[kictanet] Kenya Internet Governance Forum Online Discussion- Day 1 - Governing Data and Protecting Privacy

Thu Jun 23 23:26:50 EAT 2022

Thank you Listers for the continued discussions, once again I would request
those within these institutions that can shed some more light or share
information, to kindly do so.
One of the key things that I can pick from this discussion is that there is
lack of awareness, i.e because within your network you are aware of e.g
the standards, tools etc we assume that everyone knows.

How do we create this awareness ?
Who should create this awareness?
To whom ?

I look forward to hearing from you, we still have another day to share,
even as we continue to engage with our day 2 discussion:
Topic: *ICTs and the Upcoming Elections*

Kind Regards

*'Chance Favors the prepared mind'* - Louis Pasteur

On Thu, Jun 23, 2022 at 3:52 PM Barrack Otieno via KICTANet <
kictanet at lists.kictanet.or.ke> wrote:

> Hi Adam,
>
> Well the standards are pretty high level but they elicit a sense of
> responsibility from anyone who acquires them towards ensuring their
> information assets are properly managed and well protected. Digitalization
> revolves around processes , the standards actually address such processes.
> Not sure if there is a simpler solution among other bodies such as ISACA.
> Probably ISACA members on the list can shed some light. @Mwendwa Kivuva
> <kivuva at kictanet.or.ke>
>
> On Thu, Jun 23, 2022 at 3:38 PM Adam Lane <adam.lane at huawei.com> wrote:
>
>> Hi Barrack, are those standards addressing the issue I raise around data
>> protection and privacy, i.e. if you meet the standard then you do not share
>> data to third parties, or that any data you share is anonymized, or to some
>> other definition? I am not an ISO expert, but I thought they focus more on
>> following processes than actual results, and may not be specific enough to
>> convince me they are not sharing my data….
>>
>>
>>
>> Maybe I am just not well enough informed, in which case whoever promotes
>> such ISO standards that can assure me of such are not promoting it very
>> well, or have few apps/websites/services adopting such standards, or both….
>>
>>
>>
>> Being voluntary is a good thing. But there needs to be awareness of the
>> benefits of those standards; and maybe some market pressure to adopt the
>> standards
>>
>>
>>
>> *From:* Barrack Otieno [mailto:barrack at kictanet.or.ke]
>> *Sent:* Thursday, June 23, 2022 2:58 PM
>> *To:* Kenya's premier ICT Policy engagement platform <
>> kictanet at lists.kictanet.or.ke>; John Walubengo <jwalubengo at kictanet.or.ke
>> >
>> *Cc:* Adam Lane <adam.lane at huawei.com>; awatila at gmail.com
>> *Subject:* Re: [kictanet] Kenya Internet Governance Forum Online
>> Discussion- Day 1 - Governing Data and Protecting Privacy
>>
>>
>>
>> Hi @Adam Lane <adam.lane at huawei.com>
>>
>>
>>
>> Many thanks. We have tonnes of domesticated ISO 27,000 series Standards
>> at the Kenya Bureau of Standards. Together with @John Walubengo
>> <jwalubengo at kictanet.or.ke> and other listers we have been involved in
>> local standards development. The Challenge we have always faced is that
>> Standards focusing on ICT are voluntary. Only those touching on Health and
>> Safety are mandatory. With creation of the Office of the Data Protection
>> Commissioner, things might change.
>>
>>
>>
>> Best Regards
>>
>>
>>
>>
>>
>> On Thu, Jun 23, 2022 at 2:45 PM Adam Lane via KICTANet <
>> kictanet at lists.kictanet.or.ke> wrote:
>>
>> I would say the main issue I have is that most services/websites/apps
>> don’t give any options. You accept the Terms and Conditions or you don’t.
>> It is good that nowadays, at least in Android that I know well, permissions
>> can be easily denied or limited for apps in relation to accessing certain
>> functions from the device. However this is not the same as using data
>> itself. Hopefully in the future there will be more flexibility and options
>> around what one accepts. With cookies, some websites give options (either a
>> list of several things you can toggle on or off, or options of reject,
>> minimum required, all) though other websites don’t give options at all.
>>
>>
>>
>> I am not aware of any voluntary standards in Kenya that a
>> website/app/service could self-certify against or be independently verified
