Kenya’s Office of Data Protection (ODPC) is targeting education, hospitality, and property management sectors during the next financial year in a countrywide investigations to enforce data privacy compliance.
- •The operations comes as the body, which came into being in 2019, has been witnessing rising cases of complaints from individuals in regards to data breaches which has seen companies such as Oppo, Nova Pioneer Kenya substantive fines.
- •In May, the ODPC fined Nova Pioneer Kenya, a prominent private school group KSh 0.5 million for unauthorized sharing and use of students’ data.
- •Through inspections, the sectors will be evaluated on how they manage personal data and to provide guidance that helps them fulfil their legal obligations.
“It is essential to recognise that these inspections are not punitive by nature. Instead, they serve as a collaborative effort to improve data protection practices across your sectors,” said Data Commissioner Immaculate Kassait.
“It is about more than just legal compliance; it reflects a collective commitment to upholding the fundamental right to privacy,” she stated. Kassait further noted, “We are here to foster compliance, not to instill fear. Awareness and education are key to developing a robust data protection culture.”
In November 2022, ODPC penalised Oppo Kenya for infringing on the privacy of a complainant by using their photo on the company’s Instagram account. The following year it found Whitepath and Regus Kenya guilty for failing to comply with enforcement notices. Each company parted with KSh 5 million in penalties.
The inspections will play a crucial role in evaluating how organizations handle personal data, offering insights that will refine guidance and better serve stakeholders. By collaborating with various sectors, the Office aims to embed compliance into the culture of these industries, fostering greater transparency, accountability, and trust.
The Data Commissioner noted that data protection is crucial for organisations as it mitigates risks associated with data breaches, which can result in significant financial losses, legal penalties, and reputational damage.
“By prioritizing data protection, businesses can ensure continuity and stability. In a landscape marked by rising identity theft and cyber threats, fostering customer confidence is vital; organizations that maintain strong data protection practices can cultivate customer loyalty and demonstrate their commitment to trust,” she added.
Furthermore, she noted that stakeholders in the hospitality, education, and property management sectors are facing increasing scrutiny as customers become more aware of their rights.
