Office of data protection Commissioner to devolve services to counties

Kitale Friday June 2, 2023

KNA By George Kaiga

The Office of the Data Protection Commissioner (ODPC) will be rolling out its services to counties in a move to bring services closer to the people as it seeks to enhance greater awareness of the provisions of the Data Protection Act 2019.

According to the Deputy Data Director, Oscar Otieno, ODPC is set to devolve its services to Mombasa, Nakuru and Kisumu cities by end of this June with Eldoret, Garrissa and Nyeri Huduma centres expected to host their services in the first half of the financial year.

“Under our 3 year strategic plan, we intend to roll out our services to all the counties,” he added.

The Data Protection Act 2019 has the mandate to provide subjects with rights and remedies to protect their personal data from processing that is not in accordance with the Act.

The ODPC also has the mandate of registering Data Controllers and Data processors, receiving complaints from data subjects, investigating violations of Data Protection Act and carrying out public education on the right of privacy among other activities.

According to Mr Otieno, the ODPC has only registered 2305 Data controllers and processors against the tens of thousands of others yet to register, saying failure to adhere to the Data Protection Act will attract sanctions.

“We expect compliance from all data controllers and processors and who must carry out Data Protection Impact Assessment (DPIA),” he added.

Both Kenyan businesses and individuals are increasingly having to contend with emerging online threats with Naivas supermarket and Kabarak University having been the latest victims of cybercriminals.

Mr Otieno made the remarks in Kitale, Trans Nzoia County where the Commission held an awareness outreach programme to over 100 Data Controllers and Processors drawn from both public and private sectors.

He said so far, the Commission has received 2831 complaints, with 922 admitted but 1895 of the cases declined under preliminary review for not meeting the threshold.

“ODPC, under the Act encourages self-regulations and settlement of disputes by way of Alternative Dispute Resolution (ADR) either through facilitation, conciliation, mediation or negotiation as opposed to court processes” he added.

Speaking at the forum, Kwanza Deputy County Commissioner Benedict Munyoki, who represented the County Commissioner Gideon Oyagi said increased collection of data by both government and private entities has fueled threat to personal data by predators.

He raised concern that some agencies involved in data collection were misusing members' data, hence the need to strengthen privacy mechanisms through the Data Protection Act.

“Some agencies were misusing members’ data and we have witnessed increased cases of cybercrime, characterized by blackmail, hacking of facebook or emails,” he added.

Those sensitized on the Data Protection Act, 2019 included youth leaders, officials of boda boda operators, religious leaders, banks’ representatives, both national and county officials among others.

ODPC has launched a countrywide awareness campaign that seeks to inform members of their rights to data protection.

Courtesy ; K. N. A