Data Protection and Privacy Experience

Kenya is at the infancy stages of its data protection and privacy journey with the Data Protection Act being less than 3 years old. Keeping up to date with changes in data protection regulations, and best practices, can often be challenging for organisations.

At SMC, we pride ourselves in assisting clients in safeguarding their organisation from non-compliance risks while ensuring that commercial aims and objectives are not adversely impacted.

In terms of our Data Protection advisory and consulting services, we offer the following:

• Assessment of regulatory requirements in data management and data privacy– we can summarise the data privacy requirements relevant to a client‘s business and also provide information about future changes in data protection in Kenya
• Data protection risk assessment audit – we evaluate whether a company or business meets the compliance thresholds under the Data Protection Act in effective. We also review data management and privacy policies and examine the related employee and/or third-party data transfer and processing agreements as well.
• Review of commercial contracts for compliance with data protection laws – we review commercial contracts that have elements of data protection and advise on how to best structure the contracts to achieve compliance
• Registration of Data Controllers and Processors with the Office of the Data Commissioner – we register organisations that process data or control data to achieve compliance under the Data Protection Act.
• Staff Compliance Training – we handle customised staff trainings for high-level executives and HoDs, mid-level staff and general staff on Data Protection Compliance.