Kenya's Data Protection Act 2019 requires informed consent before personal data is processed or shared — even in aggregate form. The key legal question: did eCitizen users consent to their activity data being sold to third parties when they signed up? S #DataProtectionKE

In collaboration with Article 43 International, we recently conducted a #DataProtectionKE awareness session for community-based organizations in Turkana County. It was an incredibly inspiring session on understanding the right to privacy at the individual and organizational levels and on how to start their internal process of reflection on their compliance journey. The success of this training was entirely fueled by collaboration. Article 43 helped us shape, refine, and adapt the training to ensure it was relevant, actionable, and directly addressed the unique challenges faced by local grassroots organizations.

In today’s digital world, sharing personal information has become part of everyday life often without fully understanding how that data is collected, stored, or protected. As technology continues to shape how we learn, work, and deliver services, understanding data protection is no longer a skill reserved for people in tech alone. From counsellors and public health professionals to community workers and social impact practitioners, more careers today involve handling sensitive personal information that requires responsibility, ethics, and trust. That is why ICON Data and Learning Labs (IDL), in partnership with TINADA Youth Action Africa, hosted a two-day data protection awareness training bringing together mentees from MASINDE MULIRO UNIVERSITY OF SCIENCE AND TECHNOLOGY (MMUST), Alupe University, Kibabii University and Maseno University The conversations around digital rights, privacy, responsible data handling, and digital health made one thing clear: data protection is quickly becoming an essential life and professional skill for young people stepping into today’s workforce. Good conversations, great engagement, and an important reminder that digital literacy also means knowing how to protect people’s data and rights in the digital space. #DataLiteracy #CollaborativeNetworks #DataProtectionKe

Civil society organizations handle sensitive data on activists, survivors, and vulnerable communities every day. Getting data protection right is not optional; it's a responsibility. Lillian from @WatotoWatchNetwork breaks down why our CSO Guidelines on Data Protection are an essential tool for every organization doing this work. Download the Guidelines for free: amnestykenya.org/wp-content/… #DigitalrightsKE #DataGovernanceKE #DataProtectionKE

Civil society organisations in Kenya are not exempt from the law. Every CSO handling personal data is bound by the Data Protection Act and non-compliance carries more than legal consequences, it comes at a real cost. In this video, CSOs speak candidly about the challenges of staying compliant with Kenya’s data protection laws. From limited capacity to growing digital risks. Their experiences expose critical gaps and the urgent need for practical, accessible support. #DataProtectionKE #DigitalRightsKE

Amnesty International Kenya, in collaboration with @maono_space, is excited to announce a 6-month capacity-building program: Data Protection in the Civic Space. We are looking for 20 local CSOs in Kilifi to join us in scaling up data governance and defending the right to privacy as protected under Article 31 of the Constitution. Key Details: 📍 Location: Kilifi County 🗓️ Timeline: May – September 2026 ⏰ Deadline to Apply: 8th May 2026 Ensure your organization is legally registered and ready to lead in the digital age. This is a voluntary engagement aimed at creating a safer civic space for all. 🔗 Apply here: amnestykenya.org/call-for-ap… #DataProtectionKE

What does justice look like in the digital age? Our Technology & Human Rights Digest (Q1 2026) explores key court rulings, emerging data protection demands, and the urgent push for safer online spaces for children and young people. Read the full digest: amnestykenya.org/technology-… #DigitalRightsKE #DataProtectionKE

This marks an important step in strengthening CSOs capacity to promote locally led awareness and move towards compliance.We look forward to the learning, collaboration and impact ahead. #IjueDataYakoIII #DigitalRightsKE #DataProtectionKE #CollaborativeNetworks

We’re officially onboarded into Cohort III of the Ijue Data Yako Programme! Learning digital rights, data protection & compliance with key partners. #IjueDataYako #DataProtection #IjueDataYakoIII #DigitalRightsKE #DataProtectionKE #CollaborativeNetworks

#IjueDataYakoIII #DigitalRightsKE #DataProtectionKE #CollaborativeNetworks

#IjueDataYakoIII #DigitalRightsKE #DataProtectionKE #CollaborativeNetworks

We have officially kick started our six-month capacity-building journey with 25 CSOs from Busia, Bungoma, and Kakamega counties, in collaboration with @AmnestyKenya The morning session, facilitated by @dpo360_africa, set a strong foundation for this journey. Participants were taken through the Data Protection Act, 2019 and its subsidiary regulations, unpacking key principles, legal obligations, and what compliance looks like in practice for CSOs. The session moved beyond theory, grounding participants in the practical responsibility of safeguarding personal data and strengthening trust within the communities they serve. This capacity-building journey is anchored in one goal: transforming knowledge into practice and policy into meaningful action at the grassroots level. #IjueDataYakoIII #DigitalRightsKe #DataProtectionKe #CollaborativeNetworks

