Category: Data Protection Law
-
Regus Kenya Data Protection Case: What Kenyan Businesses Can Learn About ODPC Compliance
Learn how the Regus Kenya case reshaped data protection enforcement in Kenya and what every business must do to comply with the ODPC.
-
Zuku Fibre Fined KSh 500,000 for Privacy Breach: What Kenyan Businesses Must Learn
Zuku Fibre fined KSh 500,000 by ODPC Kenya for violating the right to erasure under the Data Protection Act. Learn what this privacy breach means for businesses and how Kenya data protection lawyers at MasiboLaw LLP can help ensure compliance.
-
Platinum Credit Data Breach: ODPC Orders KSh 400K Compensation for Privacy Violation
The ODPC fined Platinum Credit KSh 400,000 for violating Kenya’s Data Protection Act. Learn what this ruling means for businesses and data compliance in Kenya.
-
SportPesa Data Breach: A Landmark Ruling on Data Privacy in Kenya
The Office of the Data Protection Commissioner (ODPC) has ruled against Milestone Games Limited t/a SportPesa for violating Kenya’s Data Protection Act, 2019. This ruling marks a significant precedent in enforcing data privacy rights in Kenya. If you’ve ever had a company misuse your data, this case proves that you…
-
Why Bolt was fined 500,000 Shillings in Kenya
By Meshack Masibo and Bakhita Muriithi Platforms such as Bolt and Uber have transformed how Kenyans move within cities by offering an easy-to-use mobile app that allows passengers to request rides from the comfort of their location. Bolt relies heavily on personal data to operate efficiently, requiring passengers to provide…
-
How to file a Complaint with the Data Commissioner in Kenya
In today’s digital age, we share our personal data almost everywhere. When you register for M-pesa, sign up for a loyalty card at your favourite supermarket, or even post a selfie online. Your data is constantly collected, stored, and processed. But what happens when your personal information is mishandled and…
-
Why your Tech-StartUp needs a Data Protection Impact Assessment
The last decade has seen a sharp rise in the number of tech companies operating in Kenya dotting industries like payments, digital lending, e-commerce, education as well as health technology just to name a few. The growth of venture funding and accelerator programs has also led to these companies scaling…
-
How to register as a Data Controller or Processor in Kenya
With the enforcement of the Data Protection Act, 2019, all businesses in Kenya that collect, store, or process personal data must comply with data protection regulations. One of the key legal requirements is registering as a Data Controller or Data Processor with the Office of the Data Protection Commissioner (ODPC).…
-
The World Coin Saga: A Case of a Data Controller gone Rogue in Kenya
By Betty Jepchumba Recently, Kenya was thrown into a frenzy because of what can properly be called “The Worldcoin Saga.” A German-based company, Tools for Humanity(TFH) through its affiliate, the World Coin Foundation was scanning irises belonging to Kenyans in exchange for the equivalent of 7,000 Kenyan shillings. There was…
-
Data Protection: The Cost of not Complying
This week, the Office of the Data Commissioner set tongues wagging when it issued a staggering fine of over 9 million Kenyan Shillings against 3 different institutions. Mulla Pride Ltd, a digital credit provider operating KeCredit and Faircash, was fined 2.97 million shillings for using names and contact information obtained…