MP Muchangi Patrick& Associates Advocates
Talk to an Expert
Practice Areas Case Digest Knowledge Centre Insights About Contact Talk to an Expert
Regulatory Changelog

Everything we've published, tracked.

Every Practice Note and Insight the firm has released on Kenyan data protection and privacy law, newest first — a running record of how the law and our thinking on it are developing.

July 2026
PRACTICE NOTE

Privacy by Design

Embedding Data Protection into Systems, Products and Processes under the Data Protection Act, 2019

INSIGHT

SASRA and the ODPC: Where SACCO Compliance Overlaps

Deposit-taking SACCOs answer to both SASRA and the ODPC. A practical map of where the two regimes overlap, where they don't, and what that means for governance.

PRACTICE NOTE

Artificial Intelligence Procurement

Building a Governance Framework under Kenya's Data Protection Act, 2019

PRACTICE NOTE

Cross-Border Data Transfers

Legal, Privacy and Governance Considerations for Kenyan Organisations

PRACTICE NOTE

Employee Monitoring

Balancing Employer Oversight and Employee Privacy Rights under the Data Protection Act, 2019

INSIGHT

Kenya's AI Bill vs. the UK's FCA Review

The UK's FCA just reviewed AI in financial services with real precision. Measured against it, Kenya's AI Bill, 2026 has real gaps — and real fixes.

INSIGHT

Texas App-Store Law & Kenya's Online Safety Bill

The US Supreme Court let Texas's app-store age law stand. Here's what that live constitutional contest means for Kenya's own age-verification bill.

INSIGHT

Meta's GDPR Fines vs. Kenya's Fine Structure

Ireland fined Meta nearly €1 billion under GDPR. Kenya's own Data Protection Act caps the same kind of fine at about USD 38,500 — here's the fix already in motion.

INSIGHT

UN's Global Dialogue on AI vs. Kenya's AI Bill

Guterres opened the UN's first Global Dialogue on AI Governance with four priorities and a new Child Safety Pledge. Here's how Kenya's AI Bill measures up.

INSIGHT

The Compliance Brief — Kenya's DPO Framework Gap

Mauritius and Nigeria have professionalised the Data Protection Officer role with certification, verification and CPD frameworks. Kenya's Data Protection Act 2019 is silent on all three.

INSIGHT

Kenya DP Case Law, Vol. II: Privacy Beyond the ODPC

How Kenya's High Court is applying Article 31 privacy rights, consent, digital identity and the doctrine of exhaustion to succession disputes, neighbour disputes, image rights, and the first cases on AI regulation.

INSIGHT

Kenya DP Case Law: ODPC Disputes in the High Court

A complete guide to Kenya's emerging data protection case law: how the High Court has ruled on ODPC determinations, data protection disputes and privacy rights claims between 2023 and 2026.

INSIGHT

Kenya's Cybercrimes Amendment Act Challenge

Nine petitioners are challenging Kenya's Cybercrimes Amendment Act — including a website-blocking power issued without a court order. Inside the case, the clash of arguments, and the fact correction the headlines missed.

PRACTICE NOTE

The Architecture of Lawful Processing

Constitutional Foundations, Statutory Design, and the Doctrine of Proportionality under the Data Protection Act, 2019

June 2026
INSIGHT

The Compliance Brief — Kenya's AI Bill, 2026

A risk-tiered AI governance framework is heading through Kenya's Senate, with real compliance obligations for local deployers of AI systems.

INSIGHT

The Hidden Data Protection Liability in Every SACCO Loan File

Why every SACCO board should re-examine how it processes guarantors' personal data under the Data Protection Act, 2019.

April 2026
INSIGHT

The Compliance Brief — ODPC Enforcement Trends

Kenya's ODPC has moved from advisory oversight to active enforcement, with fines, compensation orders, and recommendations to prosecute directors.

March 2026
INSIGHT

The Compliance Brief — Digital Lending Reforms 2026

Kenya's digital credit sector has moved to a tightly licensed, jointly supervised market. What changed, and what it costs lenders to comply.