All firms will have to obtain clearance from the industry regulator before they can collect personal data from Kenyans if a proposed law is passed in its present form.
The Data Protection Bill, 2019 requires all data processors and controllers –whether small and medium-sized enterprises (SMEs) or multinationals – to be registered by the Communications Authority of Kenya (CA).
