We help businesses understand data protection obligations and provide them with the legal advice to do so.

Data Protection law deals with the protection of individuals’ personal data by imposing legal obligations on companies as to how they must protect the personal data they collect and process in the course of their business. The law governing data and privacy is the Data Protection Act 2019 and the Constitution of Kenya 2010.

Our data protection services can ensure you are protected and secure. Our expert team has experience in a range of areas, including:

1. Drafting privacy policies and notices to best suit your needs
2. Drafting data processing and data sharing agreements to protect you when you need to share personal data with others (including customers, suppliers & contractors)
3. Drafting relevant terms in your standard contracts (including employment contracts)
4. Non-Disclosure Agreements and confidentiality agreements
5. Putting the right measures in place to transfer personal data outside Kenya
6. Ensuring compliance for international clients processing personal data in Kenya
7. Providing data protection audits to check for gaps in compliance
8. Handling complaints and Appearing before the Office of the Data Protection Commissioner (ODPC)

How we can help

We advise businesses on all areas of data protection, privacy law and more. We work closely with you to provide accurate data protection advice to ensure you legally manage your clients’ personal data.

We ensure you collect, store, use and share the personal data of individuals legally and securely and can provide you with the relevant advice to make sure you’re compliant, including:

• Advice on data breaches
• Data sharing and processing arrangements
• Advice on contractual issues relating to ODPC
• Privacy notices and other policy documents
• The rules of ODPC (including use of sensitive personal data and children’s data)
• Advice on practical measures to implement to protect data (including cybersecurity)
• The rules on email marketing and cookies compliance
• International data sharing arrangements (including use of cloud & SaaS services)

We have the expertise to help clients across a wide range of industries, from small start-ups to larger firms. Our strategic, straightforward, pragmatic and client-first approach to data protection law makes us an ideal partner that will work with your specific needs and put your company first.