Enhancing data protection in Kenya: evaluating the ambiguities in data retention policies and their impact on privacy and security

Abstract

The President signed into law the Kenya Data Protection Act, 2019 on 8th November 2019. The Data Protection Act is an answer that aimed at ensuring Kenyans were empowered with enforceable privacy rights over their personal information, while providing clear guidelines for private and public institutions to handle their users’ data with care, due to the increased call for protection of both personal and private information, which may be readily and easily accessible in this digital era.