ProductsData PrivacyPrivacy Training
Kenya DPA 2019 - s.24 - DPO & Staff Awareness Obligations

Build a privacy-aware organisation - at scale

Create and deliver DPA 2019 training to your entire team without a training budget. Course builder, magic-link enrolment, campaign management, completion tracking, and downloadable certificates.

Privacy Training product screenshot

Why this matters

Built for your compliance outcomes

No-code course builder

Create courses without IT help

  • Module and quiz builder
  • DPA 2019 content library included
  • Customise to your policies
  • Video and document support

Magic-link enrolment

Zero friction for trainees

  • Email-only enrolment, no accounts
  • One-click access via magic link
  • Works on mobile
  • No IT involvement required

Campaign management

Track who's done what, when

  • Training campaigns per department
  • Completion and pass-rate dashboards
  • Automated reminder emails
  • Escalate to manager if overdue

Compliance certificates

Proof of training for ODPC

  • Downloadable PDF certificates
  • Branded with your organisation
  • Timestamped and signed
  • Bulk export for audit evidence

Features

Everything you need, nothing you don't

Course Builder

No-code builder for modules, quizzes, and assessments. Pre-built DPA 2019 content library to start from. Custom branding.

Magic-Link Access

Enrol trainees by email. They access the course via a one-click magic link - no account creation, no IT involvement.

Campaign Manager

Group trainees into campaigns by department, role, or entity. Set deadlines, track completion, and send automated reminders.

Completion Dashboard

Real-time view of who has completed training, pass rates per module, and overdue trainees. Drill down by team or date.

Certificates

Auto-generated, downloadable PDF certificates on completion. Branded, timestamped, and bulk-exportable for audit evidence.

Automated Reminders

Configurable reminder schedule - email nudges at 7 days, 2 days, and on deadline. Manager escalation for overdue trainees.

DPA alignment

Every feature maps to a DPA section

Dira is built from the Act, not retrofitted to it. Here's exactly how each capability addresses your Kenya DPA 2019 obligations.

Product FeatureDPA 2019 SectionWhat it fulfils
Staff DPA awareness trainings.24(7)(c)Fulfils DPO responsibility to facilitate capacity building for staff involved in data processing
DPO knowledge requirementss.24Supports DPO in maintaining expert knowledge of data protection law
Training recordss.25Documented evidence of training for accountability and ODPC audit purposes
Completion certificatess.25Tangible evidence of staff awareness for ODPC inspection and internal governance
Campaign managements.24Systematic approach to ensuring all relevant staff receive appropriate privacy training
Role-based coursess.24Targeted training based on the data each role processes and the associated risk levels

How it works

Step-by-step workflow

01

Build your course

Start from Dira's DPA 2019 content library or build from scratch. Add modules, quizzes, and policy acknowledgement steps.

02

Create a campaign

Group your trainees by department or role. Set a completion deadline and configure automated reminder emails.

03

Send magic-link invitations

Dira emails each trainee a one-click access link. No account creation needed. Works on any device.

04

Track, remind, certify

Monitor completion in real time. Automated reminders chase overdue trainees. Certificates issued automatically on completion.

FAQ

Common questions

Is staff privacy training required under Kenya DPA 2019?
The Act does not prescribe a specific training frequency, but the DPO's responsibilities under s.24(7)(c) include facilitating capacity building for staff involved in data processing. Training is also a key element of the accountability principle under s.25. ODPC inspections routinely ask for evidence of staff training.
Who needs privacy training?
All staff who handle personal data in their role should receive appropriate training. Higher-risk roles (HR, finance, marketing, IT, customer service) need more detailed training covering their specific obligations. Dira's campaign manager lets you create role-specific training tracks.
How often should I train staff?
Best practice is annual refresher training for all staff, with additional training when policies change or after a data breach or near-miss. Dira's campaign manager supports recurring annual campaigns and ad-hoc campaigns for specific events or policy changes.
What evidence of training do I need for an ODPC audit?
You need records showing: which staff completed training, when they completed it, what the training covered, and their assessment scores. Dira's completion dashboard and certificate bulk export provide all of this in a format suitable for ODPC inspection.

Start using Privacy Training today

30-day free trial. No credit card required. Full access to all Data Privacy products from day one.

30-day free trial No credit card Cancel anytime