The Office of the Data Protection Commissioner (ODPC) has called upon members of the public to always report cases of misuse of personal data by organisations.
During a one-day National Data Protection Advocacy Workshop held in Ol Kalou, the ODPC pointed out that the right to the protection of personal data for members of the public is outlined in data protection laws, urging members of the public to exercise their rights by reporting any misuse of their data.
The ODPC team led by Mr Abdullahi Ali sensitised the participants on their rights as data subjects, which include the right to be informed why their data is being collected, the right to rectification of the data given if it is inaccurate, the right to consent, and the right to object to the collection of their data, among others.
However, Mr. Ali clarified that some rights are absolute, such as the right to be informed, while others are limited or not absolute, for instance, the right to consent.
“Some institutions are mandated by law to get information; hence, they may not rely on the consent of the data subject. However, such institutions must ensure the data collected is secured as outlined in data protection laws,” noted Ali.
Norman Atella, one of the facilitators, highlighted the importance of raising awareness across the country, sensitising people to the rights to personal data protection, and empowering individuals in protecting their privacy, as well as fostering a culture of compliance with their rights.
He, however, noted the right to consent is voluntary, adding that it is unethical for a data controller to use incentives to get data from members of the public.
Members of the public were urged to take control of their data and avoid negligence in sharing personal information.
The team highlighted the importance of reporting cases of data misuse, which can be done through lodging the complaints online through the ODPC website or in person at ODPC offices in Nairobi, Kisumu, Mombasa, Eldoret, Machakos, Nyeri and Nakuru.
The ODPC revealed that as of March 2025, the office had received 7,128 complaints and determinations on 215 cases.
Among these 215 cases, penalties have been imposed on 10 entities, 103 compensations have been issued, and the other 39 have been resolved through Alternative Dispute Resolution.
Nyandarua County Commissioner Abdirisack Jaldesa, who officially opened the workshop, appreciated the ODPC for the workshop to enlighten the public on the importance of data protection.
The CC noted the data collected during Huduma Number registration prompted the establishment of the ODPC, which was mandated with the regulation of data collected.
The CC called upon members of the public to continue registering with the Social Health Authority (SHA) despite the teething problems facing it.
The workshop had drawn members from bodaboda, farmers, youths, community health promoters and staff from various government institutions, among others.
By Kimani Tirus
