Do I need to register with Kenya's ODPC?

Many data controllers and processors must register with the Office of the Data Protection Commissioner, with thresholds set by the registration regulations of 2022.

Has Kenya enforced its data protection law?

Yes. The ODPC has issued enforcement decisions and fines, notably in the digital lending sector for misusing borrowers' contacts and processing without proper consent.

Afrika Sub-Saħarjana

Kunsens għall-cookies f Kenya

Kunsens u liġi tal-privatezza f Kenya

Kenya's Data Protection Act of 2019 is closely modelled on the GDPR and enforced by the Office of the Data Protection Commissioner, an active regulator in the region. A distinctive feature is a mandatory registration regime under which many data controllers and processors must register with the ODPC, with thresholds set by regulation. The ODPC has issued enforcement decisions and fines, including in the digital lending sector over misuse of contacts and consent. Consent must be express, informed, and freely given, and the Act provides GDPR-style rights and breach notification. Notices in English are common. Cookies that identify users are personal data under the Act.

Awtorità superviżorja

Office of the Data Protection Commissioner (ODPC)

Status

Data Protection Act 2019, with registration regulations from 2022

Liġi prinċipali

DPA KE

Lingwi

English

Min irid jikkonforma

Data controllers and processors established in Kenya, and those abroad that process personal data of data subjects in Kenya.

Penali

Penalties up to 5 million Kenyan shillings or 1 percent of annual turnover

Obbligi ewlenin

Obtain express, free and specific consent where it is the basis
Provide notice of purpose and rights before collection
Honor access, rectification, erasure and objection rights
Register as a data controller or processor where required
Notify the commissioner and affected people of breaches

Gwida lokali

Register with the ODPC where thresholds are met
Use express, informed, and freely given consent
Take special care in digital lending and marketing
Apply GDPR-style rights and breach notification

Kif tgħin ConsentX

Express, specific opt-in consent capture
Direct-marketing opt-out controls
Geo-aware banner for Kenyan visitors
Rights request workflow with evidence
Region rule engine tuned for Kenya

Ibda b xejn

yoursite.com

Kenya

Napprezzaw il-privatezza tiegħek

Nitolbu l-kunsens tiegħek qabel kull cookie mhux essenzjali, skont ir-regoli applikabbli fir-reġjun tiegħek.

Ippermetti kolloxIrrifjuta dawk mhux essenzjaliImmaniġġja l-preferenzi

Kunsens irreġistrat

sha256 · chain ok

Din il-paġna ġiet tradotta awtomatikament u jista jkun fiha żbalji. Jekk jogħġbok irrevedi d-dettalji legali ma konsulent legali lokali kwalifikat qabel ma toqgħod fuqha.

Ipprepara għal Kenya ma ConsentX

Banners skont ir-reġjun, imblukkar minn qabel tal-iskripts, DSAR u provi reżistenti għall-manipulazzjoni.

Ibda b xejn Ibbukkja dimostrazzjoni

Kif tikkonforma ma Kenya bl-użu ta ConsentX

1
Skennja s-sit tiegħek
Mexxi skan bla ħlas biex issib kull cookie u tracker fis-sit tiegħek, biex tkun taf eżatt x jeħtieġ kunsens taħt Kenya.
2
Uri banner tal-kunsens skont ir-reġjun
Żid il-banner ta ConsentX. Jagħraf ir-reġjun ta kull viżitatur u juri awtomatikament l-esperjenza tal-kunsens li jitlob Kenya.
3
Imblokka t-trackers sal-kunsens
Żomm il-cookies u t-trackers mhux essenzjali imblukkati sakemm il-viżitatur jaqbel, biex xejn ma jitħaddem qabel il-kunsens.
4
Irreġistra prova reżistenti għall-manipulazzjoni
Kull għażla tinħażen bħala rċevuta ta kunsens reżistenti għall-manipulazzjoni li tista tippreżenta f awditu taħt Kenya.
5
Ittratta t-talbiet fil-ħin
Uża l-fluss DSAR integrat b timers tal-SLA biex twieġeb talbiet ta aċċess, tħassir u rinunzja fil-limitu ta żmien legali.