Breach of Data protection to be fined sh. 5 million

Nairobi, Monday June 12, 2023,

KNA by Joseph Obwocha

Organizations using individuals’ personal data for their benefits risk arrest and prosecution for breaching the Data Protection Act of 2019.

The Office of Data Protection Commission (ODPC), Commissioner, Ms. Immaculate Kassait, warned those breaching the Act by using individuals' data without their consent risked Sh5million fine or six months imprisonment or both.

Ms. Kassait made the remarks in a speech read on her behalf by Ms. Rose Mosero, Deputy Data Commissioner-In-Charge of Enforcement and Compliance, during a sensitization forum on Data Privacy and Protection Act 2019 in Kirinyaga County.

Kassait said people should give consent before their personal data is used by organizations, individuals or any group in Kenya and outside the country, adding those handling personal data must be registered with the Commission.

She appealed to County Commissioners and other law enforcement officers, to assist her office in identifying individuals or organizations breaching the Act for the office to take action.

“The categories allowed to manage personal information should be registered with (ODPC), they are data controllers and data processors,” she said.

She said that since the Commission was established in November 2020, they have received more than 2, 800 claims from people who feel their data was wrongfully handled.

Kirinyaga County Commissioner, Mr Tobiko Nayioma, further warned the public to be aware of what they post on social media platforms, because in the social media information is treated as if subjects have consented.

He said some social media information was sensitive but the public was not taking it seriously since even international organizations may use it for bad intentions.

Members of the public lamented that Betting companies and Financial Apps were abusing their Data Protection Act rights, since they received messages from these organizations even when they did not sign any documents with them.

The Public was at the same time advised to report any organization misusing their information, even religious ones, since the government will not act where there was no complainant.

Religious leaders said that they should be given exemption on registration fee since some of their groups were too small to raise Sh. 4,000 annual fee.

Currently the officers from the Data Commission are conducting sensitization forums in different parts of the country.

Courtesy ; K. N. A