Kenya: Office of the Data Protection Commissioner adopted guidance note on processing personal data by micro, small, and medium enterprises

Description

Office of the Data Protection Commissioner adopted guidance note on processing personal data by micro, small, and medium enterprises

On 6 November 2025, the Office of the Data Protection Commissioner (ODPC) adopted a guidance note on processing personal data by micro, small, and medium enterprises (MSMEs). The guidance note, prepared under the Data Protection Act, 2019, and its s…

Scope

Policy Area
Data governance
Policy Instrument
Data protection regulation
Regulated Economic Activity
cross-cutting
Implementation Level
national
Government Branch
executive
Government Body
data protection authority

Complete timeline of this policy change

Hide details
2025-05-16
in consultation

On 16 May 2025, the Office of the Data Protection Commissioner (ODPC) opened a public consultation,…

2025-05-30
processing consultation

On 30 May 2025, the Office of the Data Protection Commissioner (ODPC) closed the public consultatio…

2025-11-06
adopted

On 6 November 2025, the Office of the Data Protection Commissioner (ODPC) adopted a guidance note o…