CCTV in the stockroom, software that logs keystrokes, GPS units in delivery vans. Employers have more ways to watch staff than ever, and employees increasingly ask where the line falls under Kenyan law.
Can employers monitor employees in Kenya?
Monitoring is not banned, but it is regulated. The Data Protection Act 2019 treats employee information , photographs, biometric records, location traces, browsing logs , as personal data, so monitoring must have a lawful basis, be explained to staff and go no further than the stated purpose. Genuine business needs such as security or safety justify a great deal, but they do not create a free hand; the question is always whether the intrusion is proportionate. The Office of the Data Protection Commissioner‘s guidance is a useful reference when designing a new system.
What does proportionate monitoring look like?
- A privacy notice or policy that tells staff what is monitored, why, and for how long records are kept.
- Scope limited to what the business actually needs , no cameras in changing rooms or toilets.
- Access restricted to named managers rather than open to everyone with system rights.
- Retention limits and secure storage for the records created.
- A route for staff to raise concerns about the monitoring.
Is consent enough?
Relying on consent inside an employment relationship is difficult, because an employee may not feel free to refuse. Employers usually do better identifying a different lawful basis, documenting the reasoning, and reflecting the monitoring in workplace policies and contracts. Our contract lawyers can review employment documents for that purpose. Where monitoring records feed into disciplinary decisions, the process should be consistent and capable of explanation.
Monitoring is only one part of workplace privacy. Recruitment records, medical information and performance notes are also personal data, and the same principles apply: collect what you need, keep it secure, delete it when the purpose ends. For employers rolling out monitoring across several sites, a governance review keeps policy, notices and contracts aligned , see our governance advisory services. The Data Protection Act 2019 itself can be read on Kenya Law.
For guidance on your specific situation, contact CS Advocates LLP , call, WhatsApp, or book a confidential consultation at our Westlands, Nairobi office.