The Office of the Data Protection Commissioner (ODPC) is set to launch the fourth regional office as it commemorates Data Privacy Day 2025.
The Eldoret regional office will be inaugurated on Tuesday(today) during the event expected to be graced by Information, Communications, and the Digital Economy Cabinet Secretary William Kabogo.
The new regional office follows Mombasa, Nakuru, and Kisumu. The ODPC also has a presence in Huduma Centres in Nyeri and Garissa, which serve as focal points for data protection services in their respective regions.
The 2025 Data Privacy day themed ‘Safeguarding Personal Data to Spur Digital Transformation & Economic Development’, with Data Commissioner Immaculate Kassait reiterating that as the nation embraces rapid technological advancements, our progress needed to align with a commitment to protecting personal data and fostering trust in the digital age.
“Today’s discussions are timely, as they underscore the importance of digital transformation in driving economic development while safeguarding our citizens’ privacy,” said the data commissioner during a media breakfast briefing in Eldoret.
Commissioner Kassait further emphasized the pivotal role of the media in promoting an understanding of personal data protection and the crucial role it has played in disseminating news since the enactment of the Data Protection Act in 2019 and the operationalization of the ODPC in 2020.
In line with its mandate to regulate data protection in Kenya, Kasait said the ODPC had made progress in implementing the Data Protection Act by registering more than 8000 data controller processors, demonstrating increasing compliance with data protection regulations.
“ODPC has also expanded its efforts to provide sector-specific guidance aimed at streamlining data processing operations in various identified sectors, adding that they have published eight sector-specific guidance notes to cover a range of sectors including digital credit providers, communication, education, and the health sector,” she added
“The Office has conducted 84 audits and inspections of data controllers and processors to ascertain their compliance with the Data Protection Act, 2019, and its accompanying regulations. We have issued Issuance of 192 advisories and conducted 138 Data Protection Impact Assessments (DPIAs),” she said
The Data commissioner, accompanied by the Media Council of Kenya Chief Executive Officer David Omwoyo, revealed that the office of the ODPC had received a total of 6,817 Complaints and investigated and resolved a total of 6,516 complaints.
“The ODPC has taken swift action on these complaints, issuing 195 determinations, 100 enforcement notices, and 12 penalty notices to ensure that data controllers and processors comply with data protection regulations,” she said
The Office she added, had also resolved 27 cases under the Alternative Dispute Resolution (ADR) framework.
In his remarks, Omwoyo encouraged journalists to gain insights into the expectations from ODPC as a regulator regarding potential malpractices by Data Controllers and Data Processors regarding data protection issues.
“By fostering a deeper understanding of these matters, the media can play a pivotal role in promoting responsible data handling practices and advocating for enhanced data privacy safeguards within society,” said the MCK CEO.
By Judy Too and Kiptanui Cherono