Unsure what the Act requires of you
You know data protection matters, but not what it means day to day for your organisation.
Data Protection Consultancy
Practical Support With Data Protection
Understand and work towards your obligations under Kenya's Data Protection Act, 2019 — from reviewing how you handle personal data to preparing for a breach.
Who This Is For
Personal data everywhere
Customer, patient, student or staff data spread across spreadsheets, email and several systems.
Policies that don't match reality
No privacy policy, or one that describes what you should do rather than what you actually do.
No plan for a breach
If data were lost or leaked tomorrow, no one is sure who would do what.
What's Included
What We Can Do For You
The services below are combined to fit your project. Not every project needs all of them.
Review
- Data protection compliance reviews
- Personal data handling and retention assessments
- Access control and data security recommendations
Documentation
- Privacy policy and data-processing documentation support
- Data protection impact assessment support where applicable
Preparedness
- Data breach preparedness and response planning
- Guidance on applicable Kenyan data protection requirements
- Support preparing for relevant regulatory obligations
Important
What we are, and what we are not
We are not a law firm, a certified auditor or a regulator, and we do not guarantee compliance or certification. We help you understand your data, put sensible controls and documentation in place, and prepare — and we recommend involving a qualified lawyer where legal advice is needed.
Because we also build and run systems, our recommendations cover the technical side: who can access what, how data is stored and backed up, and how long it is kept.
How We Work
From First Conversation to Launch
Every project is scoped to your requirements. We quote one-time fees (setup, design or development) separately from any recurring fees (hosting, maintenance or monthly management), and list third-party costs separately too, so you can see exactly what you are paying for.
Discovery
A conversation about your organisation, your customers and what you need to achieve.
Proposal & scope
A written scope, timeline and quote, with one-time fees and any recurring fees listed separately.
Build & review
We deliver in stages and you review as we go, so there are no surprises at the end.
Launch & support
We go live, hand over, and offer ongoing support or maintenance if you need it.
FAQ
Common Questions
Do we need to register with the Office of the Data Protection Commissioner?
It depends on your organisation and what data you process. We help you work through whether it applies, and recommend legal advice where the position is unclear.
Can you make us compliant?
Compliance is an ongoing responsibility of your organisation. We help you understand the gaps and close them, but we do not guarantee compliance or certification.
Can you help if we have a data breach?
We help you prepare a response plan in advance, and can support the technical investigation if an incident happens.
Are you lawyers?
No. We provide practical and technical support, and recommend a qualified lawyer for legal advice.
Not sure where your organisation stands?
Start with a data protection review and a clear list of what to address first.