🇰🇪
Kenya
Data Protection Act, 2019
Africa🔵 Substantial
Compliance Score
79%
11 Addressed
3 Partial
0 None
Authority
Office of the Data Protection Commissioner (ODPC)
Overview
Kenya's Data Protection Act, effective 2019, is a comprehensive law that established the ODPC. The ODPC has been actively enforcing compliance and issuing guidance since becoming operational.
14-Topic Coverage Analysis
Data Protection Authority
AddressedConsent Requirements
AddressedData Subject Rights
AddressedCross-Border Transfer
AddressedBreach Notification
AddressedDPO Requirements
AddressedChildren's Data
AddressedPenalties & Enforcement
AddressedSector-Specific Rules
PartialCookie/Tracking
AddressedAI & Automated Decisions
PartialData Localisation
PartialSignificant Data Fiduciary
AddressedGovernment Data
Addressed? Frequently Asked Questions
What is the primary data protection law in Kenya?+
Kenya is governed by the Data Protection Act, 2019. The law is enforced by the Office of the Data Protection Commissioner (ODPC). According to our analysis, the country has a Substantial level of data protection framework.
Does Kenya require a Data Protection Officer (DPO)?+
Yes, under the Data Protection Act, 2019, organizations are generally required to appoint a Data Protection Officer (DPO) or a similar privacy officer to ensure compliance.
What are the data localisation rules in Kenya?+
Partially. While Data Protection Act, 2019 may not mandate general localisation, specific sectoral laws (like finance or health) might require data to be stored locally.
What are the breach notification requirements in Kenya?+
Under the Data Protection Act, 2019, organizations must notify the Office of the Data Protection Commissioner (ODPC) and affected individuals without undue delay in the event of a personal data breach.