Office of the Data Protection Commissioner

Home » Ministries » Information Communications And The Digital Economy » State Department For Information Communication Technology and Digital Economy » Office of the Data Protection Commissioner

Overview

website
info@odpc.go.ke

The Office of the Data Protection Commissioner (ODPC) was established under the Data Protection Act, 2019 to oversee data privacy in Kenya. Operational since 2020, its mandate includes protecting personal data, promoting compliance with data protection laws, and ensuring transparency. The ODPC also monitors data processing practices, addresses data subject complaints, and educates the public and organizations on data privacy. Its role aligns with global data protection standards like the European Union’s GDPR, focusing on safeguarding citizens’ data while facilitating responsible data use for businesses and government entities.

CEO: Immaculate Kassait

Immaculate Kassait is the Data Protection Commissioner of Kenya, appointed in November 2020. She holds a Bachelor’s degree in Law from the University of Nairobi and a postgraduate qualification in data protection. Kassait has extensive experience in governance, having previously served at the Independent Electoral and Boundaries Commission.

Functions

  • Enforce Data Protection Laws: Ensure compliance with the Data Protection Act and related regulations.
  • Oversee Data Processing: Monitor and regulate the processing of personal data by public and private entities.
  • Protect Personal Data: Safeguard the privacy and confidentiality of personal data held by data controllers and processors.
  • Promote Public Awareness: Educate individuals and organizations about data protection rights and responsibilities.
  • Handle Complaints: Address complaints and grievances related to violations of personal data privacy.
  • Data Subject Rights: Ensure individuals can exercise their rights over their personal data, such as access, correction, and erasure.
  • Register Data Controllers and Processors: Maintain a register of entities processing personal data.
  • Conduct Investigations: Investigate and take action on violations of data protection laws.
  • Advise Government: Provide guidance to government entities on data protection practices and policies.
  • International Cooperation: Collaborate with international bodies to align Kenya’s data protection framework with global standards, such as the GDPR.

Important Links

Address & Contacts

  • Office of the Data Protection Commissioner
  • P.O Box 30920-00100 G.P.O Nairobi, Kenya
  • Britam Towers 12th Floor Hospital Road, Upperhill, Nairobi Kenya.
  • info@odpc.go.ke
  • 207801800