Kenya: President signed Data Protection Act including business registration requirement

On 8 November 2019, the President endorsed the text for the Data Protection Act, 2019. The Act mandates that data controllers and data processors must register with the Data Protection Commissioner. Registration is required for those processing personal data, with thresholds determined based on factors such as industry type, data volume, and whether sensitive personal data is involved.