After the enactment of the Kenya Data Protection Act (the DPA) in 2019, and the establishment of the Office of the Data Protection Commissioner in 2020, the relevant regulations necessary to give effect to many of the provisions contained in the DPA came into effect on 11th February 2022 while registration of data processors and data controllers commences on 14th July 2022. The legislation applies to all businesses that handle personal data in Kenya.
