Do I need to register with Kenya's ODPC?

Many data controllers and processors must register with the Office of the Data Protection Commissioner, with thresholds set by the registration regulations of 2022.

Has Kenya enforced its data protection law?

Yes. The ODPC has issued enforcement decisions and fines, notably in the digital lending sector for misusing borrowers' contacts and processing without proper consent.

Afrika syd for Sahara

Cookiesamtykke i Kenya

Samtykke og databeskyttelse i Kenya

Kenya's Data Protection Act of 2019 is closely modelled on the GDPR and enforced by the Office of the Data Protection Commissioner, an active regulator in the region. A distinctive feature is a mandatory registration regime under which many data controllers and processors must register with the ODPC, with thresholds set by regulation. The ODPC has issued enforcement decisions and fines, including in the digital lending sector over misuse of contacts and consent. Consent must be express, informed, and freely given, and the Act provides GDPR-style rights and breach notification. Notices in English are common. Cookies that identify users are personal data under the Act.

Tilsynsmyndighed

Office of the Data Protection Commissioner (ODPC)

Status

Data Protection Act 2019, with registration regulations from 2022

Primær lov

DPA KE

Sprog

English

Hvem er omfattet

Data controllers and processors established in Kenya, and those abroad that process personal data of data subjects in Kenya.

Sanktioner

Penalties up to 5 million Kenyan shillings or 1 percent of annual turnover

Vigtigste forpligtelser

Obtain express, free and specific consent where it is the basis
Provide notice of purpose and rights before collection
Honor access, rectification, erasure and objection rights
Register as a data controller or processor where required
Notify the commissioner and affected people of breaches

Lokal vejledning

Register with the ODPC where thresholds are met
Use express, informed, and freely given consent
Take special care in digital lending and marketing
Apply GDPR-style rights and breach notification

Sådan hjælper ConsentX

Express, specific opt-in consent capture
Direct-marketing opt-out controls
Geo-aware banner for Kenyan visitors
Rights request workflow with evidence
Region rule engine tuned for Kenya

Kom gratis i gang

yoursite.com

Kenya

Vi værner om dit privatliv

Vi beder om dit samtykke før enhver ikke-nødvendig cookie, efter de regler der gælder i din region.

Tillad alleAfvis ikke-nødvendigeAdministrér præferencer

Samtykke registreret

sha256 · chain ok

Denne side er maskinoversat og kan indeholde fejl. Få de juridiske detaljer gennemgået af en kvalificeret lokal juridisk rådgiver, før du forlader dig på den.

Gør Kenya klar med ConsentX

Regionsbestemte bannere, forudgående scriptblokering, DSAR og manipulationssikret dokumentation.

Kom gratis i gang Book en demo

Sådan overholder du Kenya med ConsentX

1
Scan dit website
Kør en gratis scanning for at finde hver cookie og tracker på dit website, så du ved præcis, hvad der kræver samtykke efter Kenya.
2
Vis et regionsbestemt samtykkebanner
Tilføj ConsentX-banneret. Det registrerer hver besøgendes region og viser automatisk den samtykkeoplevelse, som Kenya kræver.
3
Blokér trackere indtil samtykke
Hold ikke-nødvendige cookies og trackere blokeret, indtil den besøgende accepterer, så intet udløses før samtykket.
4
Registrér manipulationssikret dokumentation
Hvert valg gemmes som en manipulationssikret samtykkekvittering, som du kan fremlægge ved et Kenya-tilsyn.
5
Håndtér anmodninger til tiden
Brug det indbyggede DSAR-workflow med SLA-timere til at besvare anmodninger om indsigt, sletning og fravalg inden for fristen.