Data protection compliance for growing Kenyan businesses
Data protection becomes a business issue as soon as an organisation collects information about customers, staff, suppliers or website visitors. Compliance should be designed into daily operations.
Know your data
Map the personal data you collect, why you need it, where it is stored, who receives it and how long it is retained.
Use a lawful and transparent process
People should receive clear privacy information. Every processing activity needs a defensible purpose and appropriate controls.
Manage service providers
Cloud platforms, marketing tools, payroll services and other processors should be covered by suitable contractual terms and security expectations.
Prepare for incidents and requests
Assign responsibility for access requests, correction, deletion, objections and breach response.
This article provides general information, not legal advice for a particular matter.
Book a consultation