Draft Guidance Notes

Dear Stakeholders,

The Office, through the Compliance Directorate, has developed four guidance notes on the processing of personal data, covering Transport service firms, Data Protection Officers, Institutional Data Protection Policy, and Cross-border data transfers. These guidance notes are intended to provide clear and concise guidance on the handling of personal data in accordance with the Act and the Regulations.

Please find the draft guidance note for your review and comments. Use the template attached to capture your comments and share via email at compliance@odpc.go.ke by 15th May 2026