DPIA

When Is a Data Protection Impact Assessment Required in Kenya?

by
When Is a Data Protection Impact Assessment Required in Kenya?: original technology-law illustration

You are planning a new app, a CCTV rollout or a loyalty programme. If the project processes personal data on a large scale or in sensitive ways, Kenyan law may expect a data protection impact assessment before you launch. Doing it early is cheaper than retrofitting compliance after launch. When is a data protection impact … Read more

Biometric Data in Kenya: What the Data Protection Act Requires

by
Biometric Data in Kenya: What the Data Protection Act Requires: original technology-law illustration

Fingerprints, facial images and voice recordings identify a person as nothing else can, and Kenyan law treats them accordingly. Biometric data falls within the sensitive category under the Data Protection Act 2019, and organisations that collect it, from schools running attendance systems to fintechs verifying customers, must meet a higher standard than for ordinary records. … Read more

+254 20 80 93 000 Email us +254 20 80 93 000 Confidential consultation