Case notes, compliance briefs, and regulatory guidance pieces on the Data Protection Act, ODPC enforcement, and privacy litigation — written and published on an ongoing basis. Every entry is available to read in full and to download as its own PDF.
Short-form briefs tracking Bills, guidance notes, and enforcement trends as they move through Parliament, the ODPC, and the courts.
A risk-tiered AI governance framework is heading through Kenya's Senate, with real compliance obligations for local deployers of AI systems.
Read in full → Download PDF ⤓New ODPC guidance sets out how cross-border data transfers must work under Kenya's Data Protection Act, relevant to any business using foreign cloud providers.
Read in full → Download PDF ⤓Nine petitioners are challenging Kenya's Cybercrimes Amendment Act — including a website-blocking power issued without a court order. Inside the case, the clash of arguments, and the fact correction the headlines missed.
Read in full → Download PDF ⤓Kenya's digital credit sector has moved to a tightly licensed, jointly supervised market. What changed, and what it costs lenders to comply.
Read in full → Download PDF ⤓Mauritius and Nigeria have professionalised the Data Protection Officer role with certification, verification and CPD frameworks. Kenya's Data Protection Act 2019 is silent on all three. A comparative analysis, with a case for reform.
Read in full → Download PDF ⤓Volume II of our analysis of Kenya's data protection case law: how the High Court is applying Article 31 privacy rights, consent, digital identity and exhaustion of ODPC remedies to succession disputes, neighbour disputes, image rights, and AI regulation.
Read in full → Download PDF ⤓Kenya's ODPC has moved from advisory oversight to active enforcement, with fines, compensation orders, and recommendations to prosecute directors.
Read in full → Download PDF ⤓A complete guide to Kenya's emerging data protection case law: how the High Court has ruled on ODPC determinations, data protection disputes and privacy rights claims between 2023 and 2026, and what the jurisprudence means for the next case.
Read in full → Download PDF ⤓Proposed guidelines for the Office of the Data Protection Commissioner on the designation, qualification, certification, verification and continuous professional development of Data Protection Officers in Kenya — drawing on the Mauritian and Nigerian frameworks.
Read in full → Download PDF ⤓The UK's FCA just reviewed AI in financial services with real precision. Measured against it, Kenya's AI Bill, 2026 has real gaps — and real fixes.
Read in full → Download PDF ⤓The US Supreme Court let Texas's app-store age law stand. Here's what that live constitutional contest means for Kenya's own age-verification bill.
Read in full → Download PDF ⤓Ireland fined Meta nearly €1 billion under GDPR. Kenya's own Data Protection Act caps the same kind of fine at about USD 38,500 — here's the fix already in motion.
Read in full → Download PDF ⤓Guterres opened the UN's first Global Dialogue on AI Governance with four priorities and a new Child Safety Pledge. Here's how Kenya's AI Bill measures up.
Read in full → Download PDF ⤓A practical walkthrough of when the Data Protection Act, 2019 requires a business operating in Kenya to designate a Data Protection Officer — and when it doesn't.
Read in full → Download PDF ⤓Every note below follows the same rule: the takeaway first, in plain English, then the citation.
All 31 case notes, one takeaway and citation per entry — a single reference document for board packs, compliance files, or a quick refresher before a call.
Download PDFEvery published case note and compliance brief, as standalone HTML pages, packaged for offline reading or archiving.
Download ZIP