Loading…
Plain-language guidance on Kenyan law from our advocates.
Kenyan law requires notification of the ODPC within 72 hours of discovering a personal data breach. Most businesses have no plan. Here's exactly what the law demands and how to respond
Read MoreMandatory registration of data controllers and processors is enforced in Kenya. Find out whether your business must register with the ODPC, how the process works, and the costs of non-compliance
ODPC fines are now upheld in court, audits are unannounced, and directors face personal liability. The 2026 data protection enforcement trends every Kenyan business must know.
Read More