Kenya: Implemented Data Protection (Complaints Handling and Enforcement Procedures) Regulations

On 14 February 2022, the Data Protection (Complaints Handling and Enforcement Procedures) Regulations, 2021 entered into force. The regulations establish the procedure for lodging, admission, and response to complaints filed under the Data Protection Act (No. 24 of 2019). They outline the process for the Data Commissioner to handle complaints, including registration, investigation, and resolution through alternative dispute resolution mechanisms such as negotiation and mediation. Additionally, the regulations provide for the issuance of enforcement notices and penalty notices in cases of non-compliance, with clear provisions for appealing enforcement actions.