Startups processing personal data in Kenya are among the entities required to register with the Office of the Data Commissioner (ODPC), as the East African country implements a law protecting the right to privacy of persons within its borders.
The registration, which has kicked off after the coming into effect of the data protection regulations, is mandatory for any company acting as a data controller, defined as a person or entity that determines the purpose and means of processing of personal data, or a processor. A processor may not necessarily collect or determine how data is used but handles it on behalf of another firm.