<div dir="ltr"><div>Dear Mercy,</div><div><br></div><div>Many thanks for this thread and apologies for coming in late to the discussion. While we are late as a country in having a Policy and Regulatory Framework on Privacy and Data Protection i still have a number of questions lingering at the back of mind that might be straight forward but which i still feel i should share:</div><div><br></div><div>1) How much data are we generating as a country and to what extent should we regulate? Looking at it from a country code Top Level Domain perspective, more than 80 % of global registrations are in the European Region followed by China, their markets are generally at a point of saturation hence the efforts to ensure that the right policy and data frameworks (GDPR) are in place. On the other hand most African countries (Kenya included) are still net consumers of foreign content despite regardless of efforts made to promote local content. My general comment would be that the Policy and Regulatory framework on Privacy and Data Protection should promote Innovation in data science /analytics. It is my humble opinion that at this point in time, our ICT Industry is at at nascent stage and lots of personal data might be required by developers to come up with innovative products and services. I think the notion that we are a Silicon Savanna is a bit far fetched because day by day we are discovering that most of the Innovations we are celebrating locally have roots elsewhere. So far the Policy looks great, it is my hope that it wont get mutilated when it lands in the August House as has been the case with previous policy and regulatory frameworks.</div><div><br></div><div>Regards<br></div></div><br><div class="gmail_quote"><div dir="ltr">On Thu, Aug 23, 2018 at 11:39 AM william mathenge via kictanet <<a href="mailto:kictanet@lists.kictanet.or.ke">kictanet@lists.kictanet.or.ke</a>> wrote:<br></div><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div dir="ltr">Hi listers,<div>I concur with @Francis. Data minimisation is essential in guaranteeing the least possible data breaches in the event of compromised systems or databases. </div><div>It would also inspire innovation by focusing on relevant data for the purposes of which it is being collected. It would therefore aid in identifying problems and or gaps from processing the relevant data collected and consequently developing solutions to these problems.<br></div><div><br></div><div><div>Kind Regards,</div></div><div>William.</div></div><br><div class="gmail_quote"><div dir="ltr">On Thu, Aug 23, 2018 at 7:36 AM kanini mutemi via kictanet <<a href="mailto:kictanet@lists.kictanet.or.ke" target="_blank">kictanet@lists.kictanet.or.ke</a>> wrote:<br></div><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div style="word-wrap:break-word;line-break:after-white-space"><font face="Avenir-Book" style="font-size:14px">Thank you @Francis. What impact will minimisation have on innovation? </font><div><font face="Avenir-Book" style="font-size:14px"><br></font></div><div><font face="Avenir-Book" style="font-size:14px">@Grace I like that you refer back to the draft policy as the underlying statement of intent. Indeed throughout this process we must consider both the draft policy and the draft bill. </font></div><div><font face="Avenir-Book" style="font-size:14px"><br></font></div><div><font face="Avenir-Book" style="font-size:14px">This thread will remain open even as we move to the Day 2 discussion. </font></div><div><br><div><br><blockquote type="cite"><div>On 22 Aug 2018, at 21:50, Francis Monyango <<a href="mailto:monyango93@gmail.com" target="_blank">monyango93@gmail.com</a>> wrote:</div><br class="m_-3128390461011059204m_4807213860602304022Apple-interchange-newline"><div><div dir="auto">I think we need a very serious data minimisation culture. Entities that collect data in their course of doing business need to collect what is needed. I should not be compelled to name my family tree plus a letter from my local chief just to gain admission into a building. (hyperbole alert) </div><div class="gmail_extra"><br><div class="gmail_quote">On 22 Aug 2018 09:58, "kanini mutemi via kictanet" <<a href="mailto:kictanet@lists.kictanet.or.ke" target="_blank">kictanet@lists.kictanet.or.ke</a>> wrote:<br type="attribution"><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div style="word-wrap:break-word;line-break:after-white-space"><div class="gmail_default"><font face="Avenir-Book" style="font-size:14px"><b>Day 1- Principles of Data Protection </b></font></div><div class="gmail_default"><b><font face="Avenir-Book" style="font-size:14px"><br></font></b></div><div class="gmail_default"><font face="Avenir-Book" style="font-size:14px">Dear Listers, <br><br>As GG had indicated on Monday, we will hold online moderated discussions on the policy and regulatory framework on privacy and data protection. I will kick us off with a discussion on the proposed principles of data protection (Part 5 of the draft policy and Part IV of the draft bill). <br><br>There are seven proposed principles–<br><i>(a) Fairness, lawfulness and transparency<br>(b) Purpose limitation<br>(c) Data minimisation <br>(d) Storage limitation <br>(e) Accuracy<br>(f) Confidentiality and Integrity <br>(g) Accountability<br></i><br>To begin with, I welcome comments on </font></div><div class="gmail_default"><font face="Avenir-Book" style="font-size:14px"><br><b><font color="#942192">-what is your first impression of the principles?</font></b></font></div><div class="gmail_default"><font face="Avenir-Book" style="font-size:14px"><b><font color="#942192"><span><br></span></font><font color="#0433ff">-why do we need to set out principles?