{
  "id": 19336898,
  "title": "Kassait: Making data protection a national conversation was my key achievement",
  "url": "https://urgent.news/2026/11/10/kassait-making-data-protection-a-national-conversation-was-my-key",
  "topic": "world",
  "section": "World",
  "published": "2026-11-10T13:23:21.000Z",
  "source": {
    "name": "Capital FM Kenya",
    "slug": "capital-fm-kenya",
    "url": "https://capitalfm.africa/kassait-making-data-protection-a-national-conversation-was-my-key-achievement/"
  },
  "original_language": "en",
  "account": "Outgoing Data Commissioner Immaculate Kassait highlighted data protection as her most significant achievement during her six-year tenure at the Office of the Data Protection Commissioner (ODPC) in Kenya. Kassait noted that the office made significant strides in shifting data protection from a niche regulatory issue to a national conversation, raising public awareness about the importance of safeguarding personal information. The ODPC challenged organizations to become more accountable for their data-handling practices and pushed for greater compliance with data protection requirements.\n\nKassait recalled initial resistance from institutions when the regulator began engaging them and demanding adherence to data protection rules. She emphasized that the change in attitude towards data protection was a defining factor during her tenure, as organizations had to account for how they processed personal information.\n\nIn addition to enforcement, Kassait mentioned the office's role in addressing complaints, investigating alleged breaches, and determining appropriate actions against organizations found to violate data protection requirements. The investigation process involved assessing the validity of complaints, considering factors such as the frequency of offenses, the severity of the breach, the number of people affected, and the steps taken by the organization to rectify the violation.\n\nLooking ahead, Kassait highlighted the challenges posed by emerging technologies, particularly artificial intelligence. She questioned whether individuals whose personal information is used for training or developing AI systems are adequately informed about potential data repurposing. The ODPC had issued guidance on AI, outlining acceptable uses, responsibilities, and practices organizations should avoid.\n\nKassait pointed out Kenya's reliance on foreign technology infrastructure as a challenge to the country's control over personal data. She argued that limited domestic capacity could weaken negotiation power with international technology companies and called for considering data protection at the design stage of digital products and services. Kassait emphasized the need for data minimization, ensuring that organizations collect only the information necessary for their intended purpose.\n\nDespite the progress made, Kassait acknowledged that important work remains, including strengthening Kenya's legal and institutional framework for cross-border data protection matters. She identified the ratification of the Malabo Convention on Cyber Security and Personal Data Protection and legal reforms to facilitate mutual legal assistance as parts of the unfinished agenda. Kassait stressed that while digital data flows cannot be stopped, the priority should be ensuring personal information is handled responsibly and protected through appropriate safeguards.",
  "summary": "NAIROBI, Kenya, Nov 10-Outgoing Data Commissioner Immaculate Kassait says one of her biggest achievements during her six-year tenure was moving data protection from a largely unfamiliar regulatory issue to a…",
  "key_points": [],
  "editors_take": null,
  "illustration": null,
  "coverage": {
    "outlets": 1,
    "also_reported_by": []
  },
  "ai_generated": true,
  "disclaimer": "Summaries, key points and the editor’s take are written by software from other outlets’ reporting and may contain errors — always check the linked original."
}