Blog
Kenya DPA 2019 compliance insights
Practical guides, ODPC updates, and compliance deep-dives from the Dira team. Written by compliance professionals who read the Act.
The 72-Hour Breach Rule: What the ODPC Expects from Kenyan Organisations
A practical guide to the s.43 breach notification requirement - what triggers the clock, what the ODPC notification must include, and what happens if you miss the window.
Data Processing Agreements Under the Kenya DPA 2019: What Section 42 Requires
A practical guide to data processing agreements under section 42 of the Kenya DPA 2019 - when they are required, what mandatory clauses must be included, and how to manage sub-processors.
Valid Consent Under the Kenya DPA 2019: What Section 32 Requires
A practical guide to obtaining and managing lawful consent under section 32 of the Kenya DPA 2019 - the four conditions, how to record consent, and when consent is the wrong legal basis to use.
The DPO's Role Under the Kenya DPA 2019: What Section 24 Actually Requires
A practical guide to Data Protection Officer obligations under the Kenya DPA 2019 - who must designate one, what qualifications are required, and what the DPO must actually do.
Managing Data Subject Requests Under the Kenya DPA 2019: A Practical Guide
How to handle access, erasure, rectification, portability, and objection requests under the Kenya DPA 2019 - including the statutory response deadlines set by the Data Protection (General) Regulations 2021.
When Does Your Organisation Need a DPIA Under the Kenya DPA 2019?
A practical guide to Data Protection Impact Assessments under section 31 of the Kenya DPA 2019 - when they are required, what they must contain, and when to consult the ODPC.
How to Build a ROPA Under Kenya DPA 2019 - A Practical Guide
Step-by-step guidance on creating and maintaining Records of Processing Activities that satisfy the Kenya DPA 2019 accountability requirements and ODPC expectations.
Kenya DPA 2019 vs GDPR: What's the Same, What's Different
A side-by-side comparison of the Kenya Data Protection Act 2019 and the EU General Data Protection Regulation - for organisations with experience of both frameworks.
Get Kenya DPA updates in your inbox
ODPC enforcement news, DPA 2019 guidance updates, and Dira product releases - no spam.
Ready to act on what you've learned?
Dira automates the DPA 2019 obligations covered in our guides. Start your 30-day free trial - no credit card required.