After the enactment of the Kenya Data Protection Act (the DPA) in 2019, and the establishment of the Office of the Data Protection Commissioner in 2020, the relevant regulations necessary to give effect to many of the provisions contained in the DPA came into effect on 11th February 2022 while registration of data processors and data controllers commences on 14th July 2022. The legislation applies to all businesses that handle personal data in Kenya.
Kenya recently enacted a data privacy and protection law, the Data Protection Act of 2019 (the DPA). The DPA gives effect to Articles 31(c) and (d) of the Constitution of Kenya which guarantee the right of every person not to have what is considered private information particularly personally Identifiable information (PII) unnecessarily required or revealed” […]