On November 08, 2019, Kenya passed a comprehensive data protection legislation, "The Data Protection Act, 2019." The law governs the processing of personal data in Kenya including collection, storage, transfer, deletion and other activities related to personal data. The law applies to any individual or organization (public or private) that collects or processes personal data in Kenya, regardless of where the organization is based.
Highlights of the law can be found here.