Data privacy is your right to decide who can access your personal information and how it is used. In today’s connected world, it covers more than your name or phone number; it includes your online activity, location, messages, browsing habits, and the digital traces you leave behind.
Understanding Privacy
Privacy is the fundamental right to keep parts of your life and personal information out of unwanted attention. Just as you might close a door for a private conversation, lock your phone, or draw the curtains, data privacy extends the same level of control to your digital life.
Because most people are constantly online, privacy now also includes how information about you and your family is collected, shared, and used. You deserve control over your data; this is the heart of data privacy.
What Is Data Privacy?
Data privacy refers to the protection of personal information from unauthorised access by people or organisations. It also includes your ability to decide when, how, and to what extent your information is shared.
Personal data includes information that can identify you, such as your name, address, phone number, date of birth, and identification number. It also includes behavioural data, such as the websites you visit, the apps you use, the products you buy, and how long you spend on a webpage.
Even a few minutes spent streaming a video, browsing a website, or using an app can generate thousands of data points about you.
Why Your Data Is Valuable
Companies, advertisers, and data brokers collect personal information to deliver targeted advertisements, track shopping trends, and analyse user behaviour. Some organisations claim to anonymise data before selling or sharing it, but anonymisation does not always remove privacy risks.
Your data has value. Treating it like currency can help you make more deliberate decisions about what you share and with whom.
Data Privacy vs. Cybersecurity
Data privacy and cybersecurity are closely connected, but they address different concerns.
Data privacy: Who may access your personal data and how it may be used or shared.
Cybersecurity: Protecting data and systems from hacking, malware, unauthorised access, and other online threats.
Strong cybersecurity helps keep your information safe, while good privacy practices help you decide what information should be collected and shared in the first place.
Why Data Privacy Matters
You may wonder why data privacy matters if “everything is already online.” But consider how often you search for a product and then see advertisements for it everywhere, or download an app that asks for access to your contacts or messages without a clear reason.
- Security: The more personal data you share, the greater the risk that it could be exposed, stolen, or misused. Protecting sensitive details such as financial or health information reduces this risk.
- Choice: Understanding privacy helps you decide what information you are comfortable sharing, especially when apps request access they do not genuinely need.
- Balance: Some services require certain data to function. For example, a maps app needs your location to provide directions. The goal is to share only what is necessary.
Data Privacy in Kenya: The Role of the ODPC
In Kenya, data privacy is protected under the Data Protection Act, 2019, which gives effect to the constitutional right to privacy. The Act established the Office of the Data Protection Commissioner (ODPC) to regulate how organisations collect, use, store, and share personal data.
The ODPC protects individuals-known as data subjects-by ensuring that organisations handle personal information lawfully, fairly, and transparently. Its mandate includes regulating data controllers and processors, enforcing the Act, and providing remedies when data rights are violated.
Your rights under Kenyan law
Under the Data Protection Act, you have the right to:
- Be informed about how your personal data will be used.
- Access personal data held by an organisation.
- Correct false or misleading information about you.
- Request deletion of false or misleading data.
- Object to the processing of all or part of your personal data.
- Request data portability and restrict certain forms of processing.
What to do if your data is misused
If an organisation collects your data without proper consent, shares it without permission, refuses to correct inaccurate information, or mishandles a data breach, you can lodge a complaint with the ODPC. Complaints may be submitted through the ODPC website or by email at complaint@odpc.go.ke.
You can also report a personal data breach through the ODPC’s reporting channels. When filing a complaint, include details such as the organisation involved, what happened, when it occurred, any harm suffered, and any supporting evidence.
Practical Ways to Protect Your Privacy
While you cannot control every decision organisations make about your data, you can take meaningful steps to protect it.
- Recognise what you cannot control. Some organisations and services legitimately require certain information to provide a service. Focus on the choices you can make.
- Question permission requests. Before tapping “Allow,” ask why an app needs access to your location, contacts, camera, microphone, or files. Deny permissions that seem unnecessary.
- Review your settings regularly. Check your privacy settings at least monthly. Turn off location, camera, or microphone access when it is not needed, and limit apps to using certain data only while they are open.
- Audit your apps. Review the apps on your device every few months and remove those you no longer use. This reduces unnecessary data collection and frees up space. You can always reinstall an app later.
Your Data, Your Right
You may not always control how your information is collected or shared, but Kenyan law gives you important rights. The ODPC exists to hold data controllers and processors accountable and to help individuals seek redress when their privacy is violated.
Treat your personal data as valuable. Know your rights, review your permissions, question unnecessary data requests, and speak up when something goes wrong.
