On 11th November 2025, the office of the Data Protection Commissioner (ODPC) published eight sector-specific guidance notes to promote practical, lawful, and responsible processing of personal data.
Data handlers processing personal data contained in these eight sectors are required to abide by these new guidelines. The sector specific guidance notes cover processing in the following areas:
1. Biometric data
2. Children’s data
3. Public sector
4. Micro, small and medium enterprises (MSMEs)
5. Journalistic, artistic and literary purposes
6. Historical and statistical purposes
7. Research purposes
8. Publications of recorded media
As with numerous aspects of data privacy compliance, failure to adhere to the sector specific guidelines will pose potential exposure to serious legal risks, reputational damage, operational disruption, and hefty penalties.
The CMS Kenya | Daly Inamdar Advocates Data Protection Team comprising certified privacy professionals is happy to come on board as your resource partners in supporting your compliance efforts. For more information on data protection please click here.
This alert serves the purpose of general guidance and is not intended to constitute specific legal advice. For legal advice with respect to this alert, please contact our Partner, Collette Akwana at Collette.Akwana@CMS-DI.com.
*Contributors*
Wilson Mrima – Associate
