regulation of personal data..

In a previous article, I discussed some of the reasons why a mobile app may need a privacy policy. The reasons set out there apply..

Have you developed or do you own a Mobile App? Does the App collect personal data such as email addresses, identification numbers, or banking information..

The Kenya Data Protection Act (“DPA“)applies to all persons who handle personal data. For effective compliance, it is necessary to understand the Act’s key terms...

Kenya’s new Data Protection Act (“DPA”) was recently hailed as a trailblazer and pace setter for data privacy in Africa. The DPA came into force..