Data Privacy
Back Home

Data Privacy

The Data Protection Act, 2019 (DPA) and its subsidiary legislation established the legal and regulatory regime for the implementation of data protection and privacy compliance by data handlers.

Since then, the Office of the Data Protection Commissioner (ODPC) has made concerted efforts to drive compliance by engaging in awareness drives for both public and private sector. The Data Protection (Registration of Data Controllers and Data Processors) Regulations, 2021, set out in detail the requirements that data handlers – whether controllers or processors should comply with. The Regulations are supplemented by the ODPC Guidance Note on Registration of Data Controllers and Data Processors. The focus for the Regulator is to work with compliant organisations.

Safaricom too, in addition to maintaining its position as a compliant organisation, seeks to collaborate with similarly compliant organisations across its partner network, where these organisations handle personal information in the course of business.

Are you aware of your status as a data handler? Are you a data controller or a data processor or both?

In addition to accessing the resources mentioned above, you may consider the following in determining whether you require to register as a data handler, relative to the services provided for Safaricom.

  • Do you handle any personal information (identifying human individuals – customers, employees, etc.) on behalf of Safaricom?
  • Is there an agreement in effect between you and Safaricom that provides for handling of any personal information on behalf of Safaricom?
  • Do you have an annual Turnover or Revenue of Kshs. 5 million and above or more than 10 employees?
  • Do you fall among the non-exempt mandatory registration entities (regardless of your turnover/revenue/number of employees)?

If your answer to any of the above questions is yes, you are required to register as a data handler. Specifically, and with respect to personal information handled on behalf of Safaricom, you MUST register as a data processor. To begin the registration, log on to. You will be required to provide your business registration document, proof of annual turnover and number of employees. Where the nature of your business falls within the telecommunications, financial services and direct marketing sectors, among the others outlined in the Regulations, registration is mandatory. Registration is valid for a two (2) year period, after which it can be renewed for subsequent two-year periods. The charges below apply:
Category
Registration fee in Kshs. per Data Controller/Processor (payable Once)
Renewal fee in Kshs. per Data Controller/Processor (after every 2 years)
Micro and Small Data Controllers /Processors- with between 1 and 50 employees and an annual Turnover/ Revenue of a maximum of Kshs. 5Million
4,000/-
2,000/-
Medium Data Controllers /Processors- with between 51 and 99 employees and an annual Turnover/ Revenue of between Kshs. 5,000,001 (Five million and one shilling) and maximum of Kshs. 50,000,000 (Fifty million)
16,000/-
9,000/-
Large Data Controllers /Processors- with more than 99 employees and an annual Turnover/ Revenue of more than Kshs. 50 Million
40,000/-
25,000/-

In case of any queries on your data handler status as a Safaricom partner, please contact the Data Protection Office via email on [email protected]

162 Views
7 Comments

Discussion (7)

Godwill Barasa

f your answer to any of the above questions is yes, you are required to register as a data handler. Specifically, and with respect to personal information handled on behalf of Safaricom, you MUST register as a data processor. To begin the registration, log on to. You will be required to provide your business registration document, proof of annual turnover and number of employees. Where the nature of your business falls within the telecommunications, financial services and direct marketing se

Annie

Annie

Annie

res

Annie

Contrary to popular belief, Lorem Ipsum is not simply random text. It has roots in a piece of classical Latin literature from 45 BC, making it over 2000 years old. Richard McClintock, a Latin professor at Hampden-Sydney College in Virginia, looked up one of the more obscure Latin words, consectetur, from a Lorem Ipsum passage, and going through the cites of the word in classical literature, discovered the undoubtable source.

veryLongName Herein

test

averylongname

test

Madison Yates

frr

Related Articles

Message from the CCSO

Message from the CCSO

Speak up, report unethical acts

Openly

Ethics Helpdesk:

Accessibility Settings