Cookie 同意: Kenya
Kenya的同意与隐私法
简要说明
Kenya's Data Protection Act of 2019 is closely modelled on the GDPR and enforced by the Office of the Data Protection Commissioner, an active regulator in the region. A distinctive feature is a mandatory registration regime under which many data controllers and processors must register with the ODPC, with thresholds set by regulation. The ODPC has issued enforcement decisions and fines, including in the digital lending sector over misuse of contacts and consent. Consent must be express, informed, and freely given, and the Act provides GDPR-style rights and breach notification. Notices in English are common. Cookies that identify users are personal data under the Act.
适用对象
Data controllers and processors established in Kenya, and those abroad that process personal data of data subjects in Kenya.
处罚
Penalties up to 5 million Kenyan shillings or 1 percent of annual turnover
主要义务
- Obtain express, free and specific consent where it is the basis
- Provide notice of purpose and rights before collection
- Honor access, rectification, erasure and objection rights
- Register as a data controller or processor where required
- Notify the commissioner and affected people of breaches
本地指引
- Register with the ODPC where thresholds are met
- Use express, informed, and freely given consent
- Take special care in digital lending and marketing
- Apply GDPR-style rights and breach notification
ConsentX 如何提供帮助
- Express, specific opt-in consent capture
- Direct-marketing opt-out controls
- Geo-aware banner for Kenyan visitors
- Rights request workflow with evidence
- Region rule engine tuned for Kenya
yoursite.com
我们重视您的隐私
在使用任何非必要 Cookie 之前,我们会按照您所在地区适用的规则征求您的同意。
全部允许拒绝非必要管理偏好设置
本页面由机器翻译生成,可能存在错误。在依赖本页面之前,请与具备资质的当地法律顾问核对法律细节。
如何使用 ConsentX 满足 Kenya 的要求
- 1
扫描您的网站
运行免费扫描,找出网站上的每一个 Cookie 和跟踪器,从而准确了解 Kenya 下哪些内容需要取得同意。
- 2
展示按地区适配的同意横幅
添加 ConsentX 横幅。它会识别每位访问者的地区,并自动展示 Kenya 所要求的同意流程。
- 3
在取得同意前拦截跟踪器
在访问者同意之前,持续拦截非必要的 Cookie 和跟踪器,确保同意前不会有任何加载。
- 4
记录防篡改凭证
每一次选择都会保存为防篡改的同意回执,可在 Kenya 审计中提供。
- 5
按时处理数据主体请求
使用内置的 DSAR 工作流与 SLA 计时器,在法定期限内回应查阅、删除和退出请求。