DPA KE
Data Protection Act 2019
Kenya
In force since 2019
Asia & Africa
Who must comply
Data controllers and processors established in Kenya, and those abroad that process personal data of data subjects in Kenya.
Penalties
Penalties up to KES 5 million or, for undertakings, up to 1% of annual turnover, whichever is lower.
Key obligations
- Obtain express, free and specific consent where it is the basis
- Provide notice of purpose and rights before collection
- Honor access, rectification, erasure and objection rights
- Register as a data controller or processor where required
- Notify the commissioner and affected people of breaches
How ConsentX helps
Express, specific opt-in consent capture
Direct-marketing opt-out controls
Geo-aware banner for Kenyan visitors
Rights request workflow with evidence
Region rule engine tuned for Kenya
Get DPA KE ready with ConsentX
This page is a plain-English summary for general information and is not legal advice. Confirm your obligations with qualified local counsel.
How to comply with DPA KE using ConsentX
- 1
Scan your website
Run a free scan to find every cookie and tracker on your site, so you know exactly what needs consent under DPA KE.
- 2
Show a geo-aware consent banner
Add the ConsentX banner. It detects each visitor region and shows the consent experience that DPA KE requires, automatically.
- 3
Block trackers until consent
Keep non-essential cookies and trackers blocked until the visitor agrees, so nothing fires before consent.
- 4
Record tamper-evident proof
Every choice is stored as a tamper-evident consent receipt you can produce in a DPA KE audit.
- 5
Handle data requests on time
Use the built-in DSAR workflow with SLA timers to answer access, deletion and opt-out requests within the legal deadline.
Frequently asked questions
Does Kenya's law require opt-in consent?+
Where consent is the lawful basis it must be express, unequivocal, free, specific and informed.
Who enforces Kenya's Data Protection Act?+
The Office of the Data Protection Commissioner, the ODPC, supervises and enforces the Act.