We regularly advise and represent regulators and leading ICT sector players in Kenya. We were part of the team that advised and reviewed 16 pieces of subsidiary legislation under the Kenya Information and Communications Act.

The firm has significant experience in, and advises on nearly all aspects of, data protection and privacy laws under the Constitution 2010, the Kenyan Data Protection Act 2019 and the EU GDPR. The key aspects of the firm’s data protection practice include DPIAs, breach incident response planning, international data transfers, management of data subject rights, and training and sensitisation. In addition, the firm has significant expertise in other related practice areas, including employment, ICT, IP, dispute resolution, legal compliance audits and regulatory, which provide the necessary leverage to the data protection practice.

Our data protection’s expertise comprises of leading practitioners including Nelson Otieno who has undertaken a PhD study on data protection from Germany.

The data protection team has been involved in various past and ongoing assignments for blue-chip companies, parastatals, and insurance companies, among others. Some of the clients we have recently served under in data protection include:

•Central Depository and Settlement Corporation (CDSC)

•Against All Risk (AAR) Insurance Company

•Kenya Power Limited Company (KPLC)

•BOC Kenya

•National Bank Limited

•Mason Hayes & Curran LLP

•Deloitte LLP (UK)

We are keeping abreast of the growth of AI and its intersection with various legal fields and have advised and trained clients on emerging issues in these areas.