ProductsData PrivacyPrivacy Notice Generator
Kenya DPA 2019 - s.29 - Right to Privacy Notice

s.29-compliant privacy notices, ready in minutes

Generate versioned, bilingual privacy notices that cover every s.29 disclosure requirement. Publish to a URL, link to your consent flow, and get prompted to update when your processing changes.

Why this matters

Built for your compliance outcomes

Built from s.29

Every required disclosure covered

  • All s.29(1) mandatory fields
  • Lawful basis per processing purpose
  • Retention periods included
  • Transfer details and safeguards

Bilingual EN + SW

Reach all Kenyan audiences

  • Author English and Swahili side by side
  • Toggle between languages
  • Publish both versions simultaneously
  • Translation review status tracked

Versioned and hosted

Never lose a historical notice

  • Version history with timestamps
  • Point-in-time snapshots for audits
  • Automatic hosted URL
  • Changelog for material changes

Always up to date

Updates when your processing changes

  • Alert when processing changes detected
  • One-click notice update wizard
  • Data subject re-notification workflow
  • Consent re-capture if basis changes

Features

Everything you need, nothing you don't

Notice Builder

Guided wizard pre-populates s.29 fields from your ROPA and compliance data. Fill gaps with prompts. Preview in real time.

Bilingual Output

English and Swahili versions of your notice with translation review status. Publish both simultaneously at your chosen URL.

Version Control

Every notice update creates a new version. Historical versions preserved. Audit trail shows who changed what and when.

Hosted URL

Dira hosts your notice at a customisable URL. Embed in your website, link from consent banner, and share with partners.

Change Detection

Dira detects when your processing activities change and prompts you to update your notice. Never be caught with a stale notice.

Re-notification

When your notice changes materially, Dira sends a data-subject notification workflow and prompts consent re-capture where required.

DPA alignment

Every feature maps to a DPA section

Dira is built from the Act, not retrofitted to it. Here's exactly how each capability addresses your Kenya DPA 2019 obligations.

Product FeatureDPA 2019 SectionWhat it fulfils
All s.29 disclosuress.29(1)Covers all mandatory information: identity, purposes, legal basis, recipients, transfers, retention, and subject rights
Collection-point deliverys.29(1)Notice provided at the time of data collection as required
Version historys.29(2)Maintains updated notices when processing changes, with timestamped audit trail
Bilingual notices.29Ensures notice is intelligible and accessible to Kenyan data subjects in their preferred language
Consent pre-linkages.32Notice presented before or at point of consent, satisfying the "informed" condition for valid consent
Material change notifications.29(2)Proactively notifies data subjects when the notice is materially updated

How it works

Step-by-step workflow

01

Map your processing

Dira pulls from your ROPA to pre-fill processing purposes, data categories, recipients, and retention periods.

02

Complete the wizard

Fill in your organisation details, DPO contact, legal bases, and international transfer details. Dira validates against s.29.

03

Review and publish

Preview your notice in English and Swahili. Approve and publish. Dira provides a hosted URL and HTML embed snippet.

04

Update when things change

When processing changes, Dira alerts you. Update your notice in minutes and trigger subject re-notification if required.

FAQ

Common questions

What must a privacy notice include under DPA 2019?
Section 29(1) requires: identity and contact details of the controller, DPO contact, purposes and legal basis, recipients of the data, cross-border transfers and safeguards, retention periods, data subject rights, right to withdraw consent, right to lodge complaints, and whether provision of data is mandatory or contractual.
When must the privacy notice be provided?
Under s.29, the notice must be provided at the time of data collection for direct collection, and within a reasonable period (not later than one month) for indirect collection. Dira's consent flow integration presents the notice before or at the point of collection.
Do I need a separate cookie policy?
A cookie policy is typically incorporated into or linked from the privacy notice. It should explain which cookies are used, their purpose, and the legal basis. Dira's consent module and privacy notice generator are designed to work together to cover both requirements.
What happens if my privacy notice is out of date?
An inaccurate or outdated privacy notice is a compliance failure that can attract ODPC investigation. Dira's change detection monitors your processing activities and alerts you when an update is needed - so a stale notice gets caught early.

Start using Privacy Notice Generator today

30-day free trial. No credit card required. Full access to all Data Privacy products from day one.

30-day free trial No credit card Cancel anytime