This archive report was first published on 11 November 2019.
On November 8, 2019, President Uhuru Kenyatta approved a data protection law in Kenya, which aligns with European Union standards.
The new law aims to safeguard personally identifiable data handled by firms and government entities, setting out restrictions on storage, sharing, and handling of such data.
According to Joe Mucheru, the Minister for Information, Technology, and Communication, the law complies with the EU's General Data Protection Regulation, which came into effect in May 2018.
Companies like Kenya Airways and tourist hotels will have to comply with the new law when handling personal data from clients, as will phone-based lenders such as Safaricom.
Amazon Web Services has announced plans to set up part of its cloud infrastructure in Kenya, citing the new law as a key factor in its investment decision.
Those violating the law face a maximum fine of Sh3 million or two years in jail.
The new law is expected to boost Kenya's information technology sector and attract foreign investment, as it provides a framework for the handling of personal data.
