Kenya
Data Protection Act, 2019 compliance, made simple
ComplianceDesk gives you 18 pre-built Data Protection Act, 2019 controls, an evidence vault, audit-ready reports, and reminders before anything falls overdue — so proving Data Protection Act, 2019 compliance stops being a spreadsheet exercise.
Every Data Protection Act, 2019 control, organised for you
The real control library ComplianceDesk seeds the moment you activate Data Protection Act, 2019 — 18 controls across 6 categories.
Lawfulness & Transparency
- KE-DPA-1.1 Personal data processing has a lawful basis
- KE-DPA-1.2 Privacy notices are provided to data subjects at point of collection
- KE-DPA-1.3 A Record of Processing Activities is maintained
Consent & Legal Basis
- KE-DPA-2.1 Consent is freely given, specific, informed, and unambiguous
- KE-DPA-2.2 Individuals can withdraw consent easily at any time
- KE-DPA-2.3 Alternative lawful bases are documented where consent is not relied upon
Purpose Limitation & Use
- KE-DPA-3.1 Data is collected and used only for specified, explicit, legitimate purposes
- KE-DPA-3.2 Further processing is only for compatible purposes
Data Minimisation & Accuracy
- KE-DPA-4.1 Personal data collection is limited to what is necessary
- KE-DPA-4.2 Data retention periods are specified and enforced
- KE-DPA-4.3 Personal data is accurate and kept current
Security & Confidentiality
- KE-DPA-5.1 Technical measures protect personal data from unauthorized access
- KE-DPA-5.2 Organizational measures prevent loss, alteration, corruption
- KE-DPA-5.3 Cyber incidents (data breaches) are reported to ODPC within 72 hours
Data Subject Rights
- KE-DPA-6.1 Data subjects can access their personal data upon request
- KE-DPA-6.2 Data subjects can request correction of inaccurate data
- KE-DPA-6.3 Data subjects can request erasure
- KE-DPA-6.4 Data subjects can obtain portable copy of their data
Frequently asked questions
How many controls does ComplianceDesk track for Data Protection Act, 2019?
18, organised into 6 categories, ready to assign to an owner as soon as you activate the framework.
Can I track Data Protection Act, 2019 alongside other frameworks?
Yes — most teams activate several frameworks at once. Controls that overlap across frameworks can share the same evidence, so you don't collect the same document twice.
How long does it take to set up Data Protection Act, 2019 in ComplianceDesk?
Activating Data Protection Act, 2019 instantly seeds its full control library. Most teams assign owners and get their first controls moving within a day.
Related guides
Other Kenya frameworks
See your full compliance picture
193 frameworks, one system of record.