Activity Tracker
The DPA Activity Tracker provides our latest information on developments in legislatures, judiciaries and the executive branches of G20, EU member states and Switzerland.
351 events advancing 224 policy or regulatory changes:
Graph
Table
Lawsuit concerning constitutionality of Sections 6 and 27 of the Computer Misuse and Cybercrimes (Amendment) Act, 2025 (Law Society of Kenya and 8 others v Attorney General and 17 others)
High Court ruled Section 6(1)(ja) and Section 27(1)(b) of Computer Misuse and Cybercrimes (Amendment) Act are unconstitutional
On 2 July 2026, the High Court at Nairobi delivered judgment in Law Society of Kenya & 8 others v Attorney General & 17 others (Constitutional Petition E671, E673, E677, E698, E705 & E716 of 2025 (Consolidated)). The court declared Section 6(1)(ja) …
Content moderation regulation in Computer Misuse and Cybercrimes (Amendment) Act
Section 6(1)(ja) and Section 27(1)(b) of the Computer Misuse and Cybercrimes (Amendment) Act cease to apply after being declared unconstitutional
On 2 July 2026, Section 6(1)(ja) and Section 27(1)(b) of the Computer Misuse and Cybercrimes (Amendment) Act, 2025 were declared unconstitutional and of no legal effect by the High Court at Nairobi, with each party bearing its own costs, in Law Soci…
National Data Governance Policy
Ministry of Information, Communications and the Digital Economy closes consultation on draft final National Data Governance Policy
On 5 June 2026, the Ministry of Information, Communications, and the Digital Economy (MICDE) closes its consultation on the draft final National Data Governance Policy, opened on 26 May 2026. The draft policy covers the full data lifecycle, includin…
Guidance Note to the Transport Services Sector
Office of the Data Protection Commissioner closes consultation on draft Guidance Note to the Transport Services Sector
On 15 May 2026, the Kenya Office of the Data Protection Commissioner closes the consultation on the draft Guidance Note to the Transport Services Sector. The draft Guidance Note applies to all transport operators in Kenya, including public transport…
Guidance Note on Data Protection Officer
Office of the Data Protection Commissioner closes consultation on draft Guidance Note on Data Protection Officer
On 15 May 2026, the Kenya Office of the Data Protection Commissioner closes the consultation on the draft Guidance Note on Data Protection Officer. The draft Guidance Note applies to all data controllers and data processors across all sectors, and t…
Guidance Notes on Data Protection Policy
Office of the Data Protection Commissioner closes consultation on draft Guidance Notes on Data Protection Policy
On 15 May 2026, the Kenya Office of the Data Protection Commissioner closes the consultation on the draft Guidance Notes on Data Protection Policy. The draft Guidance Notes apply to all data controllers and data processors across all sectors, and th…
Guidance on Cross Border Data Transfer
Office of the Data Protection Commissioner closes consultation on draft guidance on cross border data transfer
On 15 May 2026, the Office of the Data Protection Commissioner (ODPC) closes the consultation on draft guidance on cross-border data transfers. The draft applies to all entities that handle personal data in Kenya and transfer or intend to transfer s…
National Cybersecurity Agency Order, 2026
President signed National Cybersecurity Agency Order
On 6 May 2026, the President adopted National Cybersecurity Agency Order, 2026, establishing the National Cybersecurity Agency as an autonomous regulatory and technical body responsible for coordinating national cybersecurity matters under the direc…
Financial consumer protection framework
Central Bank of Kenya closes consultation on financial consumer protection framework
On 28 April 2026, the Central Bank of Kenya closes the consultation on the financial consumer protection framework. The framework applies to all licensed financial service providers operating across any channel, including digital platforms. It impos…
Communique on Artificial Intelligence: Governance, Peace and Security (PSC/MIN/COMM.1339/2026)
African Union adopted Communique on Artificial Intelligence: Governance, Peace and Security
On 16 April 2026, the Peace and Security Council (PSC) of the African Union (AU) adopted Communique PSC/MIN/COMM.1339 (2026) on "Artificial Intelligence: Governance, Peace and Security" at its 1339th ministerial meeting in Addis Ababa, Ethiopia. The…