Summary
-
The ODPC has received 9,061 complaints, with 357 cases heard and determined and 134 enforcement notices issued.
-
The Commission has also issued 184 compensation orders, resolved 84 cases through Alternative Dispute Resolution (ADR), and imposed 20 penalty notices to ensure compliance.
-
Kassait noted that many complaints involve school-going children, terming this a major concern.
-
Unauthorised disclosure of personal data remains the leading violation, followed by unlawful data collection, mainly by surveyors and marketers.
-
Buildings, hotels, and institutions that collect personal data have been urged to dispose of the data after 30 days.
Mombasa, Kenya — The Office of the Data Protection Commissioner (ODPC), in partnership with key stakeholders, has kicked off a three-day national conference in Mombasa, culminating in the commemoration of Data Privacy Day.
Speaking during a media engagement on the sidelines of the conference, Data Protection Commissioner Immaculate Kassait said the Commission has made significant strides in addressing data privacy violations since the enactment of the Data Protection Act.
Kassait revealed that the Complaints, Investigations and Enforcement Department has received a total of 9,061 complaints since the law came into force. Out of these, 357 cases have been heard and determined, while 134 enforcement notices have been issued against non-compliant entities.
Additionally, the ODPC has issued 184 compensation orders, resolved 84 cases through the Alternative Dispute Resolution (ADR) framework, and imposed penalty notices in 20 cases to ensure adherence to data protection regulations.
“We are not going to relent on matters of data protection. Many of the complaints we are handling involve school-going children, which is deeply concerning,” Kassait said.
She emphasized the importance of collaboration with the media in sensitizing the public on data privacy rights and responsibilities.
We have made notable progress in data protection, but we need the media to work with us in amplifying these issues and guiding the public,” she added.
According to the Commissioner, unauthorised disclosure of personal information tops the list of reported violations, accounting for 505 cases. This is followed by unlawful processing of data, where organizations collect personal information without a legal basis. Kassait noted that surveyors and marketers are among the leading offenders in this category.
She further urged institutions such as buildings, hotels, and businesses that collect personal data daily to ensure such information is securely disposed of after 30 days, in line with data protection principles.
Kassait also called on members of the public to remain vigilant and informed about their data privacy rights, urging them to report violations to the Commission.
On his part, Media Council of Kenya CEO David Omwoyo underscored the need for closer collaboration between the ODPC and the media to effectively reach and educate the public on data protection matters.
He noted that the media plays a critical role in shaping public awareness and fostering accountability in the protection of personal data across the country.
About The Author
