Economy

Uhuru nominates IEBC official for data protection job

Immaculate Kassait

Ms Immaculate Kassait. FILE PHOTO | NMG

edwinmutai_img

Summary

  • President Uhuru Kenyatta has nominated electoral agency official Immaculate Kassait for the appointment to the position of Data Protection Commissioner.
  • Speaker Justin Muturi told Parliament that Mr Kenyatta had forwarded the name of the nominee for vetting.
  • Ms Kassait is the current director of voter education, partnerships and communications at the Independent Electoral and Boundaries Commission (IEBC).

President Uhuru Kenyatta has nominated electoral agency official Immaculate Kassait for the appointment to the position of Data Protection Commissioner.

Speaker Justin Muturi told Parliament that Mr Kenyatta had forwarded the name of the nominee for vetting.

Ms Kassait is the current director of voter education, partnerships and communications at the Independent Electoral and Boundaries Commission (IEBC).

“I wish to report to the House that I have received a message from His Excellency the President seeking the National Assembly’s approval for the appointment of Ms Immaculate Kassait as the Data Commissioner,” Mr Muturi said in a communication to the House.

The Data Protection Act 2019, requires the President to nominate, and with approval of the National Assembly, appoint the Data Commissioner.

Ms Kassait had been shortlisted for the job by the Public Service Commission alongside 12 candidates. The job, which was advertised on August 18 attracted 126 applicants who were interviewed between September 21-22.

The Data Protection Act 2019, gives the commissioner sweeping powers on the investigation of data breaches. These include powers of entry and search and issuing administrative fines.

Where personal data has been accessed or acquired by an unauthorised person, and there is a real risk of harm to the owner of this data, a data controller is required to notify the commissioner.

Offences under the Act attract a fine of up to Sh5 million and or imprisonment for a term not exceeding to 10 years or both.

The holder of the office establishes and maintains a register of data controllers and processors while exercising oversight on data processing operations.