Nairobi · Kenya
Submission received
Your information has been recorded by WONE.
Kenya × Technology, Data & Cyber
Technology, Data & Cyber in Kenya
Data, cyber and technology rules for running a digital business internationally. In Kenya, that means local law, local regulators and local practice, handled by a qualified professional who practises there.
Who handles this work
On request
WONE Global can find the right Technology, Data & Cyber professional in Kenya for you.
No WONE Global Partner holds this yet. Send us your requirement: WONE Global confirms whether a vetted Associate firm can act, tells you who it is and checks for conflicts before any work begins.
Bring a requirement →Kenya at a glanceAfrica
Nairobi · Tuesday 3 November
21:57
Local time
- Currency
- KES
- Working week
- Monday – Friday
- Dialling code
- +254
- Region
- Africa
What the rules say in Kenya
Technology, Data & Cyber, the essentials
From the Kenya market guide: the points that matter most for technology, data & cyber, each with the source it was checked against.
Essentials guide · Source-checked research43% of statements checked against a source12 checked against an official source14 checked against a secondary sourceChecked 2026-10-1911 held back until checked against an official source10 topics include AI-written statements, not source-checkedNot yet professionally reviewed
All persons carrying on business, including those not registered for VAT, must issue electronic tax invoices through the Kenya Revenue Authority's eTIMS system, and from 1 January 2024 business expenses not supported by an eTIMS-generated invoice are not deductible for income tax.
Section 23A of the Tax Procedures Act 2015, introduced by the Finance Act 2023. Some costs are outside the invoice requirement, including employment income, imports, investment allowances, interest and air passenger tickets.Kenya Revenue Authority · checked 2026-10-19The Data Protection Act 2019 governs the processing of personal data in Kenya and is enforced by the Office of the Data Protection Commissioner.
The Office is established under section 5 of the Act and is headed by the Data Commissioner.Office of the Data Protection Commissioner (Kenya) · checked 2026-10-19Data controllers and data processors that process personal data of people in Kenya must register with the Office of the Data Protection Commissioner unless they have annual turnover below KES 5 million and fewer than 10 employees and are outside the sectors listed for mandatory registration.
Data Protection (Registration of Data Controllers and Data Processors) Regulations 2021, in effect from 14 July 2022. Sectors registering regardless of size include education, health, hospitality, property management, financial services, telecommunications, direct marketing and transport. Certificates are valid for two years.Office of the Data Protection Commissioner (Kenya) · checked 2026-10-19Personal data may be transferred outside Kenya only in the situations the law allows, such as where appropriate safeguards are in place, and transfers of sensitive data such as health or biometric data need the data subject's explicit consent.
The ODPC recognises binding corporate rules and its standard contractual clauses (2023 edition) as safeguards. Data Protection Act 2019 and the general regulations.Office of the Data Protection Commissioner (Kenya) · checked 2026-10-19An entity that becomes aware of a personal data breach must report it to the Office of the Data Protection Commissioner within 72 hours and justify any delay.
Affected data subjects must be told in writing within a reasonably practical period unless their identity cannot be established. Data Protection Act 2019.Office of the Data Protection Commissioner (Kenya) · checked 2026-10-19
Read the full guide: Data protection and cyber
Scope
What the service covers here
- 01Map technology and data flows
- 02Identify privacy, cybersecurity and localisation requirements
- 03Review technology contracts and vendor dependencies
- 04Coordinate practical compliance across relevant markets
Key questions
What we will work through with you
- What needs to be decided before technology, data & cyber work starts?
- Who is professionally responsible in each country?
- Which other work, such as tax or employment, must happen at the same time?
- What information and decisions are needed from the business?
If your work involves another country or another area of expertise, WONE Global brings in the right professional and keeps all advisers informed.
WONE Global Partners in Kenya
Professionals working here
No named lead for Technology, Data & Cyber yet — these WONE Global professionals already work in Kenya and can bring the right local colleague in.
Nairobi · Kenya
Mombasa · KenyaWONE Global Partner · Kenya
Farheen Khandwalla
Nairobi · KenyaAlso in Kenya
Other services in this market
Appointed services show their named professional. Open positions link directly to the Expression of Interest form.
Legal & ContractingLed by James Ngochi NgugiTax & International StructuringLed by Farheen KhandwallaCorporate & Entity ServicesOpen position · Expression of Interest →Government & Regulatory AffairsOpen position · Expression of Interest →Employment, Payroll & MobilityLed by James Ngochi NgugiCommercial Intelligence & Market ResearchOpen position · Expression of Interest →Accounting, Reporting & Statutory ComplianceOpen position · Expression of Interest →Audit & AssuranceLed by Abdul BaghaFinance & TreasuryOpen position · Expression of Interest →Banking & Capital AccessOpen position · Expression of Interest →Payments, Foreign Exchange & SettlementOpen position · Expression of Interest →Insurance & Risk TransferOpen position · Expression of Interest →Transactions & DealsOpen position · Expression of Interest →Trade, Customs & Supply ChainOpen position · Expression of Interest →Intellectual Property & Brand ProtectionOpen position · Expression of Interest →Risk, Compliance & Financial IntegrityOpen position · Expression of Interest →Disputes & ResolutionLed by James Ngochi Ngugi
Cases
What clients bring to Technology, Data & Cyber
The cases this service leads or joins, each with what is at stake, how WONE Global handles it and who handles it in Kenya.
Urgent We've been hit by ransomware. What do we do now?Cybercrime, data breaches & AI disputesCan we send customer or employee data to another country?Cybercrime, data breaches & AI disputesWhat are our cyber and privacy obligations in each country?Cybercrime, data breaches & AI disputesWe've had a data breach affecting people in several countries. What must we do?Cybercrime, data breaches & AI disputesCan we move customer or employee data to another country?Cybercrime, data breaches & AI disputesFalse or harmful content about us is spreading online. Can we remove it?Copyright, media & digital content rightsAre we using AI lawfully in all the countries we operate in?Cybercrime, data breaches & AI disputesUrgent A supplier's cyber incident has interrupted our operationsCybercrime, data breaches & AI disputesUrgent A regulator is investigating our website's consent practicesCybercrime, data breaches & AI disputesUrgent A chatbot has published defamatory or false statementsCybercrime, data breaches & AI disputes
WONE Global Intelligence
Ask about technology, data & cyber in Kenya
Ask in your own words. Answers come from WONE Global's checked records, with every source shown, and end with the named Partner who can act. Go deeper on any point, or build a decision file.
Contact WONE Global