About
Every organisation in Kenya that handles personal data has legal duties under the Data Protection Act, 2019, and the Office of the Data Protection Commissioner (ODPC) has already fined schools, lenders, restaurants and multinationals for getting it wrong. This self-paced course explains those duties in plain English for everyone at work, from front-line and administrative staff to IT teams and senior leaders. No legal background is needed. You will learn: - what personal and sensitive personal data mean under Kenyan law - the Act's eight principles, nine lawful grounds and the rights of data subjects - registration with the ODPC, penalties and how Kenya's law differs from the GDPR - safe data handling for your role, and everyday cybersecurity habits - what to do in the first 72 hours of a data breach - when a Data Protection Impact Assessment is required, and how to manage vendors and cross-border transfers Each lesson includes a real Kenyan case, a practical scenario, a checklist and links to ODPC guidance. Ten sections, each with a short knowledge check. Allow about 6 to 8 hours. Complete every step to receive a certificate. Content reviewed September 2026. This course is training, not legal advice.
You can also join this program via the mobile app. Go to the app
Overview
Instructors
Price
Group Discussion
This program is connected to a group. You’ll be added once you join the program.