Blog
Kenya DPA 2019 compliance insights
Practical guides, ODPC updates, and compliance deep-dives from the Compliance Dira team. Written by compliance professionals who read the Act.
The 72-Hour Breach Rule: What the ODPC Expects from Kenyan Organisations
A practical guide to the s.43 breach notification requirement: what triggers the clock, what the ODPC notification must include, and what happens if you miss the window.
Data Processing Agreements Under the Kenya DPA 2019: What Section 42 Requires
A practical guide to data processing agreements under section 42 of the Kenya DPA 2019: when they are required, what mandatory clauses must be included, and how to manage sub-processors.
Valid Consent Under the Kenya DPA 2019: What Section 32 Requires
A practical guide to obtaining and managing lawful consent under section 32 of the Kenya DPA 2019: the four conditions, how to record consent, and when consent is the wrong legal basis to use.
The DPO's Role Under the Kenya DPA 2019: What Section 24 Actually Requires
A practical guide to Data Protection Officer obligations under the Kenya DPA 2019: who must designate one, what qualifications are required, and what the DPO must actually do.
Managing Data Subject Requests Under the Kenya DPA 2019: A Practical Guide
How to handle access, erasure, rectification, portability, and objection requests under the Kenya DPA 2019, including the statutory response deadlines set by the Data Protection (General) Regulations 2021.
When Does Your Organisation Need a DPIA Under the Kenya DPA 2019?
A practical guide to Data Protection Impact Assessments under section 31 of the Kenya DPA 2019: when they are required, what they must contain, and when to consult the ODPC.
How to Build a ROPA Under Kenya DPA 2019: A Practical Guide
Step-by-step guidance on creating and maintaining Records of Processing Activities that satisfy the Kenya DPA 2019 accountability requirements and ODPC expectations.
Kenya DPA 2019 vs GDPR: What's the Same, What's Different
A side-by-side comparison of the Kenya Data Protection Act 2019 and the EU General Data Protection Regulation, for organisations with experience of both frameworks.
Get Kenya DPA updates in your inbox
ODPC enforcement news, DPA 2019 guidance updates, and Compliance Dira product releases, no spam.
Ready to act on what you've learned?
Compliance Dira automates the DPA 2019 obligations covered in our guides.