How do you Protect your Data?

By Thuku Kariuki, Nairobi 

What is your data and what is its worth? Your data includes your bank account information, tax receipts, and credit card details. It also includes geographical information of your whereabouts. If you spend time online, there are records of websites you have visited and social media pages. Should everyone have access to that information?

Most of us don't think too much about protecting our data. When we visit a website, we are asked about allowing cookies and usually just click yes. Other sites will explicitly ask for permission to review and store your data, often claiming it will improve your online experience. While most of our browsing is safe, there are risks involved.

Businesses, especially banks, hire security consultants to ensure the protection of their data. Company strategies, contract statistics, spending and earnings, and relationships with individuals and organizations can be valuable weapons in the hands of the competition.

From personal to professional, data protection is important, especially when it comes to financial information. Kenya enacted the Data Protection Act 2019 almost five years ago.

The Office of the Data Protection Commissioner (ODPC) was established to regulate the processing of personal data and ensure the rights of data subjects, as well as the obligations of data controllers and processors.

Since then, the ODPC has registered over 5,000 data protection organizations, investigated over 5,300 complaints, issued 60 enforcement notices, and assessed 8 penalties.

But simply having a government department to oversee data collection and dissemination doesn't mean the mission is accomplished, even with impressive results. Data issues are ever-changing, including how it is collected, used, and transferred, changing laws, and criminal exploitation.

This has led Kenya to join NADPA, the Network of African Data Protection Authorities. The organization has provided valuable information and expertise. The cooperation has been so useful that Nairobi will be hosting this year's summit from May 7-10th. The event will bring together African data protection authorities, legal experts, private cybersecurity professionals, NGOs, industry leaders, and others. Data security and protecting children will be hot topics. The conference will also focus on enhancing data flows to benefit business, law enforcement, and science.

Most sectors appreciate a good balance between security and the need for information. While the government seems like a good partner, corruption still raises some concerns. This is why the ODPC has reached out to journalists to focus on data protection, the work of their agency, and the upcoming summit. 

Kenya's Data Commissioner, Immaculate Kassait speaking during a stakeholders meeting on data protection

At a breakfast hosted by the ODPC this week in Nairobi, media practitioners were able to learn more about data protection and have some of their own concerns addressed. Kenya's Data Commissioner, Immaculate Kassait, assured journalists that their ability to report was not being restricted and promised cooperation in case journalists faced challenges.

"But no one should stop you when you're doing your work as a journalist. So, let's be clear that when people work as journalists, they do it in the public interest and are exempt under the Data Protection Act."

Therefore, the Kenyan government watchdog agency, private data protection organizations, the media, and industry experts are all working towards creating a safer environment for your information. However, this doesn't mean you shouldn't be cautious with your data. It is advisable to use strong passwords, and it is also a good practice to close mobile applications when not in use. Avoid using shared devices to access sensitive material, particularly personal financial information.

Rest assured that here in Kenya, as well as in many other countries in Africa, data protection is receiving increased scrutiny, resulting in enhanced security measures. To learn more about the value of your data, feel free to contact the ODPC. Additionally, make sure to report any alarming practices related to data that you come across. Cooperation is crucial in maintaining the privacy and safety of your information.

Nairobi will be hosting the 9th NADPA Conference from May 7th to 9th.