The Office of the Data Protection Commissioner (ODPC) has launched a strategic plan aimed at enhancing the country’s data protection framework.
The roadmap, which is themed Promoting your personal data protection by design or default, has outlined three main objectives which will guide the activities of the ODPC for the next five years.
In the strategy, the ODPC plans to enhance data governance by annually reviewing the Data Protection Act 2019 and the Regulations to ensure that they align with the changing data processing technologies.
There are also plans to strengthen the capacity of institutions handling data to effectively enforce data protection laws. Additionally, there are proposals to heighten ODPC’s monitoring and surveillance function to ensure compliance with the laws, which the office notes will foster trust and transparency in data protection.

The ODPC has also laid out plans to increase public awareness about data protection, which the policy notes will instill a strong understanding of data protection practices and, in turn, foster their adherence to data protection laws.
Speaking during the launch at the Dedan Kimathi University of Technology, Information Communication and Digital Economy Cabinet Secretary (CS) William Kabogo termed the roadmap as a significant step towards safeguarding the rights of Kenyans working in the digital space.
CS Kabogo, at the same time, reiterated the government’s commitment to putting in place measures that will promote data protection and reinforce public trust in the digital economy.
“The connection between digital transformation and data protection is clear. My Ministry remains committed to enhancing data governance in Kenya. We are also determined to ensure that Kenyans’ data is protected at every point,” stated Kabogo.
Additionally, the CS noted the implementation of the strategy will significantly bolster Kenya’s position as an ICT hub and investment destination.
“This move will enhance investor confidence in Kenya’s digital ecosystem. It will open new markets in Europe for Kenyan business, particularly in the thriving sectors of fintech, health technology and digital services and position Kenya globally as a hub for digital trade and innovation. It will also promote Kenya as a source of skilled digital workers on the global stage,” stated the CS.
According to Data Commissioner Immaculate Kassait, the estimated budget for implementing the 2025-2029 strategic plan has been set at Sh12.64 billion. Ms Kassait said that besides depending on allocations from the National Treasury, her office will be banking on collaborations with sector and industry players to finance the deficit.
“We have realised that the resource envelope is becoming narrower. As an office and for sustainability purposes, we need to focus on resource mobilisation and, of course, pursue project-based funding,” she said.
Earlier, the CS officially opened the Central Region Data Protection office in Nyeri town. The office brings the total number of regional offices established to decentralise data protection services in the country to eight. Kabogo revealed plans to open an additional five offices.
Kabogo said the expansion plan underscores the government’s commitment to digitising government services and ensuring all Kenyans have direct access to essential data protection services.
“With this launch, we now have eight offices towards our goal of having 13 offices nationwide, including having a presence in all Huduma Centres as outlined in the Fourth Medium Term Plan and the Nanyuki Cabinet Resolution of 2023,” stated Kabogo.
By Wangari Mwangi
