Data Protectors Podcast 2: Registration as a data controller or processor

The Data Protection Act 2019 introduced an obligation for certain entities that process personal data in Kenya to register with the Data Protection Commissioner (ODPC). Specifically, all data controllers and processors that have an annual turnover or annual revenue above Kenya Shillings five million (KES 5,000,000/=) and/or more than ten (10) employees must register with the ODPC. However, even smaller organizations with a turnover below 5 million shillings and less than 10 employees must register if they operate in certain sectors. In the second episode of the Data Protectors Podcast, Rosemary Koech and Elaine Wangari explore who is required to register, why it is important to register and how exactly one can register with the Office of the Data Protection Commissioner. Moderator: Priya Shah, Director of Risk and Privacy Compliance at Carepay Ltd Speakers: Elaine Wangari, Data Protection Specialist at HTB Group London; Rosemary Koech, Co-organizer of Nairobi Legal Hackers and DPO at KCB Group This podcast was produced by KICTANET and GIZ/DTC Kenya, in collaboration with Nairobi Legal Hackers, as part of the AU-EU D4D Hub project.