Search statutes, citations, and provisions

Provision text match · Kenya · en

Data Protection Act

Cap. 411C

REGISTRATION OF DATA CONTROLLERS AND DATA PROCESSORS - 24. Designation of the Data Protection Officer

Section 24. Designation of the Data Protection Officer Section 24(1)(a) the processing is carried out by a public body or private body, except for courts acting in their judicial capacity; Section 24(1)(b) the core activities of the data controller or data processor consist of processing operations which, by virtue of their nature, their scope or their purpo

Provision text match · Kenya · en

The Data Protection (General) Regulations

Legal Notice 263 of 2021

DATA PROTECTION IMPACT ASSESSMENT - 50. Conduct of data protection impact assessment

Section 50. Conduct of data protection impact assessment Section 50(1) Where a data protection impact assessment is required, a data controller or data processor may conduct the assessment through a template set out in the Third Schedule. Section 50(2) Despite subregulation (1), a format of the data protection impact assessment may be varied by the Data Comm

Provision text match · Kenya · en

The Data Protection (Civil Registration) Regulations

Legal Notice 196 of 2020

SECURITY SAFEGUARDS - 24. Data protection by design or default.

Section 24. Data protection by design or default. Section 24(1) A civil registration entity shall embed data privacy features directly into the design of the database to ensure protection of personal data. Section 24(2)(a) data protection principles; Section 24(2)(b) enforceability mechanisms of the data subject’s rights; Section 24(2)(c) risk management mec

Provision text match · Kenya · en

Capital Markets Act

Cap. 485A

THE CAPITAL MARKETS AUTHORITY - 13C. Data protection principles

Section 13C. Data protection principles Section The principles of personal data protection as set out in the Data Protection Act (Cap. 411C) shall apply to the collection and processing of personal data by the Authority or any person authorized by the Authority . [Act No. 24 of 2019 , Sch.]

Provision text match · Kenya · en

Primary Health Care Act

Act No. 13 of 2023

MISCELLANEOUS PROVISIONS - 24. Adherence to data protection

Section 24. Adherence to data protection Section Every person shall, in the implementation of this Act, adhere to the provisions of the Data Protection Act ( No. 24 of 2019 ), in the collection, processing and transmission of personal data.

Provision text match · Kenya · en

Digital Health Act

Act No. 15 of 2023

CONFIDENTIALITY, PRIVACY AND SECURITY OF DATA - 33. Duty to protect sensitivepersonal data

Section 33. Duty to protect sensitivepersonal data Section 33(1) A data controller ("a natural or legal person, public authority, agency or other body which, alone jointly with others, determines the purpose and means of processing of personal data; or") shall protect sensitive personal data ("any information relating to an identified or identifiable natural

Topics: data security, privacy

Provision text match · Kenya · en

Kenya Citizenship and Immigration Act

Cap. 170

PRELIMINARY - 3A. Personal data of individuals

Section 3A. Personal data of individuals Section Personal data of individuals obtained under this Act shall be held and maintained in accordance with the principles of data protection set out in the Data Protection Act (Cap. 411C). [Act No. 24 of 2019 , 2nd Sch.]

Provision text match · Kenya · en

The Digital Health (Health Information Management Procedures) Regulations, 2025

Legal Notice 76 of 2025

PROCEDURE FOR LODGING, ADMISSION AND RESPONSE TO COMPLAINTS - 35. Exemption of complaints related to personal data

Section 35. Exemption of complaints related to personal data Section A data subject who is aggrieved by a decision of any person under the Data Protection Act, shall lodge a complaint with the Data Commissioner in accordance section 56 of the Data Protection Act (Cap. 411C).

Provision text match · Kenya · en

Civil Aviation (Safety Management) Regulations, 2018

Legal Notice 91 of 2018

SAFETY DATA AND SAFETY INFORMATION COLLECTION, PROCESSING ANALYSIS, PROTECTION, SHARING AND EXCHANGE - 15. Safety data and safety information protection

Section 15. Safety data and safety information protection Section 15(1) Safety data or information obtained, gathered voluntarily or otherwise given to the Authority under the Act or these Regulations shall not be put to any inappropriate use. Section 15(2) The Authority shall accord protection to safety data captured by, and safety information derived from,

