Law

Data Protection Act, 2019

Kenya’s framework for personal data, the rights of data subjects and the responsibilities of organisations processing it.

2019Kenya · Legal & policy library

Law · 2019

Plain-language introduction

Overview

The Act regulates the processing of personal data and establishes the Office of the Data Protection Commissioner. It gives effect to constitutional privacy protections.

Who should read it

Individuals can use it to understand their data rights. Organisations can use it to understand their responsibilities as data controllers and processors.

  • Rights of people whose personal data is processed.
  • Responsibilities when collecting and using personal data.
  • Oversight by the Data Protection Commissioner.

Official guidance

The ODPC publishes the Act and related regulations. Consult the original instruments and current guidance for specific compliance questions.

Source and scope

This page introduces the document; it is not a consolidated version of the law or a compliance assessment. Read the official reference ↗.

← Back to the document collection