<div dir="auto">The mere fact that a bill is 5 years old should tell us a lot about how much of a priority it it. Data is big business in this age and my speculations won't be far off if I allege that there are bodies that benefit from lack of data protection laws. <div dir="auto">The bill by itself is a lazy copy paste of the UK data protection act, only that the Kenyan one is rather too lenient. Bodies that collect data should come out and state their limits on the use of personal information.</div></div><div class="gmail_extra"><br><div class="gmail_quote">On Feb 8, 2017 9:38 AM, "S.M. Muraya via kictanet" <<a href="mailto:kictanet@lists.kictanet.or.ke">kictanet@lists.kictanet.or.ke</a>> wrote:<br type="attribution"><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div dir="ltr">Ms.Esther,<div><br></div><div>We need to specify, amend or enact at least 3 laws in Kenya...</div><div><br></div><div>(i) Data protection - includes privacy clauses but also covers "data residency" - general situations when/where data must be resident in Kenya or East Africa. This is to encourage data center development in our region. Also to ensure we are not held hostage by evil, local and foreign actors. A Kenyan firm may be allowed to host data in Mauritius, but a <a href="http://go.ke" target="_blank">go.ke</a> body only back-ups.</div><div><br></div><div>For emergency services, it may be specified, data servers, MUST be hosted locally + backed up across borders, within East Africa. </div><div><br></div><div>(ii) Privacy law - specific to privacy, but includes data (e.g. password) protection clauses.</div><div><br></div><div><div>No need to travel to Canada to copy their Laws :)</div><div><br></div><div><a href="http://www.servercloudcanada.com/2015/09/canadian-privacy-laws-canadian-cloud-primer-canadian-businesses/" target="_blank">http://www.servercloudcanada.<wbr>com/2015/09/canadian-privacy-<wbr>laws-canadian-cloud-primer-<wbr>canadian-businesses/</a></div></div><div><br></div><div>(iii) "Access to information" law may be amended if it does not interpret "Access" as either "Electronic" or "Physical". For example, Go.Ke data/servers (electronic access) should be accessible by persons within Kenya where there is no IP or GSM network connection.</div><div><br></div><div>Please follow up and keep us posted.</div></div><div class="gmail_extra"><br clear="all"><div><div class="m_-4367267540221682982gmail_signature" data-smartmail="gmail_signature"><div dir="ltr"><div><div dir="ltr"><div>SMM</div><div><br></div><div><span style="line-height:13px;color:rgb(0,19,32);font-family:Trebuchet,Arial,Helvetica,sans-serif;text-align:justify;background-color:rgb(253,254,255)"><span style="background-color:rgb(253,254,255)"><span style="line-height:20px"><font size="1"><b>"Better a patient person than a warrior, one with self-control than one who takes a city." Prov 16:32</b></font></span><span style="font-size:14px;background-color:rgb(253,254,255)"><br></span></span></span></div></div></div></div></div></div>
<br><div class="gmail_quote">On Tue, Feb 7, 2017 at 9:35 PM, esther kamande via kictanet <span dir="ltr"><<a href="mailto:kictanet@lists.kictanet.or.ke" target="_blank">kictanet@lists.kictanet.or.ke</a><wbr>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div dir="ltr"><p class="MsoNormal" style="margin-bottom:0.0001pt;text-align:justify;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial"><font size="4"><span style="line-height:115%;font-family:tahoma,sans-serif;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial">The
<b>current Data Protection Bill 2013 section
17 (b)</b> waters down the provisions regarding misuse of information in
section 16 by allowing use of personal data for commercial purposes without
obtaining consent as long as it is allowed by<span class="m_-4367267540221682982m_-4370881423273251589gmail-apple-converted-space"> </span></span><strong><span style="font-family:tahoma,sans-serif">any other law</span></strong>. This
clause provides a loophole that can be exploited to evade the principles
provided for in section 4. Furthermore, <b>t</b><b>here is
no provision prohibiting supply and sale of i.e electoral registers,
registration of persons records</b> for political and commercial purposes
having regard to the nature of the data contained in the registers, including
