You are planning a new app, a CCTV rollout or a loyalty programme. If the project processes personal data on a large scale or in sensitive ways, Kenyan law may expect a data protection impact assessment before you launch. Doing it early is cheaper than retrofitting compliance after launch. When is a data protection impact … Read more
Children now hand over personal data years before they understand what data is , to schools, learning apps, games and social platforms. Kenyan law treats their information with particular care: the Data Protection Act 2019 singles out children’s data and conditions its processing on consent and on the child’s best interests. Organisations serving under-eighteens need … Read more
An employee’s laptop is stolen from a parked car. It holds a spreadsheet of client names, phone numbers and identity card copies. What happens next is governed by Kenya’s data breach notification rules , and the first hours matter. What counts as a personal data breach in Kenya? A breach is wider than a hack. … Read more
Vendors, clients and regulators all ask whether your organisation is a data controller or a data processor. The answer shapes who must register, who answers complaints and how your contracts should be drafted , and the two roles are often confused. What is the difference between a controller and a processor? A data controller decides … Read more
Fingerprints, facial images and voice recordings identify a person as nothing else can , and Kenyan law treats them accordingly. Biometric data falls within the sensitive category under the Data Protection Act 2019, and organisations that collect it, from schools running attendance systems to fintechs verifying customers, must meet a higher standard than for ordinary … Read more
If your organisation keeps a customer list, runs a payroll or sends a newsletter, Kenyan data protection law already applies to you. One of the first questions organisations ask is whether formal registration with the Office of the Data Protection Commissioner is required before personal data may lawfully be processed. Who must register with the … Read more
Email: [email protected] · Contact page
