Data, privacy and AI rules

Due in 60 days12Regulations190

12 due in 60 days · 190 regulations

Jurisdiction

Kenya: data, AI and cyber laws

Part of Middle East and Africa.

Regulations

Add to calendar
Apple Calendar or OutlookGoogle Calendar Download .ics
Amended
Kenya Computer Misuse and Cybercrimes ActKenya's main cybercrime law. It creates offences such as unauthorised access, interference, cyber harassment and false publication, sets up a National Computer and Cybercrimes Co-ordination Committee, and requires critical infrastructure owners to report threatening incidents. The 2025 amendment adds identity theft rules and lets the Committee order websites or apps that promote unlawful activity, child sexual content, terrorism or extremism to be blocked.In effect since May 30, 2018
In force
Kenya Data Protection ActKenya's GDPR-inspired data protection law establishing the ODPC, mandatory registration of data controllers and processors, data subject rights, 72-hour breach notification to the Commissioner, DPIAs, and conditions on cross-border transfers (with some data localisation for strategic public interest processing).In effect since Nov 25, 2019

Past deadlines

Takes effectNov 4, 2025 · 12 months ago
Kenya Computer Misuse and Cybercrimes Act2025 amendments commenceComputer Misuse and Cybercrimes (Amendment) Act No. 17 of 2025: assented 15 October 2025, published 21 October 2025, commenced 4 November 2025.Kenya
Takes effectNov 25, 2019 · 6.9 years ago
Kenya Data Protection ActData Protection Act in forceAct commences.Kenya
Takes effectMay 30, 2018 · 8.4 years ago
Kenya Computer Misuse and Cybercrimes ActAct commencesAssented 16 May 2018, published 18 May 2018, commenced 30 May 2018.Kenya