Technology & Data Protection
Data protection compliance, technology contracts and digital-economy regulation.
Every organisation that collects personal data in Kenya has duties under the Data Protection Act, 2019. We help you meet them and respond when things go wrong.
We also advise on software, cloud and telecommunications agreements and on emerging technology regulation.
What we do
- Registration with the Office of the Data Protection Commissioner
- Privacy notices, data processing agreements and DPIAs
- Data breach response and notification
- Software, SaaS and IT services contracts
- E-commerce, fintech and digital-lending compliance
- Cybercrime and online harm matters
How your matter runs
- 1
Initial consultation
We listen, review your documents and explain where you stand and the options open to you.
- 2
Clear plan and fees
You receive a written scope of work, timelines and a fee quote before any work begins.
- 3
Action
We draft, negotiate, file or appear in court for you, and keep you updated at each stage.
- 4
Resolution and follow-up
We close the matter properly - registration, compliance or enforcement - and keep records safe.
Common questions
Does my business need to register with the ODPC?
Many data controllers and processors must register, depending on turnover, staff numbers and the type of data processed. We assess your position.
How fast must a data breach be reported?
A data controller must notify the Data Commissioner within 72 hours of becoming aware of a breach, where it is feasible.
Tell us what you need. We will tell you where you stand.
Book a consultation in Eldoret, by phone or by video call. We confirm your appointment within one working day.