Data Commissioner Immaculate Kassait has emphasized the need for increased partnerships to tackle the challenges of data protection. Kassait highlighted the importance of involving diverse stakeholders to address issues such as data breaches, identity theft, unauthorized sharing of personal information, and intrusive surveillance.
“Data protection is essential for safeguarding individuals’ fundamental right to privacy and ensuring that their data is collected, processed, and stored responsibly,” Kassait stated. She added, “We are gathered here today because we recognize that no single entity can tackle the challenges of data protection alone. Whether we represent the government, the private sector, or civil society, we each have a role to play in this ecosystem.”
Speaking at a breakfast meeting with regulators, membership bodies, and associations, Kassait stressed the importance of collaboration to enhance compliance among regulated entities. She noted Kenya’s significant progress in data protection, citing the enactment of the Data Protection Act in 2019 and the establishment of the Office of the Data Protection Commissioner as major achievements.
“These developments reflect our nation’s commitment to protecting the privacy of individuals in the face of rapid technological advancements,” Kassait said. “The establishment of the Office has provided the much-needed regulatory framework to enforce data protection standards across all sectors.”
The Data Commissioner emphasized that stakeholders need to unite to advance data protection not just as a regulatory obligation but as a moral necessity. She warned that failing to protect personal data could infringe on the right to privacy, freedom of expression, and in some cases, the right to security.
“The misuse of data can lead to discrimination, exclusion, and a loss of trust in institutions. Therefore, the need for concerted efforts across sectors cannot be overstated,” she noted.
Kassait urged stakeholders to build a culture of responsibility around data usage through partnerships and emphasized the importance of civic education for individuals, businesses, and entities on data privacy. “We need to encourage them to comply with the various provisions of the Data Protection Act,” she concluded.
“The first step towards compliance is registration with the Office. Registration is not just a formality; it is a legal requirement that ensures transparency and accountability,” Kassait stated. She explained that by registering, her office will be able to identify and monitor entities handling personal data, evaluate their compliance with the law, and intervene when needed to safeguard individuals’ data rights.
“For this reason, we are emphasizing registration compliance as a crucial aspect of data protection in Kenya,” Kassait emphasized.
She reminded stakeholders that data protection, being a cross-cutting issue impacting every sector, requires a coordinated and collaborative approach. “Everyone must play their part in ensuring that data is managed responsibly and securely,” Kassait added.
