Starting 14th July 2022, you will be required to register with the ODPC as required in the Data Protection Act and the regulations.
Who should register?
– Companies; public, private, NGOs, and even Churches-except entities with an annual turnover of less than 5 million and less than 10 employees.;
– Individuals who handle personal data; and
- Entities that process personal data for canvassing political support, gambling, crime prevention, and prosecution of offenders.
Why must you register?
The Data Protection Act and the Data Protection (Registration of Data Controllers and Data Processors) Regulations require that all data controllers and processors be registered with the Office of the Data Protection Commissioner.
Are there any consequences for non-registration?
Failure to register with the ODPC carries a general penalty of a fine not exceeding KES. 3 million (USD. 30,000) or an imprisonment term not exceeding ten years, or both.
