Every business handling personal data carries obligations under Kenya's Data Protection Act, whether or not they've checked. We help businesses map their data exposure and adopt new technology — including AI tools — with the legal implications considered before rollout, not after.
Every business that collects, stores or processes personal information in Kenya carries data protection obligations, whether or not the business has reviewed them. We help map that exposure before it becomes visible the hard way — through a breach, a complaint, or a regulator's inquiry.
As AI tools become part of ordinary business operations, we also advise on the legal implications of adoption before rollout, against a Kenyan regulatory environment that is actively being defined.
Scope includes: Data Protection Act compliance · AI tool adoption reviews · ODPC guidance · data protection impact assessments
Who this is for
Businesses adopting AI tools, handling personal data, or needing to demonstrate Data Protection Act compliance to a regulator, partner or investor.
Typical situations
- Reviewing a new AI tool before it goes into use
- Preparing for or responding to ODPC guidance
- Carrying out a data protection impact assessment
Talk to Gallant before you make the decision
Not only after something goes wrong. If this touches your situation, we're glad to talk it through.