Free 2-Minute Self-Check

Is Your Business ODPC-Compliant?

Answer 8 quick yes/no questions. At the end, you'll know whether you likely need to register with the ODPC and where your biggest gaps are — no email required.

Question 1 of 8

Do you know exactly what personal data your business collects (names, phone numbers, ID numbers, payment details, etc.) and why?

Question 2 of 8

Do you have a written data inventory or register of processing activities?

Question 3 of 8

Does your business have a published privacy policy that customers or users can actually read?

Question 4 of 8

Does your business have more than 10 employees, or annual turnover above KES 5 million?

Question 5 of 8

Is your business in health, financial services, telecoms, betting/gaming, direct marketing, or political canvassing?

Question 6 of 8

Is your business currently registered with the ODPC as a data controller or processor?

Question 7 of 8

If personal data were exposed or lost tomorrow, do you have a plan for who to notify and how?

Question 8 of 8

If you share data with vendors, cloud providers, or partners outside Kenya, do you have signed data processing or transfer agreements with them?

Want the fuller, board-level version?

Our 20-point Kenya Data Protection Compliance Checklist PDF goes deeper than this quick check. Download it here.

Stay ahead of Kenya's data protection & AI regulation

A short monthly briefing from the Kenya Privacy Law Review — new ODPC determinations, guidance notes, and compliance deadlines. No spam, unsubscribe anytime.