Hard truths.
Under the Data Protection Act, 2019, registration certificates issued to data controllers and data processors remain valid for 24 months. Once the two-year period ends, organisations are required to renew their...
The CS said 19 of the cases involved betting and lottery advertisements that failed to comply with rules governing age limits, disclosure obligations, and watershed restrictions meant to protect children from h...
Under the new rules, organisations transferring personal data outside Kenya must follow key principles including lawfulness, purpose limitation, data minimisation, accuracy, storage limitation, integrity and co...
The regulator seeks to curb risks linked to ride-hailing apps, GPS tracking and profiling. Stakeholders have until May 15, 2026 to submit feedback on proposed rules covering data protection policies, cross-bord...
The Data Commissioner has ordered DTB Kenya and DTB Uganda to each pay Sh250,000 to a customer after years of misdirected bank statements and data mishandling, underscoring stricter enforcement of Kenya’s data...