It has been just over three years since the Kenyan Data Protection Act 2019 (“DPA”) was enacted.
Its implementation has moved at a brisk pace with, among other things, the establishment of the Office of the Data Protection Commissioner, the introduction of supplementing laws, sustained public awareness campaigns and most recently, regulatory action and enforcement.