in particular that it is personal data compulsorily obtained for the specific
purpose of enabling Kenyans transact and qualifying electors to vote.<span style="line-height:115%;font-family:tahoma,sans-serif"><span></span></span></font></p>
<p class="MsoNormal" style="margin-bottom:0.0001pt;text-align:justify;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial"><span style="line-height:115%;font-family:tahoma,sans-serif"><span><font size="4"> </font></span></span></p>
<p class="MsoNormal" style="margin-bottom:0.0001pt;text-align:justify"><span style="line-height:115%;font-family:tahoma,sans-serif"><span><font size="4"> </font></span></span></p>
<p class="MsoNormal" style="margin-bottom:0.0001pt;text-align:justify;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial"><font size="4"><span style="line-height:115%;font-family:tahoma,sans-serif;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial">The current Data Protection
Bill 2013 offers no solid protection to the data subject and doesn’t
reflect the current best practices globally. With the current Bill, data
subjects remain at the mercy of the data processors and controllers (agencies)
as the legal burden/responsibility the act imposes on the authorized users is
not sufficient .</span> </font></p><p class="MsoNormal" style="margin-bottom:0.0001pt;text-align:justify;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial"><font size="4"><br></font></p><p class="MsoNormal" style="margin-bottom:0.0001pt;text-align:justify;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial"><font size="4">There is an urgent need to revise the current draft to address some of these
issues that we are currently experiencing. <span></span></font></p>
<p class="MsoNormal" style="margin-bottom:0.0001pt;text-align:justify;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial"><span style="line-height:115%;font-family:tahoma,sans-serif;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial"><font size="4"><br></font></span></p><p class="MsoNormal" style="margin-bottom:0.0001pt;text-align:justify;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial"><span style="line-height:115%;font-family:tahoma,sans-serif;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial"><font size="4">Further reference: <a href="https://wbilaw.wordpress.com/2016/07/30/data-protection-bill-kenya-analysis/" target="_blank">https://wbilaw.wordpress.com/2<wbr>016/07/30/data-protection-bill<wbr>-kenya-analysis/</a><span></span></font></span></p>
<p class="MsoNormal" style="margin-bottom:0.0001pt;text-align:justify;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial"><span style="line-height:115%;font-family:tahoma,sans-serif;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial"><span><font size="4"> </font></span></span></p>
<p class="MsoNormal" style="margin-bottom:0.0001pt;text-align:justify;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial"><font size="4"><span style="font-family:tahoma,sans-serif">Regards,</span><span style="font-family:arial,sans-serif"><span></span></span></font></p>
<p class="MsoNormal" style="margin-bottom:0.0001pt;text-align:justify;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial"><span style="font-family:arial,sans-serif"><span><font size="4"> </font></span></span></p>
<p class="MsoNormal" style="margin-bottom:0.0001pt;text-align:justify;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial"><span style="font-family:tahoma,sans-serif"><font size="4">Esther
Kamande </font></span><span style="font-size:12pt;font-family:arial,sans-serif"><span></span></span></p>
<p class="MsoNormal" style="margin-bottom:0.0001pt;text-align:justify;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial"><span style="font-size:12pt;font-family:tahoma,sans-serif">Advocate |
Policy Analyst</span><span style="font-size:12pt;font-family:arial,sans-serif"><span></span></span></p>
<p class="MsoNormal" style="margin-bottom:0.0001pt;text-align:justify;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial"><span style="font-size:12pt;font-family:arial,sans-serif"><span> </span></span></p>
<p class="MsoNormal" style="margin-bottom:0.0001pt;text-align:justify;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial"><span style="font-size:12pt;font-family:tahoma,sans-serif">Twitter:
