Organizations using individuals’ personal data for their benefit risk arrest and prosecution for breaching the Data Protection Act of 2019.
The Office of Data Protection Commission (ODPC), Commissioner Immaculate Kassait, warned those breaching the Act by using individuals’ data without their consent risked Ksh 5 million fine or six months imprisonment, or both.
Kassait made the remarks in a speech read on her behalf by Rose Mosero, Deputy Data Commissioner-In-Charge of Enforcement and Compliance, during a sensitization forum on Data Privacy and Protection Act 2019 in Kirinyaga County.
Kassait said people should give consent before their personal data is used by organizations, individuals, or any group in Kenya and outside the country, adding those handling personal data must be registered with the Commission.
She appealed to County Commissioners and other law enforcement officers, to assist her office in identifying individuals or organizations breaching the Act for the office to take action.
“The categories allowed to manage personal information should be registered with (ODPC), they are data controllers and data processors,” she said.
She said that since the Commission was established in November 2020, they have received more than 2, 800 claims from people who feel their data was wrongfully handled.
Kirinyaga County Commissioner, Tobiko Nayioma, further warned the public to be aware of what they post on social media platforms because, in social media, information is treated as if subjects have consented.
He said some social media information was sensitive but the public was not taking it seriously since even international organizations may use it for bad intentions.
Members of the public lamented that Betting companies and Financial Apps were abusing their Data Protection Act rights since they received messages from these organizations even when they did not sign any documents with them.
The Public was at the same time advised to report any organization misusing their information, even religious ones since the government will not act where there was no complainant.
Religious leaders said that they should be given an exemption on registration fees since some of their groups were too small to raise Ksh 4,000 annual fee.
Currently, the officers from the Data Commission are conducting sensitization forums in different parts of the country.
