BlogSecurity
Data Protection Act compliance for IT systems
By David Otieno, Senior ICT Consultant 1 min read
Kenya's Data Protection Act, 2019 shapes how systems collect, store and share personal data. Build its principles into design.
The Data Protection Act, 2019 applies to organisations that process personal data in Kenya. IT systems are where most of that processing happens. This is a practical overview, not legal advice.
Collect only what you need
Design forms and systems to capture the minimum personal data for the purpose.
Secure it
Access control, encryption, backups and logging protect personal data.
Respect rights
Be able to find, correct and delete a person's data when they ask.
Control sharing
Agree terms with service providers who process data on your behalf.
Plan for breaches
Know how to detect, assess and report personal data breaches.
Get advice
Consult legal or data protection specialists for your specific obligations.
See our secure systems services.
About the author
David Otieno
Senior ICT Consultant
David Otieno writes about cybersecurity, physical security systems, power resilience and running IT reliably day to day.