January 11, 2024 at 10:36AM
Kenya’s Office of the Data Protection Commissioner released new guidance notes for data protection in education, communications, and digital credit sectors, as well as a general guide for processing health data. The Data Protection Act, enacted in 2019, has led to significant enforcement, with fines issued for violations. Awareness efforts aim to promote compliance and understanding of data protection laws.
Based on the meeting notes, the Kenya’s Office of the Data Protection Commissioner (ODPC) has issued new guidance notes for data protection in the education, communications, and digital credit sectors, as well as a general guide for processing health data. These guidelines align with the Data Protection Act (DPA), Kenya’s primary data protection legislation, and reflect the country’s ongoing efforts to strengthen policy controls.
The ODPC has also taken enforcement actions against organizations violating data protection laws, imposing fines for various infractions such as posting photos of customers on social media without consent, collecting third-party contact information without user consent, and publishing pictures of children without parental consent.
Rachael Shitanda, deputy chair and vice chair of East Africa for the Africa Information & Communication Technologies Alliance (AfICTA), has emphasized the need for raising awareness about data protection rules across Kenya. She highlighted the importance of fostering conversations and confidence in businesses regarding information asset management.
The meeting also indicates that there is a good uptake of information by the public regarding personal data protection laws, signaling a positive trend in awareness about individual rights and data privacy.
Overall, the meeting notes illustrate the proactive efforts of the ODPC to enforce data protection regulations, drive awareness, and foster confidence in businesses regarding information asset management.