Legal Mandates for Technical and Organizational Measures
Under the Kenya Data Protection Act 2019, organizations handling personal identifiable information (PII) of Kenyan citizens must register with the Office of the Data Protection Commissioner (ODPC) and implement rigorous technical security safeguards.
Essential IT Infrastructure Audit Checklist
- Encryption at Rest and in Transit: Enforce AES-256 encryption on all database volumes and TLS 1.3 across all public web interfaces.
- Data Subject Access Request (DSAR) Automation: Ensure applications possess verified routines to purge or export user data within the statutory timeline.
- Breach Notification Capability: Implement Security Information and Event Management (SIEM) systems capable of detecting and reporting unauthorized access within 72 hours.
- Hardware Decommissioning Protocol: Cryptographically wipe discarded hard drives and laptops before hardware disposal or resale.
Kenya's Trusted Commercial IT Hardware & Cybersecurity Partner
Jay Digital Solutions supplies certified HP/Dell hardware, Sophos/Fortinet firewalls, and POS systems with manufacturer warranties and ETIMS invoices.