Kenya: Office of the Data Protection Commissioner issued guidance on complaints management under Data Protection Act

On 30 November 2023, the Office of the Data Protection Commissioner (ODPC) adopted guidance on complaints management under the Data Protection Act. The guide outlines the procedures for lodging, processing, and resolving complaints related to infringements of personal data rights, focusing on fairness, accessibility, and responsiveness. It provides detailed guidance on the steps for filing complaints, the necessary information required from complainants, and the role of the complainant and respondent. Complaints may be lodged through various channels, including in person, by post, email, and other methods, and the ODPC may also initiate complaints on its own motion. It specifies the confidentiality, impartiality, and the protection of privacy throughout the complaints process. Additionally, the manual addresses the categorisation of complaints, the initial assessment, and the resolution process, which may include mediation or negotiation.