you may no longer rely on consent as your lawful basis for processing that personal data. Data controllers must ensure that consent is sought, obtained and recorded in accordance with the DPA.

The DPA clarifies the roles of companies that carry out and take part in the processing of personal data. The concepts of “controller” (Responsable de datos) and “processor” (Tercero ...

The DPA requires a data controller to comply with seven data protection principles when processing personal data and to ensure that any data processor it appoints has sufficient safeguards in ...

It has been just over three years since the Kenyan Data Protection Act 2019 (“DPA”) was ... conducting an audit against a data controller or a data processor. These include proof of ...