We’re officially onboarded into Cohort III of the Ijue Data Yako Programme! 🚀 Learning digital rights, data protection & compliance with support from key partners. 🌍#IjueDataYakoIII #DigitalRightsKE #DataProtectionKE #CollaborativeNetworks

Your data isn't free snacks. It's yours. Demand working deletion tools. Report ghosting companies to ODPC. What's your wildest "they won't delete my data" story? Drop it 👇 #DataProtectionKE #IjueDataYako #DigitalRightsKE #ODPC @ODPC_KE

Honoured to be part of "Ijue Data Yako" cohort 3, an initiative focusing on promoting locally-led awareness on Digital Rights and Data Protection among CSOs. #IjueDataYakoIII #DigitalRightsKE #DataProtectionKE #CollaborativeNetworks @amnesty

We are live from Kakamega, marking the official launch of #IjueDataYakoIII. In collaboration with @AmnestyKenya this initiative brings together 25 CSOs from Kakamega, Bungoma, and Busia counties with a shared mission: to promote locally-led awareness on digital rights and data protection. At its core, the project seeks to ensure that communities are not only users of digital systems, but informed participants who understand how their data is collected, used, and protected. Through this launch, we are setting the foundation for deeper community engagement, capacity building, and collaboration with civil society actors to demystify digital rights and promote safer, more informed digital spaces. Ijue Data Yako III is about one clear goal, empowering communities with the knowledge and tools to take ownership of their data in an increasingly digital world. @Kakamega_037 @ODPC_KE @dpo360_africa #IjueDataYakoII #DigitalRightsKe #DataProtectionKe #CollaborativeNetworks

Data protection is not abstract — it shows up in real life. Last year, our associate (while at a previous firm) assisted a client who was distraught after spotting her image on a banner in a YouTube video of a conference. The same image was featured on the responsible organization’s website and used to promote the event. The image was not her best. The hair and make up was off but most importantly, the image had been used without her direct engagement. Naturally, she felt blindsided. A cease and desist letter pushing for accountability was issued to the organization. As it turned out, she had previously given consent to a subsidiary linked to the organization. That consent had gone further than she ever expected. Here is the important part: consent is not forever. She withdrew it and the images were immediately taken down. A powerful reminder: · Your personal data (including images) should not be used beyond the scope you agreed to. · Consent can be withdrawn at any time. · Organizations must respect that withdrawal. If your data ends up somewhere you did not expect, do not assume you are stuck. You have rights — and remedies (these include compensation for damage suffered. We have seen the Office of the Data Protection Commissioner, ODPC, award up to Kshs. 500,000 and even more in cases of similar image misuse). Data protection is not just legal talk — it is about dignity, trust and control over your own information. If something feels off about how your data is being handled, it probably is. Do not ignore it. DM us @WambuiLaw or Call/WhatsApp or comment below for a confidential consultation. #DataProtectionKE #Privacy #LegalTips

Catch @VictorNdede tomorrow at 7am on @CapitalFMKenya 98.4 as he talks about strengthening data governance in Kenya. #DataProtectionKE

There is power in peer learning. Yesterday, together with @OpenInstitute, we convened an insightful peer learning session as part of the Strengthening Data Governance Program. The session brought together data champions from Mombasa and Maono Hub. The highlight? Honest conversations around lived experiences and organizational data protection implementation challenges. Participants shared what’s working, what’s difficult, and how context shapes data protection practices on the ground. #DataProtectionKE

As Kenyan general elections season intensifies, something familiar happens: citizens begin receiving a flood of unsolicited messages from political parties and candidates. Campaign texts, WhatsApp forwards, and targeted calls suddenly appear, but few people stop to ask the most important question: where did they get your personal data? Yesterday's Data Governance Café tackled exactly that. We unpacked how voter data is collected, shared, and sometimes exploited during election cycles, and created a space to collectively discuss practical ways to safeguard your personal information in an increasingly data-driven political landscape. #DataProtectionKE @DataGovProsKe