02/10/2026
๐๐๐๐ ๐๐๐๐๐๐๐๐๐๐ ๐๐๐: ๐๐๐๐ ๐๐๐๐๐๐ ๐๐๐๐๐๐๐๐๐๐ ๐๐๐๐๐๐ ๐๐๐๐.
Does your business collect customersโ names, phone numbers, ID numbers, emails, M-Pesa details, employee information or other personal information?
Then data protection is not just a โbig companyโ issue. It applies to businesses that collect and process personal data.
Kenyaโs Data Protection Act, 2019 regulates how personal data should be collected, stored, used and shared, while protecting peopleโs privacy rights.
So, what should your business know?
๐. ๐๐ง๐จ๐ฐ ๐ฐ๐ก๐๐ญ ๐๐๐ญ๐ ๐ฒ๐จ๐ฎ ๐๐จ๐ฅ๐ฅ๐๐๐ญ.
Customer details, employee records, contact information, financial information and even photos or recordings can constitute personal data.
๐. ๐๐๐ฏ๐ ๐ ๐๐ฅ๐๐๐ซ ๐ซ๐๐๐ฌ๐จ๐ง ๐๐จ๐ซ ๐๐จ๐ฅ๐ฅ๐๐๐ญ๐ข๐ง๐ ๐ข๐ญ.
Don't collect personal information simply because you can. Data should be collected for specific, legitimate purposes and processed lawfully and transparently.
๐. ๐๐๐ฅ๐ฅ ๐ฉ๐๐จ๐ฉ๐ฅ๐ ๐ก๐จ๐ฐ ๐ญ๐ก๐๐ข๐ซ ๐๐๐ญ๐ ๐ฐ๐ข๐ฅ๐ฅ ๐๐ ๐ฎ๐ฌ๐๐.
Customers and employees should be informed about why their information is being collected and, where applicable, who it may be shared with.
๐. ๐๐๐๐ฉ ๐ฉ๐๐ซ๐ฌ๐จ๐ง๐๐ฅ ๐๐๐ญ๐ ๐ฌ๐๐๐ฎ๐ซ๐.
Think about who has access to customer records, payroll files, emails, M-Pesa statements and other sensitive information. Put appropriate safeguards in place.
๐. ๐๐๐ฌ๐ฉ๐๐๐ญ ๐ฉ๐๐จ๐ฉ๐ฅ๐โ๐ฌ ๐๐๐ญ๐ ๐ซ๐ข๐ ๐ก๐ญ๐ฌ.
Data subjects have rights including being informed, accessing their data, requesting correction, objecting to certain processing and, in applicable circumstances, requesting deletion.
๐. ๐๐ก๐๐๐ค ๐ฐ๐ก๐๐ญ๐ก๐๐ซ ๐ฒ๐จ๐ฎ๐ซ ๐๐ฎ๐ฌ๐ข๐ง๐๐ฌ๐ฌ ๐ง๐๐๐๐ฌ ๐๐๐๐ ๐ซ๐๐ ๐ข๐ฌ๐ญ๐ซ๐๐ญ๐ข๐จ๐ง.
Registration requirements depend on the nature and scale of processing, with specific exemptions and categories set out in the regulations. Don't assume that being a small business automatically means you're exempt.
Data protection is not only about avoiding problems. It is about building a business culture where customer, employee and business information is handled responsibly.
Learn before there's a problem.
Take a few minutes today to ask:
๐๐ก๐๐ญ ๐ฉ๐๐ซ๐ฌ๐จ๐ง๐๐ฅ ๐๐๐ญ๐ ๐๐จ๐๐ฌ ๐ฆ๐ฒ ๐๐ฎ๐ฌ๐ข๐ง๐๐ฌ๐ฌ ๐๐จ๐ฅ๐ฅ๐๐๐ญ, ๐ฐ๐ก๐จ ๐๐๐ง ๐๐๐๐๐ฌ๐ฌ ๐ข๐ญ, ๐๐ง๐ ๐ก๐จ๐ฐ ๐ข๐ฌ ๐ข๐ญ ๐๐๐ข๐ง๐ ๐ฉ๐ซ๐จ๐ญ๐๐๐ญ๐๐?
Follow ๐๐ข๐ญ๐ซ๐๐ฆ ๐๐๐๐จ๐ฎ๐ง๐ญ๐๐ง๐ญ๐ฌ ๐๐๐ซ๐ข๐๐ for practical business, accounting, tax and data protection insights.