A youth group in Nandi County has launched a data protection policy to safeguard personal information collected from its members and communities.
Nandi County Youth Bunge said the policy will ensure compliance with the Data Protection Act, 2019, and set clear procedures for the collection, storage, processing and sharing of personal data.
Speaking during the launch in Kapsabet, one of the officials, Paulo Lunga, said the organisation handles large amounts of data, necessitating measures to ensure it is handled responsibly.
“It is important to set in place structures that make sure that we are responsible for the data that we collect,” he said.
He raised concern over cases where personal information is obtained and used without consent, citing unsolicited advertising messages and calls from organisations.
Lunga said the policy will help the group understand its legal obligations and avoid penalties.
He said data subjects should know their rights and channels for lodging complaints against misuse of their information.
He added that the group will undertake public sensitisation on the Act, including the need for consent before using personal information such as photographs, and encourage those whose data is misused to seek redress.
Lunga urged county governments and public institutions to adopt similar policies, especially when collecting sensitive information during medical camps and community programmes, noting that data from children and other vulnerable groups requires particular care.
“We encourage everybody to ensure that they look at the Data Protection Act and see what the requirements of the law are,” he said.
The policy was developed with support from the Open Institute, which provided technical assistance and capacity building.
Open Institute Deputy Executive Director Christina Julu termed the launch an important milestone five years after the enactment of the Act, saying it marked a shift from compliance to practice.
“This is the first time we are witnessing this opportunity, which is a great deal to us,” she said, adding that the process began in 2025 after questions emerged on compliance.
“What this says is, yes, we are collecting your data, but beyond the collection of your data, we are also protecting your data,” she added.
Julu challenged civil society organisations and county governments to develop similar policies and ensure implementation, saying the Institute is ready to support them.
The event brought together representatives from other civil society organisations amid the growing use of digital platforms and artificial intelligence, which had increased cases of personal data being generated and shared.
By Kosuri Valarie
