Registration with the Office of the Data Protection Commission (ODPC)
Did you know that the office of the Data Protection Office (ODPC) will release a list of all organizations that have registered as either data processors or controllers on the 30th of September 2022? These entities include all public and private entities, including individuals who process personal data.
Will your organization be part of the list?
Click here and we can help you register.
Registration is mandatory for any entity that processes the personal data of a data subject in Kenya, even if the entity is not based in Kenya.
"Registration is an important element of compliance with the data protection legislation as organizations cannot act as Data Controller or Processors in Kenya unless they have registered with the ODPC," the commissioner clarified, adding that entities should submit their registration application online.?
However, you will not be exempt from registration with the ODPC if you process personal data within the following industries:
? public sector bodies (including electoral campaigns)?
? credit bureaus
? crime prevention and prosecution of offenders (including operating security CCTV systems)
? betting and gaming platforms
? education
? health care
? hospitality services
? faith-based or religious institutions
? property (management and sale)
? financial services, including insurance and retirement fund
? telecommunication and internet service providers
? businesses that depend on direct marketing
? internet access?
? transport services (including online passenger hailing applications)
? businesses that process genetic data
The registration fees depend on the category your organization falls into and one key provision in the Data Protection Act is that every individual has the right to privacy.