Kenya: Office of the Data Protection Commissioner adopted Personal Data Protection Handbook

On 23 April 2023, the Office of the Data Protection Commissioner (ODPC) adopted the Personal Data Protection Handbook. The handbook serves as a guide for data controllers, data processors, and data subjects in Kenya to understand and comply with the Data Protection Act, of 2019. It outlines principles of personal data protection, including lawfulness, fairness, transparency, and data minimisation. The handbook defines personal and sensitive data, elaborates on the roles of data controllers and processors, and outlines the rights of data subjects such as access, correction, and deletion of personal data. Additionally, the handbook provides guidance on compliance, including registration with the ODPC, reporting data breaches, and the procedures for lodging complaints and conducting investigations.