Professions employed in the data protection field have seen their salaries rise over the years in what the survey says indicates an appreciation of their role.
A majority of Kenya’s data protection officers (DPOs) –69.6 percent— are drawn from the legal fields, according to a new survey which shows that privacy laws have expanded employment opportunities for lawyers.
DPOs are among the new professions created by data protection laws passed to safeguard personal privacy and ensure data is not transferred outside Kenya in an environment where the government and commercial operations are increasingly digitised.
The DPOs are tasked with advising organisations on compliance with the Data Protection Act besides facilitating capacity building for staff in data processing operations.
“The survey on the core professions of DPOs highlights a substantial 69.6 percent of DPOs come from legal fields. This majority underscores the importance of understanding legal frameworks to ensure compliance and mitigate risks,” reads the June 2024 survey by the Data Privacy and Governance Society of Kenya.
The survey found that internal DPOs’ monthly remuneration varies widely from less than Sh100,000 to more than Sh500,000, influenced by various factors including experience and an organisation’s budget.
Prior to the rollout of the Data Protection Act, lawyers and advocates were mostly employed in the traditional litigation, conveyancing, advisory, compliance and due diligence fields.
As the data protection laws are implemented, over time it is expected that thousands of new jobs will be created spanning DPOs, data processors and controllers.
Organisations may hire DPOs internally or outsource the role to consultants, as implementation of the privacy laws enters the fifth year in October.
Besides lawyers, the new field has also created new opportunities for professionals from the risk, compliance and technology world.
“Additionally, 13 percent of DPOs are from risk and compliance professions, emphasising the significance of managing and mitigating data-related risks,” says the survey.
“Another 13 percent come from technical backgrounds, or "techies," indicating the need for technical expertise in implementing and managing data protection measures. Finally, 4.4 percent of DPOs are data scientists, bringing analytical perspectives to the role.”
The survey added that this combination of skills helps to safeguard sensitive information comprehensively.
Professions employed in the data protection field have seen their salaries rise over the years in what the survey says indicates an appreciation of their role.
Among respondents who disclosed their income, 35.7 percent earn less than Sh100,000 while 31 percent earn between Sh100,001 and Sh250,000. Another 26.2 percent earn between Sh250,001 and Sh500,000 and the remaining 7.1 percent are paid more than Sh500,001.
Organisations have been hiring data professionals to comply with the laws which impose jail terms of up to 10 years and/or fines of up to Sh5 million. Mobile loans provider Whitepath and office space firm Regus Kenya are among the companies that have been fined Sh5 million each.
