{
  "id": 4123797,
  "title": "ODPC gives data handlers 14 days to renew expired certificates",
  "url": "https://urgent.news/2026/08/29/odpc-gives-data-handlers-14-days-to-renew-expired-certificates",
  "topic": "tech",
  "section": "Tech",
  "published": "2026-08-29T06:05:05.000Z",
  "source": {
    "name": "Capital FM Kenya",
    "slug": "capital-fm-kenya",
    "url": "https://capitalfm.africa/odpc-gives-data-handlers-14-days-to-renew-expired-certificates/"
  },
  "original_language": "en",
  "account": "Kenyan organisations handling personal data now have 14 days to renew their expired registration certificates or face enforcement action from the Office of the Data Protection Commissioner (ODPC). Data Commissioner Immaculate Kassait emphasized that all data controllers and processors must regularise their status by September 11, 2026. The directive aims to ensure compliance with Kenya’s data protection laws. Organisations must apply for renewal promptly, or risk enforcement measures. The deadline applies to entities listed on the regulator’s published list of those with expired certificates. Under the Data Protection Act 2019, organisations must register to act as data controllers or processors. Registration certificates are valid for 24 months and must be renewed. Failure to renew could expose organisations to regulatory action. Renewal fees differ based on the size and category of the organisation. The ODPC advises submitting renewal applications 30 days before expiry. The registration covers various sectors, including education, healthcare, finance, and telecommunications. Organisations must register separately if they perform both data controller and processor roles. The ODPC aims to protect privacy rights and oversee compliance with the Data Protection Act.",
  "summary": "Data Commissioner Immaculate Kassait said all data controllers and data processors whose certificates have expired must regularise their status by September 11, 2026.",
  "key_points": [
    "Data handlers have 14 days to renew expired certificates.",
    "Renewal deadline: September 11, 2026.",
    "Failure risks enforcement action from ODPC."
  ],
  "editors_take": "The 14-day ultimatum from ODPC tightens compliance with Kenya's data protection laws, putting organisations with expired certificates at risk of enforcement action if they fail to renew promptly.",
  "illustration": null,
  "coverage": {
    "outlets": 1,
    "also_reported_by": []
  },
  "ai_generated": true,
  "disclaimer": "Summaries, key points and the editor’s take are written by software from other outlets’ reporting and may contain errors — always check the linked original."
}