Data Protection

The key aspects of the firm’s data protection practice include DPIAs, breach incident response planning, international data transfers, management of data subject rights, and training and sensitization.

The firm has significant experience in and advises on nearly all aspects of, data protection and privacy laws under the Constitution 2010, the Kenyan Data Protection Act 2019 and the EU GDPR. The key aspects of the firm’s data protection practice include DPIAs, data breach incident response planning, international data transfers, management of data subject rights, and training and sensitisation. In addition, the firm has significant expertise in other related practice areas, including employment, ICT, IP, dispute resolution, legal compliance audits and regulatory compliance, which provide the necessary leverage to the data protection practice.

The team members drawn from these other areas of practice as well as the data protection team comprise six partners, one of-counsel and six associates. The data protection team has been involved in various past and ongoing assignments for blue-chip companies, parastatals, and insurance companies, among others.

Some of the clients we have recently served under in data protection include:

• Central Depository and Settlement Corporation (CDSC)
• Against All Risk (AAR) Insurance Company
• Kenya Power Limited Company (KPLC)
• BOC Kenya
• National Bank Limited
• Mason Hayes & Curran LLP
• Deloitte LLP (UK)