Notice — Data Protection Act, 2019 · Kenya

Is your business
breaking Kenya's
privacy law?

If you run a school, clinic, SACCO, security firm, real estate agency, or hospitality business in Kenya, you're likely required to register with the ODPC — regardless of your turnover. I help you get compliant, on record, and protected. Fast.

KES 3MMaximum administrative fine for non-registration
10 yrsPotential criminal liability, Data Protection Act §72
14 daysTypical ODPC turnaround once filed correctly
Advocate of the High Court of Kenya Certified Data Protection Officer ODPC & GDPR Compliance Advisory Data Protection Audits & Retainer Advisory
Part II — The Compliance Starter Package

Everything you need to register, in one engagement.

One flat fee. No retainer required to start. Built for schools, agencies, clinics, and small firms who need to be compliant this month, not eventually.

Fixed-fee engagement
KES 15,000 – 25,000
Excludes the ODPC statutory filing fee (KES 4,000, paid directly to ODPC — not marked up).
  • Assessment of your registration category (controller, processor, or both)
  • ODPC registration filed and tracked to certificate issuance
  • A privacy policy drafted for your business, not copy-pasted
  • A staff data notice covering employee data handling
  • One 30-minute call to walk through your obligations
Final fee depends on entity complexity — a single-branch school and a multi-branch SACCO are not the same job. You'll get an exact quote before anything is billed.
Start on WhatsApp →

Real estate & property management

Mandatory registration regardless of revenue — you hold tenant and buyer personal data as a matter of course.

Schools & education providers

Student and guardian records make registration mandatory, whatever your enrolment size.

Clinics, SACCOs, insurance & security firms

Health, financial, and surveillance data all sit in the mandatory category — no turnover exemption applies.

Hospitality & guesthouses

Guest registration data brings you into scope even as a small operator.

Part III — Templates & Downloads

Do it yourself, correctly.

Drafted to Kenyan Data Protection Act standard, not adapted from a UK or US template. Instant download after payment.

Template

Privacy Policy — Customised

A website/app privacy policy built on the DPA 2019's actual disclosure requirements, editable in Word.

KES 5,000Order →
Template

Staff Data Notice

Tells your employees exactly what data you hold on them and why — required for any registered employer.

KES 3,500Order →
Template

DPIA Lite Worksheet

A simplified Data Protection Impact Assessment worksheet for SMEs introducing a new system or product.

KES 4,500Order →
Checklist

ODPC Registration Checklist

Everything ODPC will ask for before you open the portal — avoid the back-and-forth that delays certificates.

KES 1,500Order →
Part IV — The Academy

Learn it, or send your team to learn it.

Short, practical sessions — not a semester of theory. CPD-relevant for advocates; compliance-relevant for everyone else.

Live webinar

ODPC Registration, Start to Certificate

A 60-minute walkthrough of the registration portal, common rejection reasons, and what to do once you're certified.

60 minZoomKES 1,000/seat
Reserve a seat →
Self-paced course

Data Protection for Kenyan SMEs

Four modules: the law in plain English, registration, staff & customer data handling, and responding to a breach.

4 modulesCertificate on completionKES 4,500
Enrol →
Part V — Data Protection Officer, For Hire

Ongoing compliance, without an in-house hire.

Most SMEs don't need a full-time DPO. They need someone accountable, on call, and current with the law. That's this.

Starter
KES 10,000 /mo
  • Named DPO on record with ODPC
  • Quarterly compliance check-in
  • Email support, 48-hr response
  • Annual policy review
Enquire →
Enterprise
From KES 35,000 /mo
  • Everything in Growth
  • Board-level advisory & reporting
  • Full annual data protection audit
  • Cross-border transfer review (GDPR overlap)
Enquire →
Part VI — Get In Touch

Start with one honest question.

Tell me what your business does and how many people work there — I'll tell you, straight, whether registration is mandatory for you.