Data Protection & Privacy

SMC Law's data protection practice ensures your organisation meets every obligation under Kenya's Data Protection Act while preserving the commercial agility your business demands. We take a proactive approach — building compliance into your operations rather than retrofitting it. Our practice covers compliance with the Kenya Data Protection Act 2019, data protection impact assessments, privacy policy drafting and review, data processing agreements, breach notification and response planning, registration with the Office of the Data Protection Commissioner, and staff training on data protection obligations.