@enkamande<span></span></span></p>
<p class="MsoNormal" style="margin-bottom:0.0001pt;text-align:justify;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial"><span> </span></p></div><div class="gmail_extra"><br clear="all"><div><div class="m_-4367267540221682982m_-4370881423273251589gmail_signature" data-smartmail="gmail_signature"><div dir="ltr"><div><div dir="ltr"><div dir="ltr"><div dir="ltr"><div dir="ltr"><div><br></div><div><i><font color="#ff00ff"><br></font></i></div><div><p style="font-size:12.8px;text-align:justify"><font face="tahoma, sans-serif">Regards,</font></p><p style="font-size:12.8px;text-align:justify"><span style="font-family:tahoma,sans-serif;font-size:12.8px">Esther Kamande </span><br></p><p style="font-size:12.8px;text-align:justify"><font face="tahoma, sans-serif">Advocate | Policy Analyst</font></p><p style="text-align:justify"><span style="font-family:tahoma,sans-serif;font-size:12.8px">Twitter: @enkamande</span><br></p></div><div><font face="tahoma, sans-serif"><br></font></div><div><br><br></div></div></div></div></div></div></div></div></div>
<br><div class="gmail_quote"><div><div class="m_-4367267540221682982h5">On Sat, Feb 4, 2017 at 7:05 PM, Mose Karanja via kictanet <span dir="ltr"><<a href="mailto:kictanet@lists.kictanet.or.ke" target="_blank">kictanet@lists.kictanet.or.ke</a><wbr>></span> wrote:<br></div></div><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div><div class="m_-4367267540221682982h5"><div style="word-wrap:break-word"><div>A pattern is very evident since late last year on database breaches for political ends. </div><div>------</div>"It appears that all ID numbers from perceived Jubilee strongholds have
been run through the IEBC voters register to find out their registration
status. The chiefs have been issued with sheets of papers containing
mobile numbers of all residents within their locations and sub locations
who are not registered. <div>…</div><div><br></div><div>“We got this data from the registrar of persons and the brief to the
chiefs was to ascertain whether these people are registered. I don’t see
anything wrong with that. We are not coercing anybody to register,”
Sosio said. He added: “I don’t know whether the same is taking place in
other counties but as you know, homes are run differently and this is
how we have chosen to do it in Nyeri.”</div><div>-------</div><div>Read more:</div><div> </div><div><div><a href="https://www.standardmedia.co.ke/mobile/article/2001228175/revealed-inside-jubilee-s-vote-machine-to-beat-raila-odinga" target="_blank">https://www.standardmedia.co.k<wbr>e/mobile/article/2001228175/re<wbr>vealed-inside-jubilee-s-vote-m<wbr>achine-to-beat-raila-odinga</a></div><div> <br><div>
<div style="color:rgb(0,0,0);letter-spacing:normal;text-align:start;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px;word-wrap:break-word"><div style="color:rgb(0,0,0);letter-spacing:normal;text-align:start;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px;word-wrap:break-word"><div style="color:rgb(0,0,0);letter-spacing:normal;text-align:start;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px;word-wrap:break-word"><div><font face="arial" size="1"><span style="background-color:rgb(255,255,255)">---</span></font></div><div><font face="arial" size="1"><span style="background-color:rgb(255,255,255)">Moses Karanja</span></font></div><div><font face="arial" size="1"><span style="background-color:rgb(255,255,255)"><a href="http://www.moseskaranja.com/blog" target="_blank">www.moseskaranja.com/blog</a> </span></font><span style="color:rgb(34,34,34);font-family:'trebuchet ms',sans-serif;font-size:x-small;letter-spacing:0.28px;line-height:34px;white-space:pre-wrap;background-color:rgb(255,255,255)"></span></div><div><br></div></div><br class="m_-4367267540221682982m_-4370881423273251589m_-7614456719162753758Apple-interchange-newline"></div><br class="m_-4367267540221682982m_-4370881423273251589m_-7614456719162753758Apple-interchange-newline"></div><br class="m_-4367267540221682982m_-4370881423273251589m_-7614456719162753758Apple-interchange-newline"><br class="m_-4367267540221682982m_-4370881423273251589m_-7614456719162753758Apple-interchange-newline">
</div>
<br></div></div></div><br></div></div><span>______________________________<wbr>_________________<br>
kictanet mailing list<br>
