Partnerships will address data protection challenges - Commissioner Kassait

Data Commissioner Immaculate Kassait has called for more partnerships to address challenges facing data protection.

Kassait said the collaborations need to bring onboard diverse stakeholders to address prevalent issues such as data breaches, identity theft, unauthorized sharing of personal data, and intrusive surveillance.

She said data protection is key in safeguarding individuals' fundamental right to privacy and ensuring that their data is collected, processed, and stored responsibly.

"We are gathered here today because we recognize that no single entity can tackle the challenges of data protection alone. Whether we represent the government, the private sector, or civil society, we each have a role to play in this ecosystem," Kassait said.

She spoke on Monday during the breakfast meeting with regulators, membership bodies and associations on the need to partner to enhance compliance among the regulated entities.

Kassait noted that Kenya has made significant strides in data protection citing the enactment of the Data Protection Act in 2019, and the establishment of the Office of the Data Protection Commissioner as major milestones.

"These developments reflect our nation’s commitment to protecting the privacy of individuals in the face of rapid technological advancements," she said.

"The establishment of the Office has provided the much-needed regulatory framework to enforce data protection standards across all sectors."

The Data Commissioner emphasised the need for stakeholders to join hands in boosting data protection initiatives not only as a regulatory requirement but also as a moral imperative. 

Kassait warned that failure to protect personal data risks infringing on the right to privacy, freedom of expression, and in some cases, even the right to security.

"The misuse of data can lead to discrimination, exclusion, and a loss of trust in institutions. Therefore, the need for concerted efforts across sectors cannot be overstated," she said.

Through partnerships, Kassait said stakeholders will be able to build a culture of responsibility around data usage.

She added that there is a need for civic education targeting individuals, businesses and entities on the importance of data privacy and empowering them to adopt secure and ethical data practices.

"We need to encourage them to comply with the various provisions of the Data Protection Act," she said.

"The first step towards compliance is registration with the Office. Registration is not merely a formality; it is a legal obligation that ensures transparency and accountability."

By registering, Kassait said her office will be able to identify and track entities processing personal data, assess their compliance with the law, and intervene when necessary to protect individuals' data rights.

"For this reason, we are placing strong emphasis on registration compliance as a critical component of data protection in Kenya," she noted.

As a cross-cutting issue that affects every sector of the economy, Kassait reminded stakeholders that data protection requires a coordinated, collaborative approach, with everyone playing their part in ensuring that data is handled responsibly and securely.