>> against that shows they meet such standards around use of data
>> protection/privacy. An Act really only defines illegal and legal, but it is
>> good to have different options within legal that can show strong, stronger,
>> very strong protections, for example, that are something that is voluntary
>> but could be recognized by users.
>>
>>
>>
>> Regards
>>
>> Adam
>>
>>
>>
>> *From:* KICTANet [mailto:kictanet-bounces+adam.lane=
>> huawei.com at lists.kictanet.or.ke] *On Behalf Of *Alex Watila via KICTANet
>> *Sent:* Thursday, June 23, 2022 2:36 PM
>> *To:* Adam Lane <adam.lane at huawei.com>
>> *Cc:* awatila at gmail.com
>> *Subject:* Re: [kictanet] Kenya Internet Governance Forum Online
>> Discussion- Day 1 - Governing Data and Protecting Privacy
>>
>>
>>
>> Dear Listers,
>>
>> On question 1 I think people are over fearful regarding  the issue of
>> data protection. I would suggest that they need to take the same approach
>> as organizations are doing by conducting  a personal data privacy impact
>> assessment. E.g. what is the real risk of your personal identifiable
>> Information leaking?
>>
>>
>>
>> One example I considered in say your telephone number. You hide it online
>> but hand out your business cards that have your contact details.
>>
>>
>>
>> Best Regards,
>>
>>
>>
>> Consultant
>>
>> ICT4D
>>
>> *Quality Management Systems
>> <https://advisera.com/27001academy/#a_aid=621f58ced9bb1&a_bid=f79f3b0b> *
>>
>> *Information Security Management Systems
>> <https://advisera.com/27001academy/#a_aid=621f58ced9bb1&a_bid=f79f3b0b>*
>>
>>
>>
>> *From:* KICTANet <kictanet-bounces+awatila=gmail.com at lists.kictanet.or.ke>
>> *On Behalf Of *Judy Okite via KICTANet
>> *Sent:* Wednesday, June 22, 2022 5:07 AM
>> *To:* Alex Watila <awatila at gmail.com>
>> *Cc:* Judy Okite <judyokite at gmail.com>
>> *Subject:* [kictanet] Kenya Internet Governance Forum Online Discussion-
>> Day 1 - Governing Data and Protecting Privacy
>>
>>
>> Good Morning Listers,
>>
>>
>>
>> As mentioned earlier by the KIGF- MAG Chair, we begin the online
>> discussions today.
>>
>>
>>
>> *Topic: Governing Data and Protecting Privacy *
>>
>>
>>
>> The Kenya Data Protection Act <https://www.odpc.go.ke/dpa-act/>was
>> gazetted in 2019 ,
>>
>>  An Act of Parliament to give effect to Article 31(c) and (d) of the
>> Constitution of Kenya , 2010 (Right to privacy);
>>
>> - To establish the Office of the Data Protection Commissioner;
>>
>> - To make provision for the regulation of the processing of personal
>> data;
>>
>> - To provide for the rights of data subjects and obligations of data
>> controllers and processors; and for connected purposes
>>
>>
>>
>>
>>
>> To kick off these discussions, we ask;
>>
>>
>>
>> 1. As a lister how safe do you feel about the safety of your personal
>> data online?What do you think could be done better to improve the
>> protection of data online?
>>
>> 2. How safe are children and persons with disabilities on their data
>> privacy?
>>
>>
>>
>> We look forward to a vibrant discussion and once again do not forget to
>> register to participate in this year's main IGF events using this
>>
>>  link:  https://bit.ly/39pXf9a .Our official hashtag is *#KeIGF2022*
>>
>>
>>
>> Kind Regards,
>>
>>
>>
>> On Tue, Jun 21, 2022 at 6:12 AM Rosemary Koech-Kimwatu via KICTANet <
>> kictanet at lists.kictanet.or.ke> wrote:
>>
>> Good morning Listers,
>>
>>
>>
>> Receive warm greetings from the Multi Advisory Group (MAG) that has been
>> working to prepare this year's Kenya Internet Governance Forum (KIGF).
>> Ahead of the KIGF week, there shall be a series of online discussions to
>> set the pace for the discussions that shall be held during the KIGF.
>>
>>
>>
>> The online discussion will run from the 22nd to the 24th of June and the
>> following are the discussion topics.
>>
>>
>>
>> Day 1. *Governing data and protecting privacy.*
>>
>> Day 2. *ICT's and the upcoming elections.*
>>
>> Day 3. *Connecting all people and promoting cyber hygiene and emerging
>> issues including youth, online work, inclusion and regulation.*
>>
>>
>>
>> The discussion topics shall be posted by a moderator and we invite all of
>> you to participate. Also do remember to register for your participation
>> in this year's main IGF events using this link: https://bit.ly/39pXf9a .Our
