The Kenya Data Protection Act was enacted into law in 2019, with the sole aim of protecting users and making sure organizations do not abuse data entrusted to them. As more Kenyan organizations adopt cloud usage, and become either data collectors or data processors, it is important to understand the provisions of the data privacy act.

The session will dive into the different data classifications, i.e. Personally identifiable information and sensitive data as well as obligations of data collectors and processors, and the requirements for processing data on the cloud to ensure full compliance to data privacy act. Furthermore, it will explore different approaches to secure personally identifiable information and sensitive information on cloud