<html><head><meta http-equiv="Content-Type" content="text/html; charset=utf-8"></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; line-break: after-white-space;" class=""><font face="Avenir-Book" style="font-size: 14px;" class="">Thank you for the comments coming in so far. </font><div class=""><font face="Avenir-Book" style="font-size: 14px;" class=""><br class=""></font></div><div class=""><font face="Avenir-Book" style="font-size: 14px;" class="">@Francis and @Michael <font color="#942192" class=""><b class="">what is the foundation of the right to be forgotten? Why do we need it? Should it be absolute? Should it apply to all ‘unwanted’ information? </b></font></font></div><div class=""><font face="Avenir-Book" style="font-size: 14px;" class=""><br class=""></font></div><div class=""><font face="Avenir-Book" class=""><span style="font-size: 14px;" class="">Let’s turn our attention to Clause 36 (right of rectification and erasure). The right to demand erasure extends to ‘irrelevant’ and ‘excessive’ information These parameters are not defined. </span><font color="#942192" class=""><b class=""><span style="font-size: 14px;" class="">Can a convict demand that </span><a href="http://kenyalaw.org" style="font-size: 14px;" class="">kenyalaw.org</a><span style="font-size: 14px;" class=""> delete a case from its database? Should we be allowed to stop newspapers from running a story because of the ‘irrelevance’ or ‘lack of authorisation’? What are we trying to achieve with the right to be forgotten? Should politicians be allowed to re-invent themselves? </span></b></font></font></div><div class=""><font face="Avenir-Book" style="font-size: 14px;" class=""><br class=""></font></div><div class=""><span style="font-family: Avenir-Book; font-size: 14px;" class="">@Kiarie, thank you for bringing up the issue of consent. Under Clause 28 we see general conditions for consent. Reading that, do you get a clear picture of what consent is? Clause 33 goes ahead to restrict the use of data for direct marketing- I imagine this is a welcome relief? </span></div><div class=""><span style="font-family: Avenir-Book; font-size: 14px;" class=""><br class=""></span></div><div class=""><font face="Avenir-Book" class=""><span style="font-size: 14px;" class="">@Michael </span></font><span style="font-family: Avenir-Book; font-size: 14px;" class=""> </span><span style="font-family: Avenir-Book; font-size: 14px;" class="">I agree the definition of the rights is in the exceptions. I</span><span style="font-size: 14px; font-family: Avenir-Book;" class="">n our next discussion we will look at the limitations to the rights of data subjects and whether the manner in which these rights have been limited conforms to the standards set in Article 24 of the Constitution.</span></div><div class=""><font face="Avenir-Book" style="font-size: 14px;" class=""><br class=""></font></div><div class=""><font face="Avenir-Book" style="font-size: 14px;" class="">@WIlliam, I agree that the remedies should go beyond criminal sanctions. I like your proposal that the right to compensation should also be included in the rights- that's ingenious. More on this on Day 5 when we consider penalties and remedies in detail. </font></div><div class=""><font face="Avenir-Book" style="font-size: 14px;" class=""><br class=""></font></div><div class=""><font face="Avenir-Book" class=""><span style="font-size: 14px;" class="">Let’s keep talking. </span></font></div><div class=""><div class=""><br class=""><div><blockquote type="cite" class=""><div class="">On 23 Aug 2018, at 21:58, Francis Monyango via kictanet <<a href="mailto:kictanet@lists.kictanet.or.ke" class="">kictanet@lists.kictanet.or.ke</a>> wrote:</div><br class="Apple-interchange-newline"><div class=""><div class=""><div dir="auto" class="">My concern is that the policy talks about ‘the right to be forgotten’ but the bill doesn’t have a section on it. One can only delete misleading information which is rather too limiting. The legal standards we are trying to catch up with included the right to be forgotten in 2014 yet our draft law doesn’t have it in 2018. The right should be there...maybe with limitations. I don’t think limiting it to ‘false or misleading data’ is in good faith.