Skip to main content
FREE COMPLIANCE RESOURCE · KDPA 2019

Kenya Data Protection Act (KDPA 2019) Executive Checklist

A comprehensive 10-point statutory checklist to evaluate your company's data privacy posture and ensure total compliance with the Office of the Data Protection Commissioner (ODPC).

The 10-Point KDPA Compliance Audit Checklist:

01
ODPC Registration Status: Is your organization formally registered as a Data Controller or Data Processor with the ODPC?
02
Statutory DPIA Readiness: Have you conducted a formal Data Protection Impact Assessment (Section 31) for high-risk customer data processing?
03
Explicit Customer Consent: Do your website forms and customer onboarding flows capture affirmative, opt-in consent?
04
Data Subject Rights (DSAR): Does your company have an established protocol to process customer data deletion or access requests within 14 days?
05
Database Encryption: Are customer personal records (phone numbers, IDs, M-Pesa records) encrypted at rest and in transit?

Need a Formal KDPA Statutory Audit?

Book an assessment led by CompTIA Security+ certified analyst Nazline Mwita.

Explore KDPA Services →