Knowledge Base Category: THE DATA PROTECTION (GENERAL) REGULATIONS, 2021

Sorry, No Knowledgebase Item Available!

PART I - PRELIMINARY 4

  1. 3—Object and purpose of the Regulations
  2. 3-Exemption
  3. 2-Interpretation.
  4. 1-Citation

Show all 4 posts

PART II— ENABLING THE RIGHTS OF A DATA SUBJECT 10

  1. 13—Exercise of rights by others.
  2. 12—Right of erasure
  3. 11—Data portability request
  4. 10—Rectification of personal data
  5. 9—Data access request
  6. 8—Objection to processing
  7. 7—Restriction to processing
  8. 6—Mode of collection of personal data
  9. 5—Lawful basis for processing
  10. 4—Processing on the basis of consent

Show all 10 posts

PART III—RESTRICTIONS ON THE COMMERCIAL USE OF PERSONAL DATA 5

  1. 18—Requests for restriction of further direct marketing
  2. 17—Mechanisms to comply with opt out requirement
  3. 16—Features of an opt out message.
  4. 15—Permitted commercial use of personal data
  5. 14—Interpretation of commercial purpose

Show all 5 posts

PART IV—OBLIGATIONS OF DATA CONTROLLERS AND DATA PROCESSORS 8

  1. 26—Requirement for specified processing data to be done in Kenya
  2. 25—Obligations of a data processor
  3. 24—Contract between data controller and data processor
  4. 23—Data protection policy
  5. 22—Automated individual decision making.
  6. 21—Sharing of personal data
  7. 20—Requests to deal anonymously or pseudonymously
  8. 19—Retention of personal data

Show all 8 posts

PART V—ELEMENTS TO IMPLEMENT DATA PROTECTION BY DESIGN OR BY DEFAULT 10

  1. 36—Elements for principle of fairness
  2. 35—Elements for principle of storage limitation.
  3. 34—Elements for principle of accuracy
  4. 33—Elements for principle of data minimization
  5. 32—Elements for principle of integrity, confidentiality and availability
  6. 31—Elements for principle of purpose limitation.
  7. 30—Elements for principle of transparency
  8. 29—Elements for principle of lawfulness
  9. 28—Elements of data protection by design or default
  10. 27. Data protection by design or default

Show all 10 posts

PART VI—NOTIFICATION OF PERSONAL DATA BREACHES 2

  1. 38—Notification to Data Commissioner
  2. 37—Categories of notifiable data breach

Show all 2 posts

PART VII—TRANSFER OF PERSONAL DATA OUTSIDE KENYA 10

  1. 48—Provisions for the agreement to cross boarder transfer
  2. 47—Subsequent transfers
  3. 46—Transfer on basis of consent
  4. 45—Transfers on the basis of necessity
  5. 44—Transfers on the basis of an adequacy decision
  6. 43—Binding corporate rules
  7. 42—Deeming of appropriate safeguards
  8. 41—Transfers on the basis of appropriate safeguards
  9. 40—General principles for transfers of personal data out of the country
  10. 39—Interpretation of Part VII

Show all 10 posts

PART VIII—DATA PROTECTION IMPACT ASSESSMENT 5

  1. 53—Audit of compliance with assessment report
  2. 52—Consideration of data protection impact assessment report.
  3. 51—Prior consultation
  4. 50—Conduct of data protection impact assessment
  5. 49—Processing activities requiring data protection impact assessment.

Show all 5 posts

PART IX— PROVISIONS ON EXEMPTIONS UNDER THE ACT 4

  1. 57—Permitted health situation
  2. 56—Permitted general situation
  3. 55—Exemptions for public interest
  4. 54—Exemption for national security

Show all 4 posts

PART X —GENERAL PROVISIONS 1

  1. 58— Complaints against Data Controller and Data Processor

Show all 1 posts

First Shedule 1

  1. First Schedule- General

Show all 1 posts

Second Schedule 1

  1. SECOND SCHEDULE General (r.37 (1)& (3))

Show all 1 posts

Third Schedule 1

  1. THIRD SCHEDULE General (r.50 (1))

Show all 1 posts