Data Protection & Privacy Officer Kenya(CDPPO/KEN) £1100 inc vat

Course Overview

This 5-day online instructor-led course is designed to provide participants with a comprehensive understanding of the principles, regulations, and best practices related to the Kenyan Data Protection Act 2019. The course covers essential topics to enable delegates to perform the role of a Data Protection & Privacy Officer from both an operational and strategic perspective. It equips participants with the necessary tools to design, implement, and manage a data protection and privacy framework that meets the mandatory requirements of the Kenyan Data Protection Act 2019 for their organizations or clients.

Upon completing this course, delegates will be able to implement a robust data protection and privacy framework in line with the requirements of the Kenyan Data Protection Act 2019.

Course Content & Objectives

Participants will gain in-depth understanding in the following areas:

• Fundamentals of the Kenyan Data Protection Act 2019
• The Role of the Data Protection Officer
• Application of Legal Basis for Data Processing
• Conducting and Implementing a Data Protection Impact Assessment (DPIA)
• Handling Subject Access Requests in Accordance with the Kenyan Data Protection Act
• Responding to Data Breaches under the Kenyan Data Protection Act
• Components of Data Protection Clauses in Contracts
• Developing a Comprehensive Data Protection Strategy
• Designing Data Protection and Privacy Related Policies and Procedures

Intended Audience

This course is ideal for:

• Data Protection Practitioners, Advisors, and Consultants
• Information Managers
• Project Managers
• Corporate and Public Sector Lawyers
• Compliance Specialists
• Technology Managers
• Information Security Specialists
• Individuals designated as their organization’s Data Protection Officer (DPO)
• Individuals aspiring to become Data Protection Officers

Detailed Course Breakdown

Day 1

• Welcome and Introduction
• Overview and Course Objectives
• Introduction to Personal Data and the Kenyan Data Protection Act 2019
• Overview of DPA Offences (30 mins)
• The Role of a Data Protection Officer (DPO)
• Kenyan DPA: Data Processing Conditions – Part 1
• Kenyan DPA: Data Processing Conditions – Part 2
• Incorporating AI Considerations under the Kenyan DPA (
• Recap, Q&A, and Coursework Summary

Day 2

• Welcome and Introduction
• Overview and Course Objectives
• Introduction to Data Subject Rights under the Kenyan DPA
• Data Subject Processing Conditions
• Understanding Direct Marketing Requirements
• Recognising Data Subject Requests
• Best Practices for Disclosure to Data Subjects
• Recap, Q&A, and Coursework Summary

Day 3

• Welcome, Overview, and Course Objectives
• Overview of Data Protection Impact Assessments (DPIA)
• DPIA Process and Privacy by Design Principles
• Recap and Q&A, Coursework Summary
• Introduction to Data Protection Policies and Procedures – Part 1
• Introduction to Data Protection Policies and Procedures – Part 2
• DPIA Case Study Analysis
• Recap, Q&A, and Coursework Summary

Day 4

• Welcome, Overview, and Course Objectives
• Introduction to Kenyan DPA Security and Legal Requirements
• Technical & Organisational Measures – Part 1
• Technical & Organisational Measures – Part 2
• Managing Third Parties: Data Sharing Agreements and Third-Party Contracts
• Reviewing Contract Clauses and Data Transfer Mechanisms
• Recap, Q&A, and Coursework Summary

Day 5

• Welcome and Introduction
• Overview and Course Objectives
• Accountability under the Kenyan DPA
• Maintaining a Record of Data Processing Activities (ROPA)
• Understanding Personal Data Breach Types
• Effective Response Strategies for Data Breaches
• Balancing Strategic and Business-as-Usual (BAU) Data Protection Activities
• Management Reporting and Continuous Improvement
• Recap, Q&A, and Final Coursework Summary

This course is tailored to empower professionals with the Kenyan Data Protection Act-specific knowledge and skills needed to lead their organizations in achieving compliance and fostering a culture of data protection and privacy excellence.