Kenya's primary data protection law, enforced by the Office of the Data Protection Commissioner (ODPC).
Obligations on any data controller or processor handling personal data in or from Kenya — registration, lawful processing, data subject rights, security, breach notification, impact assessments and cross-border transfer rules.
This is a legal obligation, not a certification. Orvella provides advisory support; it is not a law firm and does not provide legal advice.