You will get a Kenya Data Protection Act 2019 compliance memo and ODPC gap analysis
Project details
This project delivers a compliance assessment under Kenya's Data Protection Act 2019, the statute now actively enforced by the Office of the Data Protection Commissioner.
If your business processes personal data of Kenyan residents, whether you operate locally or serve the Kenyan market remotely, you carry legal exposure under the Act. ODPC investigations, enforcement notices and data breach penalties are no longer theoretical.
I assess your specific obligations: the lawful basis for each processing activity, ODPC registration requirements, cross-border transfer restrictions, data subject rights procedures and breach notification timelines. I then deliver a gap matrix that ranks compliance gaps by regulatory risk, so you address the highest-exposure items first.
Certified by Strathmore University's Centre for Intellectual Property and Information Technology Law (CIPIT), March 2025.
Deliverable: compliance memo, prioritised gap matrix and (Standard/Premium) draft privacy notice in Word and PDF.
Jurisdiction: Kenya. Governed by the Data Protection Act, 2019 and ODPC regulations.
If your business processes personal data of Kenyan residents, whether you operate locally or serve the Kenyan market remotely, you carry legal exposure under the Act. ODPC investigations, enforcement notices and data breach penalties are no longer theoretical.
I assess your specific obligations: the lawful basis for each processing activity, ODPC registration requirements, cross-border transfer restrictions, data subject rights procedures and breach notification timelines. I then deliver a gap matrix that ranks compliance gaps by regulatory risk, so you address the highest-exposure items first.
Certified by Strathmore University's Centre for Intellectual Property and Information Technology Law (CIPIT), March 2025.
Deliverable: compliance memo, prioritised gap matrix and (Standard/Premium) draft privacy notice in Word and PDF.
Jurisdiction: Kenya. Governed by the Data Protection Act, 2019 and ODPC regulations.
Field of Law
Business (Corporate)Target Country
WorldwideLanguage
English, SwahiliService Type
Legal Assistance, Legal Writing, Documentation Review, Contracts, Regulation & Compliance, Trademark RegistrationWhat's included
| Service Tiers |
Starter
$249
|
Standard
$449
|
Advanced
$699
|
|---|---|---|---|
| Delivery Time | 3 days | 5 days | 7 days |
Number of Revisions | 2 | 3 | 4 |
About Kevin
Capital Markets Lawyer | Regulatory Enforcement | Compliance | Kenya
Nairobi, Kenya - 4:53 pm local time
As Legal Officer at the Capital Markets Authority of Kenya, I sit inside the enforcement engine of the country's primary securities regulator. I know exactly where licensed intermediaries breach the Capital Markets Act, where compliance frameworks fail inspection and where boards expose themselves to regulatory sanction. That intelligence is what I bring to every client mandate.
What I handle:
Capital markets and securities - CMA licensing applications, regulatory opinions, disclosure obligations, prospectus review and enforcement risk analysis for fund managers, stockbrokers, investment advisers and listed companies.
Corporate and commercial law - company incorporation and restructuring, shareholder agreements, M&A due diligence, board advisory, joint ventures and commercial contracts.
Regulatory compliance - gap analyses, risk-based compliance frameworks, NSE/CDSC rule compliance and internal compliance manual drafting.
Data protection - compliance under Kenya's Data Protection Act 2019, ODPC registration, privacy policies, data processing agreements and privacy impact assessments.
Dispute resolution - litigation support, legal opinions, research memos and certified professional mediation (MTI International East Africa, 2025).
Why the work holds:
LLB Second Class Upper Honours, University of Nairobi. Postgraduate Diploma in Law, Kenya School of Law. Current 2026 Practising Certificate, No. LSK/26/10210. CS Advanced Level candidate - Foundation and Intermediate complete in corporate governance, financial markets and public sector administration.
Deliverables are precise, deadline-driven and written for professionals who cannot afford generalities. If your matter sits at the intersection of Kenyan capital markets, corporate law or regulatory compliance, send a message.
Steps for completing your project
After purchasing the project, send requirements so Kevin can start the project.
Delivery time starts when Kevin receives requirements from you.
Kevin works on your project following the steps below.
Revisions may occur after the delivery date.
You describe your business model
the personal data you process, your current privacy documentation and any prior ODPC engagement. I identify the compliance areas requiring analysis.