Kenya: Data Protection Act including business registration requirement entered into force
Description
Data Protection Act including business registration requirement entered into force
On 25 November 2019, Data Protection Act, 2019 entered into force. The Act mandates that data controllers and data processors must register with the Data Protection Commissioner. Registration is required for those processing personal data, with thresholds determined based on factors such as industry type, data volume, and whether sensitive personal data is involved.
Original sourceScope
Policy Area
Authorisation, registration and licensing
Policy Instrument
Business registration requirement
Regulated Economic Activity
cross-cutting
Implementation Level
national
Government Branch
executive
Government Body
central government