Data Commissioner Announces Inspections in Schools & Hospitals

2022 KCSE Students
An invigilator distributes papers to Starehe Boys' Centre students sitting KCSE exams in 2021.
Photo
Ministry of Education

Data Commissioner Immaculate Kassait has announced that her officers will embark on a countrywide inspection to ensure public and private facilities comply with data protection policies.

Speaking during the International Data Privacy Day in Kisumu County,  the commissioner stated that she had scheduled over 40 operations to be conducted this year. 

Among the institutions which have guidelines on data protection include learning institutions, health facilities and communication companies.

She stated that the inspection would ensure that the institutions comply with the regulations, detailing similar exercises that were conducted in 2023.

Data Commissioner Immaculate Kassait speaking during the Data Privacy Day in Kisumu County on January 26, 2023.
Data Commissioner Immaculate Kassait speaking during the Data Privacy Day in Kisumu County on January 26, 2023.
Photo
Eliud Owalo

"The Office carried out 42 inspections of Data Controllers and Data Processors to ascertain the level of compliance with the Data Protection Act, 2019 and Data Protection Regulations.

"To enhance the office's capacity to cover the entire country, the office sought and obtained approval from the National Treasury to outsource auditing and training services. It is worth noting that the office has prequalified a total of 50 firms to carry out training and auditing. This has not only enhanced compliance but also created jobs for the private sector," read the statement in part.

Further, the commissioner also stated that her office will conduct investigations on personal data-related complaints and communicate findings to concerned parties within 90 days.

In 2023, Kassait's office received 3,553 complaints and resolved 2,761 complaints after investigations.

On the other hand, ICT Cabinet Secretary Eliud Owalo also underpinned the importance of government institutions to comply with data protection regulations.

Owalo urged ministries and state departments to register with the Office of the Data Protection Commissioner as directed by President William Ruto in January 2023.

"Towards this, allow me to report that out of the total of 3,739 data controllers and data processors so far registered with the Office of the Data Protection Commissioner, 150 are government Ministries, Departments and Agencies," he stated.

Meanwhile, Kenya is set to host the 2024 Network of African Data Protection Authorities (NADPA) AGM conference in Nairobi.

ICT CS Eliud Owalo speaking during the Data Privacy Day in Kisumu County on January 26, 2023.
Former ICT CS Eliud Owalo speaking during the Data Privacy Day in Kisumu County on January 26, 2023.
Photo
Eliud Owalo