Data Protection
HarLyn Digital Partners helps businesses in Kenya map their personal-data footprint, close gaps against the Kenya Data Protection Act (2019) and GDPR, and build breach-response readiness before it's needed. Led by Cybersecurity Assurance Lead Nazline Mwita.
Data mapping → gap assessment (KDPA / GDPR) → consent & privacy-notice review → breach-response plan → prioritized remediation
What we deliver
- Personal-data mapping: what you hold, where it lives, who can access it
- Gap assessment against KDPA (2019) and GDPR requirements
- Consent-flow and privacy-notice review
- Data retention and third-party data-sharing review
- Breach-response plan aligned to ODPC notification timelines
- Prioritized remediation roadmap
Framework & Methodology
Related capabilities
Frequently asked
What is KDPA compliance, and does it apply to my business?
The Kenya Data Protection Act (2019) governs how Kenyan businesses collect, store, process, and share personal data. It applies to most businesses handling customer, employee, or user data in Kenya — including registration with the Office of the Data Protection Commissioner (ODPC) where required.
What does a Data Protection engagement cover?
A data-mapping exercise (what personal data you hold and where), a gap assessment against KDPA and GDPR requirements, consent-flow and privacy-notice review, breach-response readiness planning, and practical remediation steps prioritized by risk.
How is this different from a Security Assessment or Cybersecurity Audit?
Security Assessments and Audits test technical exposure — vulnerabilities, attack surface, network defenses. Data Protection consulting is regulatory and process-focused: how personal data is collected, stored, used, and disclosed, and whether that matches what the law and your own privacy notices require.
Do you help with breach-notification obligations?
Yes — we help build a breach-response plan aligned to KDPA notification timelines to the ODPC and affected data subjects, so a response plan exists before it's needed, not during an incident.
Who leads Data Protection consulting at HarLyn Digital Partners?
Nazline Mwita, Co-Founder and Cybersecurity Assurance Lead, a CompTIA Security+ certified analyst. Her dedicated data-protection consulting practice is also documented at nazlinemwita.co.ke.
Need to close your KDPA compliance gap?
Start with the 48-hour Secure Digital Workflow Assessment, or reach out directly to Nazline.