Progress

Current status
adopted
06 Nov 2025 adopted
30 May 2025 processing consultation
16 May 2025 in consultation

Scope

Implementers
Kenya
Policy Area
Data governance
Policy Instrument
Data protection regulation
Regulated Economic Activity
cross-cutting
Government Branch
executive
Government Body
data protection authority
Implementation Level
national

Timeline of events

06 Nov 2025
adopted

Office of the Data Protection Commissioner adopted guidance note on processing personal data by micro, small, and medium enterprises

On 6 November 2025, the Office of the Data Protection Commissioner (ODPC) adopted a guidance note on processing personal data by micro, small, and medium enterprises (MSMEs). The guidance note, prepared under the Data Protection Act, 2019, and its s…

Source
Event type outline
Action type adoption
Government branch executive
Government body data protection authority
30 May 2025
processing consultation

Office of the Data Protection Commissioner closed consultation on guidance note on processing personal data by micro, small, and medium enterprises

On 30 May 2025, the Office of the Data Protection Commissioner (ODPC) closed the public consultation, which had been open since 16 May 2025, on the draft guidance note on processing personal data by micro, small, and medium enterprises (MSMEs). The …

Source
Event type outline
Action type consultation closed
Government branch executive
Government body data protection authority
16 May 2025
in consultation

Office of the Data Protection Commissioner opened consultation on draft guidance note on processing personal data by micro, small, and medium enterprise

On 16 May 2025, the Office of the Data Protection Commissioner (ODPC) opened a public consultation, until 30 May 2025, on the draft guidance note on processing personal data by micro, small, and medium enterprises (MSMEs). The draft guidance, issued…

Source
Event type outline
Action type consultation opened
Government branch executive
Government body data protection authority