Kenya: Adopted Data Protection (Complaints Handling and Enforcement Procedures) Regulations

On 7 December 2021, the Cabinet Secretary, Ministry of Information, Communication, Technology, Innovation and Youth Affairs signed the Data Protection (Complaints Handling and Enforcement Procedures) Regulations, 2021. The regulations establish the procedure for lodging, admission, and response to complaints filed under the Data Protection Act (No. 24 of 2019). They outline the process for the Data Commissioner to handle complaints, including registration, investigation, and resolution through alternative dispute resolution mechanisms such as negotiation and mediation. Additionally, the regulations provide for the issuance of enforcement notices and penalty notices in cases of non-compliance, with clear provisions for appealing enforcement actions.