The Kenya Data Protection Act provides for the appointment of data protection officers by private companies and businesses that process sensitive information about its customers and employees. This is particularly important to ease the compliance burden for businesses by having […]
The ODPC is established under section 5 of the Act as a body corporate with perpetual succession similar to Office of the Attorney General or the Office of the Director of Public Prosecutions. The Data Commissioner shall be appointed for […]
The 6th Director of FBI once stated “There are only 2 types of companies: those that have been hacked and those that will be. And even they are converging into one category: companies that have been hacked and will be […]
The Data Protection Act has been promulgated partly because of the amount of data that commercial businesses hold about customers from both direct and indirect sources. The Act requires businesses to collect data directly from the customers unless specifically exempted. […]
The Data Protection Act provides various rights of a data subject that apply to both actual and potential customers and employees. These include the right to: be informed of the use to which their personal data is to be put; […]
The Data Protection Act in many cases provides consent as a legitimate ground for processing of personal information. Owing to the sensitive nature of personal information, the Act does not leave us guessing what consent means. All businesses should take […]
The Data Protection Act is about 2 things, the protection of personal data and the protection of data subject. These two terms are defined in the interpretation section of the Act to help implementation and enforcement. Under the Act, Data […]
Under the Data Protection Act 2019 companies are now required to adopt privacy by design as a mode of business. This can be accomplished through the adoption of appropriate technical and organisational measures designed: to implement the data protection principles […]
The Act requires companies to abide by the principles of data protection. These are heavily borrowed from the EU GDPR. Companies dealing with the personal data of natural persons resident in Kenya are now required to ensure that personal data […]
On 8th November 2019, the President of the Republic of Kenya H.E Uhuru Kenyatta assented to the Data Protection Bill, ushering Kenya into a substantive Data Protection Act,2019 (the “Act”). The commencement date for the Act is 25th November 2019. […]
