All instruments Act Kenya: Data Protection Act, 2019 (No. 24 of 2019) No summary is recorded for this instrument. Adopted Not yet reviewed English Open the source (opens in a new tab) Suggest a correction Details Full text Details Identity Title Data Protection Act, 2019 (No. 24 of 2019) Original title Not recorded Instrument ID ke-data-protection-act-2019 Type Act Status Adopted Jurisdiction and publisher Jurisdiction Kenya Publisher Not recorded Language English Dates and versions Date November 15, 2019 Versions Enacted · November 15, 2019 Classification Policy areas Not recorded Source Source URL https://www.odpc.go.ke/wp-content/uploads/2024/02/TheDataProtectionAct__No24of2019.pdf Retrieved August 29, 2026 License Unknown. Follow the publisher’s terms. Access note Not recorded Full text 77,687 characters Original text, English · 77,687 characters in 1 part Load the full text Download as .txt Outline (43 headings) PART I—PRELIMINARY PART II—ESTABLISHMENT OF THE OFFICE OF PART III—REGISTRATION OF DATA PART IV—PRINCIPLES AND OBLIGATIONS OF PART V—GROUNDS FOR PROCESSING OF 2019 Data Protection No. 24 PART VI—TRANSFER OF PERSONAL DATA PART VII — EXEMPTIONS PART VIII—ENFORCEMENT PROVISIONS PART IX—FINANCIAL PROVISIONS PART X —PROVISIONS ON DELEGATED PART XI—MISCELLANEOUS PROVISIONS 3. The object and purpose of this Act is— Object and PART II—ESTABLISHMENT OF THE 10. The Data Commissioner may, subject to such Delegation by the 11. The Office of the Data Commissioner shall Vacancy in the 14. The Data Commissioner and staff of the Office the Data 15. The Data Commissioner shall take the oath set out 17. The Data Coir‘missioner or any staff of the Office Protection from PART III— REGISTRATION OF DATA 20. A registration certificate issued under section 19 Duration of the 22. The Data Commissioner may, on issuance of a Cancellation or 23. The Data Commissioner may carry out periodical Compliance and 26. A data subject has a right — Rights of a data 27. A right conferred on a data subject may be Exercise of rights 29. A data controller or data processor shall, before 36. A data subject has a right to object to the Objecting to PART V— GROUNDS FOR PROCESSING OF 44. No category of sensitive personal data shall be Processing of 45. Without prejudice to section 44, sensitive personal Permitted grounds PART VI —TRANSFER OF PERSONAL DATA 48. A data controller or data processor may transfer Conditions for 50. The Cabinet Secretary may prescribe, based on through a data PART VII— EXEMPTIONS 54. The Data Commissioner may prescribe other Exemptions by the 61. A person who, in relation to the exercise of a Data 63. In relation to an infringement of a provision of this Administrative 66. The Data Commissioner may apply to a court for a Preservation 67. The funds and assets of the Office shall consist Funds of the 69. The annual accounts of the Office shall be Accounts and PART X —PROVISIONS ON DELEGATED POWERS Article 2 (6) of the Constitution. 75. The laws specified under the Second Schedule are Consequential The outline comes from headings detected in the text, so it might miss some or include extras. JavaScript is turned off. To read the text, open each of its 1 part: Part 1 928 of 1,262, newest first Previous Russia: notice establishing the Ministry of Economic Development as lead AI policy body (CSET translation) Next Facial Recognition Technology Warrant Act of 2019 Show a random instrument All instruments