Data Protection & Privacy Law
Ensuring strict compliance with the Kenya Data Protection Act and global privacy standards.
Strategic Approach & Practice Philosophy
The collection and processing of personal data carries important legal and compliance responsibilities for organisations. We assist businesses and organisations in understanding their obligations under Kenya's Data Protection Act, 2019 and in developing practical measures to protect personal information, manage privacy risks and integrate compliance into their day-to-day operations. We provide outsourced Data Protection Officer and privacy compliance support to organisations that require ongoing data protection expertise without maintaining a full-time in-house function.
Scope of Legal Services & Work Done
Structured documentation, strategic negotiation, regulatory compliance, and courtroom advocacy.
Data Protection Compliance & Advisory
End-to-end alignment with the Office of the Data Protection Commissioner (ODPC) requirements.
- Data Protection Act (DPA 2019) compliance audits and Data Protection Impact Assessments (DPIAs)
- Registration of Data Controllers and Data Processors with the ODPC
- Drafting comprehensive customer Privacy Policies and Cookie Notices
- Data Processing Agreements (DPAs) and third-party vendor contracts
- Cross-border data transfer agreements and standard contractual clauses
- Employee and workplace data privacy policies and employee consent forms
- Data retention, subject access requests (SARs), and data lifecycle management
- Data breach notification protocols and ODPC incident response advisory
Outsourced Data Protection Officer (DPO) & Ongoing Support
We provide outsourced Data Protection Officer and privacy compliance support to organisations that require ongoing data protection expertise without maintaining a full-time in-house function.
- Acting as external Designated Data Protection Officer (DPO) registered with the ODPC
- Continuous privacy compliance monitoring, policy updates, and risk auditing
- Handling Data Subject Access Requests (DSARs), consent revocations, and complaints
- Liaison with the Office of the Data Protection Commissioner (ODPC) during inquiries or audits
- Annual data governance reviews and employee privacy training workshops
Client Testimonials & Endorsements
"Wanjiru Nyaguthi & Company Advocates provided exceptional counsel during our regional joint venture structuring. They are truly strategic partners."
"Their conveyancing team is simply best. Navigating sectional properties conversions was seamless with Purity and her team. Transactions that usually take months were completed expeditiously."
Discuss Your Data Protection & Privacy Law Matter with Our Advocates
Whether structuring private family wealth, resolving contentious disputes, or requiring urgent High Court representation, our chambers provide discreet and strategic solutions.