</div></div><div class=""><br class=""><div class="gmail_quote"><div dir="ltr" class="">On Thu, 23 Aug 2018 at 09:55, kanini mutemi via kictanet <<a href="mailto:kictanet@lists.kictanet.or.ke" class="">kictanet@lists.kictanet.or.ke</a>> wrote:<br class=""></div><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div style="word-wrap:break-word;line-break:after-white-space" class=""><font face="Avenir-Book" style="font-size:14px" class=""><b class="">Day 2- Rights of Data Subjects </b></font><div class=""><font face="Avenir-Book" style="font-size:14px" class=""><br class=""></font></div><div class=""><font face="Avenir-Book" style="font-size:14px" class="">Good morning Listers, </font></div><div class=""><font face="Avenir-Book" style="font-size:14px" class=""><br class=""></font></div><div class=""><font face="Avenir-Book" style="font-size:14px" class="">Day 1 we commented on the principles of data protection mentioned in the draft policy and bill. Today, we will look at the rights of data subjects. For demonstration purpose, when you fill in your details at a mobile money agent’s shop–</font></div><div style="text-align:left" class=""><font face="Avenir-Book" style="font-size:14px" class=""><i class=""> You- data subject </i></font></div><div style="text-align:left" class=""><font face="Avenir-Book" style="font-size:14px" class=""><i class=""> The mobile money agent- data processor </i></font></div><div style="text-align:left" class=""><font face="Avenir-Book" class=""><span style="font-size:14px" class=""><br class=""></span></font></div><div style="text-align:left" class=""><font face="Avenir-Book" class=""><span style="font-size:14px" class="">The data subject is the person to whom the data concerns. </span></font></div><div style="text-align:left" class=""><font face="Avenir-Book" class=""><span style="font-size:14px" class=""><br class=""></span></font></div><div style="text-align:left" class=""><font face="Avenir-Book" class=""><span style="font-size:14px" class="">Here are the rights as listed in Clause 23 of the Bill. I have added comments underneath to help us visualise what these rights would mean in the future. </span></font></div><div style="text-align:left" class=""><font face="Avenir-Book" class=""><span style="font-size:14px" class=""> </span></font></div><div style="text-align:left" class=""><font face="Avenir-Book" style="font-size:14px" color="#942192" class=""><b class="">1. The right to be informed of the use to which the personal data is to be put</b></font></div><div style="text-align:left" class=""><font face="Avenir-Book" style="font-size:14px" class="">Eg. When we leave our details at the entrance to buildings, I expect that they will explain what the data will be used for. </font></div><div style="text-align:left" class=""><font face="Avenir-Book" style="font-size:14px" class=""><br class=""></font></div><div style="text-align:left" class=""><font face="Avenir-Book" style="font-size:14px" color="#942192" class=""><b class="">2. Right to access their personal data in custody of data controller</b></font></div><div style="text-align:left" class=""><font face="Avenir-Book" style="font-size:14px" class="">Will we be able to demand from our mobile network operators to see our account details and transactional history?</font></div><div style="text-align:left" class=""><font face="Avenir-Book" style="font-size:14px" class=""><br class=""></font></div><div style="text-align:left" class=""><font face="Avenir-Book" style="font-size:14px" color="#942192" class=""><b class="">3. Object to the collection or processing of all or part of their personal data</b></font></div><div style="text-align:left" class=""><font face="Avenir-Book" style="font-size:14px" class="">Will we be able to opt out of the biometric ID registration proposed by the Ministry of ICT <a href="https://www.businessdailyafrica.com/economy/Biometric-IDs-listing-set-for-this-year-after-secret-tender/3946234-4694828-v50ngv/index.html" target="_blank" class="">here</a>?</font></div><div style="text-align:left" class=""><font face="Avenir-Book" style="font-size:14px" class=""><br class=""></font></div><div style="text-align:left" class=""><font face="Avenir-Book" style="font-size:14px" color="#942192" class=""><b class="">4. Correction and deletion of false or misleading data </b></font></div>