>> official hashtag is *#KeIGF2022*
>>
>>
>>
>> Good day!
>>
>>
>>
>> Rosemary Koech-Kimwatu
>>
>> KIGF 2022 MAG Chair
>>
>> Advocate
>>
>> Public Policy, Data Protection and Regulatory Affairs Specialist
>>
>>
>>
>>
>>
>>
>>
>> _______________________________________________
>> KICTANet mailing list
>> KICTANet at lists.kictanet.or.ke
>> https://lists.kictanet.or.ke/mailman/listinfo/kictanet
>> Twitter: http://twitter.com/kictanet
>> Facebook: https://www.facebook.com/KICTANet/
>>
>> Unsubscribe or change your options at
>> https://lists.kictanet.or.ke/mailman/options/kictanet/judyokite%40gmail.com
>>
>>
>> KICTANet is a multi-stakeholder Think Tank for people and institutions
>> interested and involved in ICT policy and regulation. KICTANet is a
>> catalyst for reform in the Information and Communication Technology sector.
>> Its work is guided by four pillars of Policy Advocacy, Capacity Building,
>> Research, and Stakeholder Engagement.
>>
>> KICTANetiquette : Adhere to the same standards of acceptable behaviors
>> online that you follow in real life: respect people's times and bandwidth,
>> share knowledge, don't flame or abuse or personalize, respect privacy, do
>> not spam, do not market your wares or qualifications.
>>
>> KICTANet - The Power of Communities, is Kenya's premier ICT policy
>> engagement platform.
>>
>> _______________________________________________
>> KICTANet mailing list
>> KICTANet at lists.kictanet.or.ke
>> https://lists.kictanet.or.ke/mailman/listinfo/kictanet
>> Twitter: http://twitter.com/kictanet
>> Facebook: https://www.facebook.com/KICTANet/
>>
>> Unsubscribe or change your options at
>> https://lists.kictanet.or.ke/mailman/options/kictanet/barrack%40kictanet.or.ke
>>
>>
>> KICTANet is a multi-stakeholder Think Tank for people and institutions
>> interested and involved in ICT policy and regulation. KICTANet is a
>> catalyst for reform in the Information and Communication Technology sector.
>> Its work is guided by four pillars of Policy Advocacy, Capacity Building,
>> Research, and Stakeholder Engagement.
>>
>> KICTANetiquette : Adhere to the same standards of acceptable behaviors
>> online that you follow in real life: respect people's times and bandwidth,
>> share knowledge, don't flame or abuse or personalize, respect privacy, do
>> not spam, do not market your wares or qualifications.
>>
>> KICTANet - The Power of Communities, is Kenya's premier ICT policy
>> engagement platform.
>>
>>
>>
>> --
>>
>> *Barrack Otieno*
>>
>> *Trustee*
>>
>> *Kenya ICT Action Network (KICTAnet)*
>>
>> *Skype:barrack.otieno*
>>
>> *+254721325277*
>>
>> *https://www.linkedin.com/in/barrack-otieno-2101262b/
>> <https://www.linkedin.com/in/barrack-otieno-2101262b/>*
>>
>> *www.kictanet.or.ke <http://www.kictanet.or.ke>*
>>
>
>
> --
>
> *Barrack Otieno*
> *Trustee*
> *Kenya ICT Action Network (KICTAnet)*
> *Skype:barrack.otieno*
> *+254721325277*
>
> *https://www.linkedin.com/in/barrack-otieno-2101262b/
> <https://www.linkedin.com/in/barrack-otieno-2101262b/>*
> *www.kictanet.or.ke <http://www.kictanet.or.ke>*
> _______________________________________________
> KICTANet mailing list
> KICTANet at lists.kictanet.or.ke
> https://lists.kictanet.or.ke/mailman/listinfo/kictanet
> Twitter: http://twitter.com/kictanet
> Facebook: https://www.facebook.com/KICTANet/
>
> Unsubscribe or change your options at
> https://lists.kictanet.or.ke/mailman/options/kictanet/judyokite%40gmail.com
>
>
> KICTANet is a multi-stakeholder Think Tank for people and institutions
> interested and involved in ICT policy and regulation. KICTANet is a
> catalyst for reform in the Information and Communication Technology sector.
> Its work is guided by four pillars of Policy Advocacy, Capacity Building,
> Research, and Stakeholder Engagement.
>
> KICTANetiquette : Adhere to the same standards of acceptable behaviors
> online that you follow in real life: respect people's times and bandwidth,
> share knowledge, don't flame or abuse or personalize, respect privacy, do
> not spam, do not market your wares or qualifications.
>
> KICTANet - The Power of Communities, is Kenya's premier ICT policy
> engagement platform.
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.kictanet.or.ke/pipermail/kictanet/attachments/20220623/c6a49aa5/attachment.htm>