Ministries, state corporations and public agencies hold citizen data at a scale few private organisations match — and are held to a distinct constitutional standard when they get it wrong. We help accounting officers and public-body leadership govern digital risk with the independence and evidence base that public accountability demands.
Advisory support for Cabinet Secretaries and Principal Secretaries, Accounting Officers, County Governments, ICT Authority Heads and Data Protection Officers.
Kenya's courts have repeatedly held the State to a distinct standard of accountability for how it processes citizens' data.
Identity, welfare and service-delivery systems process personal data on a scale that magnifies the impact of any governance failure.
Kenya's AI Bill and recent litigation on an AI moratorium show that AI procurement by public bodies is now squarely a governance and legal issue.
Courts have ordered mandamus against regulators and recognised recycled digital identifiers as data the State must protect.
Amendments to the Cybercrimes Act and related bills are actively reshaping the compliance obligations public bodies must meet.
Structured, evidence-based engagements designed for the accountability standards public bodies are held to.
Executive assurance over digital governance, adapted for accounting officers, boards and oversight committees of public bodies.
Explore Board Advisory Services →Governance of AI procurement and deployment against the requirements of Kenya's AI Bill and emerging jurisprudence.
Review the AI Governance Framework →A ministry- or agency-wide Digital Trust review, benchmarking governance maturity end to end.
Explore the Compliance Retainer →Legislative analysis of the Cybercrimes Act and AI Bill, and the constitutional and judicial-review disputes shaping how public bodies are held to account.
If you are responsible for data protection, AI governance or cybersecurity at a ministry, state corporation or public agency, we would be pleased to discuss your priorities and practical next steps — no obligation.
A short monthly briefing from the Kenya Privacy Law Review — new ODPC determinations, guidance notes, and compliance deadlines. No spam, unsubscribe anytime.