Kenya passed the Data Protection Act, 2019 shortly after the groundbreaking European Union’s General Data Protection Regulation (GDPR), to help protect people’s personal information in a digital age. But even after its implementation and establishment of the Office of the Data Protection Commissioner (ODPC) in 2020, many Kenyans, including big corporations, did not understand the law.
As Immaculate Kassait, Kenya’s first Data Commissioner, leaves office after six years of overseeing the implementation of the Data Protection Act, 2019, she speaks to the Business Daily on the difficult task she had of making the country understand this new law.
