Think about what a detail can unlock
A phone number, ID copy, date of birth or photo can help someone impersonate you when combined with other information. Before sharing, ask who needs the detail, why it is needed, how it will be sent and whether less information would do.
Reduce unnecessary exposure
Keep identity documents, financial statements and full transaction records out of public posts and group chats.
Review who can see profile details, old posts, tags and location updates.
Limit app permissions and remove access for services you no longer use.
Use private, verified channels when documents are genuinely required. Check the recipient before sending.
Review cloud-sharing links. Restrict access to named people and remove old links when no longer needed.
Use a separate account on shared devices, sign out and avoid saving credentials. Private browsing does not hide activity from every service or network.
Be careful with AI tools and uploads
Do not paste passwords, recovery codes, identity documents or confidential work into an unfamiliar chatbot or online converter. Check the service's privacy controls, retention terms and your employer's rules before uploading sensitive data. Generated answers can be wrong; verify important claims independently.
If personal information is exposed
Record where the information appeared without spreading it further. Request removal through the platform or organisation's verified process.
Secure affected accounts and watch for targeted calls, password resets and financial activity.
Contact the relevant bank, network or service if someone could use the details to impersonate you.
Use the Office of the Data Protection Commissioner's official channels for Kenyan data-protection information and complaints.
If someone may be monitoring your device
Use a separate trusted device to seek help. Changing passwords, disabling location sharing or removing monitoring software can alert the person watching. If personal safety is involved, plan changes with trusted support rather than making them on a potentially monitored device.
Useful references
Here to help
Something doesn’t look right?
Prepare an incident report with the details that matter.