With Kenya’s Data Protection Act now fully in force, organisations must ensure responsible collection, storage, and use of personal data. At Muriungi, Kajuju & Karoki Advocates LLP, we help businesses, institutions, and digital service providers remain compliant while building trust with their customers and stakeholders.

Our data protection and privacy services include:

• Compliance Audits & Risk Assessments – Evaluating data handling practices and identifying legal gaps.

• Data Protection Policies & Frameworks – Drafting privacy policies, consent mechanisms, retention policies, and breach protocols.

• Registration of Data Controllers & Processors – Facilitating licensing with the Office of the Data Protection Commissioner (ODPC).

• Contract & Cross-Border Data Transfer Advisory – Drafting data sharing agreements, NDAs, and ensuring lawful international transfers.

• Employee & Customer Data Compliance – Advising on HR data handling, customer records, marketing communications, and surveillance systems.

• Data Breach Management & Incident Response – Supporting organisations in breach notification, investigation, and mitigation.

• Training & Awareness Programs – Equipping teams with legal knowledge to maintain ongoing compliance.

We take a practical and proactive approach—helping clients build privacy into their operations without stifling innovation or efficiency. Whether you’re a startup, corporate, or institution, we ensure your data practices are transparent, lawful, and secure.