Kenyan bloggers and online publishers have been urged to prioritise data privacy and equip themselves against rising surveillance threats.
During a Data Privacy Immersion Session held on 20 June at The Stanley Hotel, Nairobi, cybersecurity and legal experts sounded the alarm over how personal data is unknowingly shared and exploited on digital platforms.
“Every click, every post, every follower, it’s all part of a data trail,” said Dr. Bright Gameli, a cybersecurity expert who led the session on data-sharing risks.
“Most content creators don’t even realise how vulnerable they are, let alone the audiences they influence.”
Expert on Data Privacy
Dr. Gameli highlighted the growing reach of security agencies, both local and global, and the critical need for online publishers to adopt tools that guard against unauthorised data access.
Also Read: Finance Committee Rejects Proposal to Grant KRA Access to Personal Data
He also explained the ethical responsibility bloggers have to protect the privacy of their followers and interviewees.
Legal expert lawyer Kariuki Njui followed with an explanation on the Kenya Data Protection Act, outlining the law’s implications for digital content creators.
“You are not exempt just because you’re not a mainstream media house,” Kariuki warned. “Bloggers, influencers, and independent journalists are bound by the same data laws as any corporate institution.”
He noted that while the law provides a foundation for accountability, enforcement remains a challenge, particularly in the fast-evolving digital space.
Data Protection Act
Kenya’s Data Protection Act, 2019, is the legislation that governs how personal data is collected, processed, stored, and shared.
It’s enacted to align with international data protection standards, the law that safeguards the privacy rights of individuals by ensuring that data handlers, from government agencies to private companies uphold transparency, accountability, and fairness in managing personal information.
Also Read: Out of Google Storage? Here’s How to Free Up Space Without Deleting Important Data
The Act created the Office of the Data Protection Commissioner (ODPC), which is tasked with enforcing compliance and investigating breaches.
It gives Kenyans the right to know who holds their data, why it’s being used, and to request correction or deletion of their information.
Organisations collecting data must obtain consent, specify the purpose, and implement security safeguards.
On the other hand, Data breaches can lead to stiff penalties, including fines of up to 5 million shillings or 1% of annual turnover, whichever is higher.
Kariuki urged content creators to familiarise themselves with consent protocols, data minimisation principles, and storage limitations.
An open forum allowed participants to express concern over state surveillance, cybercrime, and gaps in digital literacy among Kenya’s youth and citizen journalists.
This comes amid the rapid digitisation of information and growing reliance on social platforms for news and activism.
Follow our WhatsApp Channel and X Account for real-time news updates.