Provision text match · Kenya · en

Access to Information Act

Cap. 7M

CONFERMENT ON THE COMMISSION OF OVERSIGHT AND ENFORCEMENT FUNCTIONS AND POWERS - 21. Functions of the Commission

ion 21(1)(b) request for and receive reports from public entities with respect to the implementation of this Act and of the Act relating to data protection and to assess and act on those reports with a view to assessing and evaluating the use and disclosure of information and the protection of personal data; Section 21(1)(c) develop and facilitate public edu

Provision text match · Kenya · en

The Data Protection (Complaints Handling Procedure and Enforcement) Regulations

Legal Notice 264 of 2021

PROCEDURE FOR LODGING, ADMISSION AND RESPONSE TO COMPLAINTS - 5. Register of complaints

Section 5. Register of complaints Section 5(1) The Data Commissioner shall keep and maintain an up to date Register of Complaints. Section 5(2) An entry into the register of complaints shall state the particulars of the complainant and the complaint filed with the Data Commissioner. Section 5(3) The Data Commissioner shall protect the identity of the complai

Provision text match · Kenya · en

Computer Misuse and Cybercrime (The Critical Information Infrastructure and Cybercrime Management) Regulations

Legal Notice 44 of 2024

CRITICAL INFORMATION INFRASTRUCTURE - 31. Baseline security forcritical information infrastructure.

l information infrastructure ("a system designated pursuant to sectionof the Act and includes critical information infrastructure system or data and national critical information infrastructure;") sector; Section 31(1)(a)(i) be reviewed, at least annually, consistent with identified risks and threats affecting the specific critical information infrastructure

Provision text match · Kenya · en

Insolvency Act

Cap. 53

BANKRUPTCY OF NATURAL PERSONS - 148A. Principles of Data Protection

Section 148A. Principles of Data Protection

Provision text match · Kenya · en

The Capital Markets (Investment-Based Crowdfunding) Regulations

Legal Notice 175 of 2022

DUTIES OF A CROWDFUNDING PLATFORM OPERATOR - 33. Data protection and privacy

Section 33. Data protection and privacy Section shall establish appropriate safeguards for ensuring the integrity of the information received and published;

Provision text match · Kenya · en

The Civil Aviation (Aeronautical Telecommunication Communication Systems) Regulations, 2018

Legal Notice 146 of 2018

HIGH FREQUENCY DATA LINK SYSTEM - 72. Operational coverage

Section 72. Operational coverage Section Frequency assignments for High Frequency Data Link shall be protected throughout their Designated Operational Coverage area.

Provision text match · Kenya · en

Employment Act

Cap. 226

PROTECTION OF CHILDREN - 61. Registers ofchildinemployment

blic body, firm, corporation or company;") maintains such a register, the register shall be maintained in accordance with the principles of data protection as set out in the Data Protection Act ( Cap. 411C ).

Provision text match · Kenya · en

The Digital Health (Data Exchange Component) Regulations, 2025

Legal Notice 77 of 2025

Part I—PRELIMINARY - 2. Interpretation.

gital Health Act, 2023 (No. 15 of 2023); “Agency” means the Digital Health Agency established under section 5 of the Act; “aggregate health data” means health data consolidated and stored in a central system; “Board” means the Board of Directors of the Agency constituted under section 8 of the Act; “data exchange” means a secure sharing of health data betwee

Provision text match · Kenya · en

The Dairy Industry (Compliance Officer) Regulations

Legal Notice 18 of 2021

APPOINTMENT, CONDUCT AND DUTIES OF COMPLIANCE OFFICERS - 14. Protection of information

Section 14. Protection of information Section The information or document obtained under these Regulations shall be handled in accordance with any relevant provision of the Data Protection Act (Cap. 411C).

Provision text match · Kenya · en

Mutual Legal Assistance Act

Cap. 75A

INTERCEPTION OF COMMUNICATIONS, PRESERVATION OF COMMUNICATIONS DATA AND COVERT ELECTRONIC SURVEILLANCE - 31. Preservation ofcommunications data

Section 31. Preservation ofcommunications data Section 31(1) A requesting state ("a state requesting for legal assistance and may for the purposes of this Act include an international entity to which Kenya is obligated;") may request Kenya for the preservation of communications data ("the protection of communications data which already exists in a stored for

Provision text match · Kenya · en

National Employment Authority Act

Cap. 227

REGISTRATION - 26. Protection of information

Section 26. Protection of information Section 26(1) The Authority shall, at all times, take measures to ensure protection of data in its possession against abuse or any other adverse consequences. Section 26(2) The right to privacy and other constitutional and statutory rights of the persons seeking employment shall not be compromised.