Over 9,000 Data Privacy Complaints Filed Since 2019, Says ODPC

By Mbungu Harrison

Email,thecoastnewspaper@gmail.com

More than 9,000 complaints related to breaches of personal data have been lodged with the Office of the Data Protection Commissioner (ODPC) since the enactment of the Data Protection Act in 2019.

This underscores the growing public awareness of data privacy rights in Kenya.

Data commissioner Immaculate Kassait said the Complaints, Investigation and Enforcement Department has received a total of 9,061 complaints since the law came into force with the office taking firm enforcement action against violators.

“The number of complaints we have received shows that Kenyans are increasingly aware of their rights under the Data Protection Act and are confident in seeking redress,” she said during a media breakfast held on Monday, January 26, 2026 in Mombasa ahead of the 2026 Data Privacy Conference.

According to her the ODPC has so far issued 357 determinations, 134 enforcement notices and 20 penalty notices to data controllers and processors found to have violated the law.

Her office has also ordered compensation in 184 cases and successfully resolved 84 disputes through the Alternative Dispute Resolution (ADR) mechanism which aims to provide faster and less adversarial resolution of complaints.

The commissioner said enforcement efforts were part of the ODPC’s broader mandate to regulate the processing of personal data and ensure accountability among both public and private entities.

“The law is clear. Where compliance fails, enforcement follows. But where dialogue can resolve disputes, we encourage it The Data Protection Act was enacted in 2019, with the ODPC becoming operational in 2020.”

Since then, the office has expanded its presence across the country, opening eight regional offices in Nairobi, Mombasa, Nakuru, Kisumu, Eldoret, Machakos, Garissa and Nyeri alongside additional desks in Huduma Centres.

She said the Compliance and Inspection Directorate has registered more than 15,000 data controllers and processors, signalling increased institutional adherence to data protection requirements.

The commissioner was speaking ahead of the annual Data Privacy Day marked on January 28; an international event aimed at promoting awareness on the protection of personal information.

This year’s conference is being held under the theme “Trust the Data, Drive the Future.”

Media Council of Kenya chief executive David Omwoyo said the media has a critical role to play in promoting responsible data use while safeguarding the public interest.

“Journalists must balance the public’s right to know with the individual’s right to privacy, especially in an increasingly digital society,” he said.

The conference will also feature discussions on data governance in the age of artificial intelligence, protection of children’s data, cross-border data transfers, health data privacy and the balance between public interest and the right to privacy.

The ODPC will also recognise organisations and individuals championing responsible data practices through the Data Protection Awards and showcase a documentary tracing the evolution of Kenya’s data protection landscape.