<div style="text-align:left" class=""><font face="Avenir-Book" class=""><span style="font-size:14px" class="">Are we ready for a right to be forgotten? Should it be absolute? </span></font></div><div style="text-align:left" class=""><br class=""></div><div style="text-align:left" class=""><font face="Avenir-Book" class=""><span style="font-size:14px" class="">What do we think of these Listers? Are there other rights that ought to be included? </span></font></div><div style="text-align:left" class=""><div class="m_-5006744674214966204page" title="Page 15"><div class="m_-5006744674214966204layoutArea"><div class="m_-5006744674214966204column"><ol style="list-style-type:none" class="">
<li class=""><div class=""><font face="Avenir-Book" style="font-size:14px" class=""> </font><br class="webkit-block-placeholder"></div></li></ol></div></div></div></div></div>_______________________________________________<br class="">
kictanet mailing list<br class="">
<a href="mailto:kictanet@lists.kictanet.or.ke" target="_blank" class="">kictanet@lists.kictanet.or.ke</a><br class="">
<a href="https://lists.kictanet.or.ke/mailman/listinfo/kictanet" rel="noreferrer" target="_blank" class="">https://lists.kictanet.or.ke/mailman/listinfo/kictanet</a><br class="">
Twitter: <a href="http://twitter.com/kictanet" rel="noreferrer" target="_blank" class="">http://twitter.com/kictanet</a><br class="">
Facebook: <a href="https://www.facebook.com/KICTANet/" rel="noreferrer" target="_blank" class="">https://www.facebook.com/KICTANet/</a><br class="">
Domain Registration sponsored by <a href="http://www.eacdirectory.co.ke/" rel="noreferrer" target="_blank" class="">www.eacdirectory.co.ke</a><br class="">
<br class="">
Unsubscribe or change your options at <a href="https://lists.kictanet.or.ke/mailman/options/kictanet/monyango93%40gmail.com" rel="noreferrer" target="_blank" class="">https://lists.kictanet.or.ke/mailman/options/kictanet/monyango93%40gmail.com</a><br class="">
<br class="">
The Kenya ICT Action Network (KICTANet) is a multi-stakeholder platform for people and institutions interested and involved in ICT policy and regulation. The network aims to act as a catalyst for reform in the ICT sector in support of the national aim of ICT enabled growth and development.<br class="">
<br class="">
KICTANetiquette : Adhere to the same standards of acceptable behaviors online that you follow in real life: respect people's times and bandwidth, share knowledge, don't flame or abuse or personalize, respect privacy, do not spam, do not market your wares or qualifications.<br class="">
</blockquote></div></div>-- <br class=""><div dir="ltr" class="gmail_signature" data-smartmail="gmail_signature"><div dir="ltr" class=""><div class="">Francis Monyango<br class=""><br class="">Lawyer | ICT Policy and Legal Consultant<br class=""><a href="http://www.monyango.com/" target="_blank" class="">www.monyango.com</a><br class=""><br class=""><br class=""><br class=""></div></div></div>
_______________________________________________<br class="">kictanet mailing list<br class=""><a href="mailto:kictanet@lists.kictanet.or.ke" class="">kictanet@lists.kictanet.or.ke</a><br class="">https://lists.kictanet.or.ke/mailman/listinfo/kictanet<br class="">Twitter: http://twitter.com/kictanet<br class="">Facebook: https://www.facebook.com/KICTANet/<br class="">Domain Registration sponsored by www.eacdirectory.co.ke<br class=""><br class="">Unsubscribe or change your options at https://lists.kictanet.or.ke/mailman/options/kictanet/kaninimutemi%40gmail.com<br class=""><br class="">The Kenya ICT Action Network (KICTANet) is a multi-stakeholder platform for people and institutions interested and involved in ICT policy and regulation. The network aims to act as a catalyst for reform in the ICT sector in support of the national aim of ICT enabled growth and development.<br class=""><br class="">KICTANetiquette : Adhere to the same standards of acceptable behaviors online that you follow in real life: respect people's times and bandwidth, share knowledge, don't flame or abuse or personalize, respect privacy, do not spam, do not market your wares or qualifications.<br class=""></div></blockquote></div><br class=""></div></div></body></html>