Kenya's data controllers and processors now need to register
with the country's regulator in order to handle personal data
or face a substantial fine.
Over the past decade, Kenya has been making significant strides
in ensuring that data subjects have more control over their
personal information. Article 31 of the Constitution of Kenya, 2010
grants everyone the right to privacy, including the right not to
have information relating to their family or private affairs
unnecessarily required or revealed or the privacy of their
communications infringed.
The Data Protection Act (the "Act"),
which came into force in 2019, was enacted with the main purpose of
affording Kenyans more rights on how their personal data may be
handled.
