Data Protection
Kenya’s data protection landscape is shaped by the Data Protection Act, 2019, which aligns closely with global standards like the GDPR. The Act established the Office of the Data Protection Commissioner (ODPC), which is mandated to regulate the processing of personal data and uphold the privacy rights of individuals in Kenya.
Our firm has a strong track record of advising and representing clients on complex matters involving data privacy, compliance, and enforcement. We provide end-to-end support across various areas of data protection, including:
Litigation & Regulatory Representation
We have represented clients in high-profile data protection disputes before the High Court and the Court of Appeal, often involving novel and precedent-setting issues under the Data Protection Act. Our team has also worked directly with the Office of the Data Protection Commissioner, giving us first hand insight into regulatory expectations and enforcement trends.
Alternative Dispute Resolution (ADR)
Recognizing the increasing role of mediation and ADR in regulatory matters, we actively promote and engage in alternative dispute resolution as a mechanism for resolving data privacy disputes. Our firm has successfully participated in mediation sessions involving data protection claims, ensuring efficient and amicable resolutions for our clients.
Capacity Building & Training
Our Services Include:
- Legal advisory on compliance with the Data Protection Act, 2019
- Representation before ODPC, the High Court, and Court of Appeal
- Privacy audits and policy reviews
- Data breach response and incident handling
- Staff training and workshops
- Development of internal data protection frameworks
