Office of the Data Protection Commissioner (Kenya) (2021) Legal document / regulation

The Data Protection (General) Regulations, 2021

Office of the Data Protection Commissioner

Ref: SRC-005-KEN-001

https://www.odpc.go.ke/wp-content/uploads/2024/03/THE-DATA-PROTECTION-GENERAL-REGULATIONS-2021-1.pdf

Accessed: 10/31/2025

Summary

Subsidiary legislation under the Data Protection Act 2019 providing detailed regulations for data processing, including requirements for data protection impact assessments, consent mechanisms, cross-border transfer conditions, and processing of special category data including biometric identifiers.

View Harvard reference

Office of the Data Protection Commissioner (2021). The Data Protection (General) Regulations, 2021. Nairobi: ODPC. Available at: https://www.odpc.go.ke/wp-content/uploads/2024/03/THE-DATA-PROTECTION-GENERAL-REGULATIONS-2021-1.pdf (Accessed 31 Oct 2025).

Linked Cases (1)

KEN-001 KEN Operational Deployment (Limited Rollout)

Social Health Authority (SHA) – Biometric Health Identification for Patient Verification at Health Facilities (Kenya)

Social insurance Hybrid