Data Controllers Must Honour Objections and Erasure Requests
Background In Michael Rashid Mwakio v Kings Commodities Limited, the Complainant lodged a complaint with the Office of…
Data Protection
40 posts
The Hidden Data Protection Risk in a Simple Social Media Notice
“This Employee Is No Longer Associated with Our Company…”
Image Use Consent Should be Specific and Not Bundled in Terms & Condition
Background In Antonate Rombo Aiko v Goodtimes Africa t/a Blankets & Wine, the Complainant lodged a complaint with…
Hospitals Must Obtain Explicit Consent Before Sharing Patient’s Data with Third Party Laboratories
Background In Merceline Akoth Odeyo v St. Luke Orthopaedic & Trauma Hospital Eldoret, the Complainant filed a complaint…
Recent ODPC Decisions on the use of Personal Photos & Videos in Kenya
In recent years, Kenya has witnessed significant developments in data protection. One key development has been the commitment…
5 Key Policies For Data Protection Compliance
In the vast expanse of the cosmos, humanity has always been driven by an insatiable curiosity
Kenya Data Commissioner Makes First Enforcement Move
On 5th of October 2022, the Office Data Protection Commissioner (“ODPC”) issued a public statement citing a raft…
A Privacy Assessment: What it is and Why you need it
Conducting a privacy assessment is crucial to your data protection compliance journey. A privacy assessment is an in-depth…
4 Considerations for Privacy Governance
In our previous article, we shared our thoughts on the importance of baseline training and why it should…
The First Step Towards Data Protection Compliance
Following the enactment of the Data Protection Act (the ‘Act’), 2019 and its supporting regulations, many organisations are…