When Is a Data Protection Impact Assessment Required in Kenya?

Kenyatta International Convention Centre in Nairobi

You are planning a new app, a CCTV rollout or a loyalty programme. If the project processes personal data on a large scale or in sensitive ways, Kenyan law may expect a data protection impact assessment before you launch. Doing it early is cheaper than retrofitting compliance after launch. When is a data protection impact … Read more

Biometric Data in Kenya: What the Data Protection Act Requires

Kenyatta International Convention Centre in Nairobi

Fingerprints, facial images and voice recordings identify a person as nothing else can , and Kenyan law treats them accordingly. Biometric data falls within the sensitive category under the Data Protection Act 2019, and organisations that collect it, from schools running attendance systems to fintechs verifying customers, must meet a higher standard than for ordinary … Read more

+254 728 293 000 Email us +254 20 80 93 000 Confidential consultation