Local supermarket chain Naivas Limited breached the law by failing to report theft of customer data within 72 hours as is required by law and could face a Sh5 million penalty, a Senate committee heard on Tuesday.
Appearing before the Senate ICT committee, Data Commissioner Immaculate Kassait said the supermarket chain did not follow the law in reporting the ransomware attack that happened in April this year.
