Can Kenyan Employers Use AI to Screen Job Applicants? A Practical Risk Checklist
Before AI screens applicants or monitors staff in Kenya, check fairness, privacy, human review, vendor terms and safeguards.
ICT, Data Privacy & AI Law
Is Your Business Sending Personal Data Outside Kenya? A Transfer Checklist
A practical Kenya data-transfer checklist for cloud hosting, regional payroll, overseas support and vendors, based on the Data Protection Act and ODPC guidance.
Buying an AI Tool for Your Kenyan Business: Legal Questions for the Board
A board checklist for buying AI tools in Kenya: personal data, security, vendor terms, human review, intellectual property, testing and exit controls.
Privacy Policies for Kenyan Websites: What the Law Requires
Every Kenyan website that collects a name, an email or a phone number is processing personal data, and the Data Protection Act 2019 applies from the first field of the contact form. A privacy policy is where that legal duty becomes visible to users. Does Kenyan law require a privacy policy? The law requires transparency: … Read more
Cyber Incident Response in Kenya: A Practical Guide for Businesses
A ransom note on the screen. Systems down. Phones ringing. What a business does in the first day of a cyber incident shapes its legal position for months afterwards, and panic is not a plan. What should the first hours of a cyber incident look like? Isolate affected systems to stop the spread, but preserve … Read more
Data Protection for Digital Lenders and Fintechs in Kenya
Digital credit grew in Kenya faster than its compliance did, and data protection became the flashpoint: lending apps that harvested phone contacts, listed borrowers publicly, or pressed guarantors through messaging have all faced the consequences. For fintech teams building on that market today, the Data Protection Act 2019 is not an afterthought, it is part … Read more
Cross-Border Data Transfers from Kenya: What the Law Requires
Your HR platform is hosted in Europe. Your customer support runs from India. Your backups sit in a data centre abroad. Each of these ordinary arrangements may involve moving personal data out of Kenya, and that is where the rules begin. Can personal data be transferred outside Kenya? Yes, but not freely. The Data Protection … Read more
AI Systems and Liability in Kenya: Emerging Issues for Businesses Using AI
A recruitment tool screens out candidates. A chatbot gives a customer wrong information. A model trains on personal data gathered from the web. Kenyan businesses are already using such systems, and asking who answers when they cause loss. Is there an AI law in Kenya? Kenya does not yet have a standalone statute dedicated to … Read more
Software and SaaS Contracts in Kenya: What Should Your Agreement Cover?
A SaaS subscription looks light: click, pay, log in. Underneath sits a contract that decides who owns the data, who fixes failures and what happens on termination. Reading it before renewal is worth the hour. Which law governs software and SaaS agreements in Kenya? Software licensing and SaaS arrangements are contracts, so the Law of … Read more
Data Retention in Kenya: How Long Can You Keep Personal Data?
Most organisations keep personal data far longer than any purpose justifies, because deleting feels risky and keeping feels safe. The Data Protection Act 2019 takes the opposite view: personal data should be retained no longer than necessary for the purpose collected, and then deleted or anonymised. A retention schedule turns that principle into something a … Read more