<a href="mailto:kictanet@lists.kictanet.or.ke" target="_blank">kictanet@lists.kictanet.or.ke</a><br>
<a href="https://lists.kictanet.or.ke/mailman/listinfo/kictanet" rel="noreferrer" target="_blank">https://lists.kictanet.or.ke/m<wbr>ailman/listinfo/kictanet</a><br>
Twitter: <a href="http://twitter.com/kictanet" rel="noreferrer" target="_blank">http://twitter.com/kictanet</a><br>
Facebook: <a href="https://www.facebook.com/KICTANet/" rel="noreferrer" target="_blank">https://www.facebook.com/KICTA<wbr>Net/</a><br>
<br></span>
Unsubscribe or change your options at <a href="https://lists.kictanet.or.ke/mailman/options/kictanet/enkamande%40gmail.com" rel="noreferrer" target="_blank">https://lists.kictanet.or.ke/m<wbr>ailman/options/kictanet/enkama<wbr>nde%40gmail.com</a><span><br>
<br>
The Kenya ICT Action Network (KICTANet) is a multi-stakeholder platform for people and institutions interested and involved in ICT policy and regulation. The network aims to act as a catalyst for reform in the ICT sector in support of the national aim of ICT enabled growth and development.<br>
<br>
KICTANetiquette : Adhere to the same standards of acceptable behaviors online that you follow in real life: respect people's times and bandwidth, share knowledge, don't flame or abuse or personalize, respect privacy, do not spam, do not market your wares or qualifications.<br></span></blockquote></div><br></div>
<br>______________________________<wbr>_________________<br>
kictanet mailing list<br>
<a href="mailto:kictanet@lists.kictanet.or.ke" target="_blank">kictanet@lists.kictanet.or.ke</a><br>
<a href="https://lists.kictanet.or.ke/mailman/listinfo/kictanet" rel="noreferrer" target="_blank">https://lists.kictanet.or.ke/m<wbr>ailman/listinfo/kictanet</a><br>
Twitter: <a href="http://twitter.com/kictanet" rel="noreferrer" target="_blank">http://twitter.com/kictanet</a><br>
Facebook: <a href="https://www.facebook.com/KICTANet/" rel="noreferrer" target="_blank">https://www.facebook.com/KICTA<wbr>Net/</a><br>
<br>
Unsubscribe or change your options at <a href="https://lists.kictanet.or.ke/mailman/options/kictanet/murigi.muraya%40gmail.com" rel="noreferrer" target="_blank">https://lists.kictanet.or.ke/m<wbr>ailman/options/kictanet/murigi<wbr>.muraya%40gmail.com</a><br>
<br>
The Kenya ICT Action Network (KICTANet) is a multi-stakeholder platform for people and institutions interested and involved in ICT policy and regulation. The network aims to act as a catalyst for reform in the ICT sector in support of the national aim of ICT enabled growth and development.<br>
<br>
KICTANetiquette : Adhere to the same standards of acceptable behaviors online that you follow in real life: respect people's times and bandwidth, share knowledge, don't flame or abuse or personalize, respect privacy, do not spam, do not market your wares or qualifications.<br></blockquote></div><br></div>
<br>______________________________<wbr>_________________<br>
kictanet mailing list<br>
<a href="mailto:kictanet@lists.kictanet.or.ke">kictanet@lists.kictanet.or.ke</a><br>
<a href="https://lists.kictanet.or.ke/mailman/listinfo/kictanet" rel="noreferrer" target="_blank">https://lists.kictanet.or.ke/<wbr>mailman/listinfo/kictanet</a><br>
Twitter: <a href="http://twitter.com/kictanet" rel="noreferrer" target="_blank">http://twitter.com/kictanet</a><br>
Facebook: <a href="https://www.facebook.com/KICTANet/" rel="noreferrer" target="_blank">https://www.facebook.com/<wbr>KICTANet/</a><br>
<br>
Unsubscribe or change your options at <a href="https://lists.kictanet.or.ke/mailman/options/kictanet/monyango93%40gmail.com" rel="noreferrer" target="_blank">https://lists.kictanet.or.ke/<wbr>mailman/options/kictanet/<wbr>monyango93%40gmail.com</a><br>
<br>
The Kenya ICT Action Network (KICTANet) is a multi-stakeholder platform for people and institutions interested and involved in ICT policy and regulation. The network aims to act as a catalyst for reform in the ICT sector in support of the national aim of ICT enabled growth and development.<br>
<br>
KICTANetiquette : Adhere to the same standards of acceptable behaviors online that you follow in real life: respect people's times and bandwidth, share knowledge, don't flame or abuse or personalize, respect privacy, do not spam, do not market your wares or qualifications.<br></blockquote></div></div>