Kenya: Kenya Cloud Policy, including data protection regulation entered into force
Description
Kenya Cloud Policy, including data protection regulation entered into force
On 2 May 2025, the Kenya Cloud Policy, 2025 became effective following its publication in the Kenya Gazette. This policy, in line with the Kenya Information and Communication Act, includes provisions to ensure that all cloud deployments comply with the Data Protection Act (2019), the Children’s Act (2022), and related laws. It mandates the implementation of data security and privacy controls in line with international standards, including ISO 27017 and ISO 27018.
Original sourceScope
Policy Area
Data governance
Policy Instrument
Data protection regulation
Regulated Economic Activity
infrastructure provider: cloud computing, storage and databases
Implementation Level
national
Government Branch
executive
Government Body
central government