Full KDPA compliance engagement
Most Kenyan businesses think KDPA compliance is just a form you file. It's not. The ODPC is actively enforcing. Fines are real. And the gap between "we collect data" and "we're compliant" is bigger than most businesses realise. De4sec closes that gap.
ODPC enforcement is active from 2023. Fines for non-compliance can reach KES 3 million or 1% of annual turnover. Data breaches without proper protocols attract criminal liability.
✓Data mapping audit — what personal data you collect and where
✓Gap analysis against KDPA requirements
✓ODPC registration support — Data Controller/Processor registration
✓Privacy Policy and Data Processing Agreement drafting
✓Data retention and deletion policy implementation
✓Staff training — what counts as personal data and how to handle it
✓Technical controls — encryption, access controls, audit logging
✓Breach response plan and 72-hour ODPC notification process
✓Ongoing compliance monitoring
Who needs KDPA compliance?
✓Any business collecting customer information
✓Healthcare providers — patient data
✓Hotels collecting guest details
✓Retailers with loyalty programmes
✓Online businesses handling Kenyan user data
✓Companies processing M-Pesa transaction data
✓Any business with employees in Kenya
Engagement model
✓One-time audit + implementation — fixed fee
✓Ongoing annual review — retainer
✓ODPC renewal support — included in retainer
