Privacy & Data Protection

As organisations increasingly collect, process, and store personal information, compliance with Kenya’s Data Protection Act has become a critical legal and commercial obligation. MW Gikunju & Company Advocates provides comprehensive legal support to organisations seeking to establish robust data protection frameworks that promote compliance, accountability, and public trust while reducing regulatory and operational risks.

We advise clients on data protection compliance, prepare and review privacy policies, data processing agreements, consent documentation, and conduct compliance audits and risk assessments. The Firm also represents clients before the Office of the Data Protection Commissioner (ODPC), provides guidance on lawful processing and cross-border data transfers, and assists organisations in responding to data breaches, regulatory investigations, and evolving data protection requirements.