Data Protection Act in Kenya
The collection, usage, and processing of data should all be done with caution. The main guiding principle is that personal data should only be acquired directly from the data subject and used (for processing, commercial purposes, or otherwise) with the subject’s full consent.