Kenya: Office of the Data Protection Commissioner closed consultation on draft guidance note on the processing of personal data for research purposes

On 30 May 2025, the Office of the Data Protection Commissioner (ODPC) closed the public consultation, which had been open since 16 May, on the Draft Guidance Note on the Processing of Personal Data for Research Purposes. The Draft Guidance Note, developed under Section 53(3) of the Data Protection Act, 2019 and the Data Protection Regulations, 2021, defines technical standards for processing personal data in research conducted by entities in both public and private sectors. It specifies Kenya’s legislative framework, including the Constitution of Kenya 2010, the Science, Technology and Innovation Act, and the National Guidelines for Ethical Conduct of Biomedical Research, while detailing compliance obligations, data protection principles, storage and accountability standards, and exemptions permissible in public interest. The consultation gathered feedback to enhance regulatory guidance ensuring that data processing for research purposes remains lawful, transparent, and proportionate, maintaining compliance with the Act and facilitating responsible scientific inquiry between 16 and 30 May.