</font></b></font></div><div class="gmail_default"><font face="Avenir-Book" style="font-size:14px"><b><font color="#0433ff"><span><br></span></font><font color="#ff2600">-are the principles clearly defined in the draft policy and bill?</font></b><br></font></div><div class="gmail_default"><font face="Avenir-Book" style="font-size:14px"><b><font color="#ff2600"><br></font></b></font></div><div class="gmail_default"><font face="Avenir-Book"><span style="font-size:14px">Tujadiliane! </span></font></div><font face="Avenir-Book" style="font-size:14px">-- <br></font><div class="m_-3128390461011059204m_4807213860602304022m_-8164772593734828832gmail_signature" data-smartmail="gmail_signature"><div dir="ltr"><div dir="ltr"><div dir="ltr"><div style="color:rgb(34,34,34)"><font face="Avenir-Book" style="font-size:14px"><b>Mercy Mutemi<div class="gmail_default" style="display:inline">.</div></b><br></font></div><div><span style="font-family:georgia,serif"><b><div class="gmail_default" style="display:inline"><br></div></b></span></div></div></div></div></div></div><br>_______________________________________________<br>
kictanet mailing list<br>
<a href="mailto:kictanet@lists.kictanet.or.ke" target="_blank">kictanet@lists.kictanet.or.ke</a><br>
<a href="https://lists.kictanet.or.ke/mailman/listinfo/kictanet" rel="noreferrer" target="_blank">https://lists.kictanet.or.ke/mailman/listinfo/kictanet</a><br>
Twitter: <a href="http://twitter.com/kictanet" rel="noreferrer" target="_blank">http://twitter.com/kictanet</a><br>
Facebook: <a href="https://www.facebook.com/KICTANet/" rel="noreferrer" target="_blank">https://www.facebook.com/KICTANet/</a><br>
Domain Registration sponsored by <a href="http://www.eacdirectory.co.ke/" rel="noreferrer" target="_blank">www.eacdirectory.co.ke</a><br>
<br>
Unsubscribe or change your options at <a href="https://lists.kictanet.or.ke/mailman/options/kictanet/monyango93%40gmail.com" rel="noreferrer" target="_blank">https://lists.kictanet.or.ke/mailman/options/kictanet/monyango93%40gmail.com</a><br>
<br>
The Kenya ICT Action Network (KICTANet) is a multi-stakeholder platform for people and institutions interested and involved in ICT policy and regulation. The network aims to act as a catalyst for reform in the ICT sector in support of the national aim of ICT enabled growth and development.<br>
<br>
KICTANetiquette : Adhere to the same standards of acceptable behaviors online that you follow in real life: respect people's times and bandwidth, share knowledge, don't flame or abuse or personalize, respect privacy, do not spam, do not market your wares or qualifications.<br>
<br></blockquote></div></div>
</div></blockquote></div><br></div></div>_______________________________________________<br>
kictanet mailing list<br>
<a href="mailto:kictanet@lists.kictanet.or.ke" target="_blank">kictanet@lists.kictanet.or.ke</a><br>
<a href="https://lists.kictanet.or.ke/mailman/listinfo/kictanet" rel="noreferrer" target="_blank">https://lists.kictanet.or.ke/mailman/listinfo/kictanet</a><br>
Twitter: <a href="http://twitter.com/kictanet" rel="noreferrer" target="_blank">http://twitter.com/kictanet</a><br>
Facebook: <a href="https://www.facebook.com/KICTANet/" rel="noreferrer" target="_blank">https://www.facebook.com/KICTANet/</a><br>
Domain Registration sponsored by <a href="http://www.eacdirectory.co.ke" rel="noreferrer" target="_blank">www.eacdirectory.co.ke</a><br>
<br>
Unsubscribe or change your options at <a href="https://lists.kictanet.or.ke/mailman/options/kictanet/willbill.mathenge%40gmail.com" rel="noreferrer" target="_blank">https://lists.kictanet.or.ke/mailman/options/kictanet/willbill.mathenge%40gmail.com</a><br>
<br>
The Kenya ICT Action Network (KICTANet) is a multi-stakeholder platform for people and institutions interested and involved in ICT policy and regulation. The network aims to act as a catalyst for reform in the ICT sector in support of the national aim of ICT enabled growth and development.<br>
<br>
KICTANetiquette : Adhere to the same standards of acceptable behaviors online that you follow in real life: respect people's times and bandwidth, share knowledge, don't flame or abuse or personalize, respect privacy, do not spam, do not market your wares or qualifications.<br>
</blockquote></div>
_______________________________________________<br>
kictanet mailing list<br>
<a href="mailto:kictanet@lists.kictanet.or.ke" target="_blank">kictanet@lists.kictanet.or.ke</a><br>
<a href="https://lists.kictanet.or.ke/mailman/listinfo/kictanet" rel="noreferrer" target="_blank">https://lists.kictanet.or.ke/mailman/listinfo/kictanet</a><br>
Twitter: <a href="http://twitter.com/kictanet" rel="noreferrer" target="_blank">http://twitter.com/kictanet</a><br>
Facebook: <a href="https://www.facebook.com/KICTANet/" rel="noreferrer" target="_blank">https://www.facebook.com/KICTANet/</a><br>
Domain Registration sponsored by <a href="http://www.eacdirectory.co.ke" rel="noreferrer" target="_blank">www.eacdirectory.co.ke</a><br>
<br>
Unsubscribe or change your options at <a href="https://lists.kictanet.or.ke/mailman/options/kictanet/otieno.barrack%40gmail.com" rel="noreferrer" target="_blank">https://lists.kictanet.or.ke/mailman/options/kictanet/otieno.barrack%40gmail.com</a><br>
<br>
The Kenya ICT Action Network (KICTANet) is a multi-stakeholder platform for people and institutions interested and involved in ICT policy and regulation. The network aims to act as a catalyst for reform in the ICT sector in support of the national aim of ICT enabled growth and development.<br>
<br>
KICTANetiquette : Adhere to the same standards of acceptable behaviors online that you follow in real life: respect people's times and bandwidth, share knowledge, don't flame or abuse or personalize, respect privacy, do not spam, do not market your wares or qualifications.<br>
</blockquote></div><br clear="all"><br>-- <br><div dir="ltr" class="gmail_signature" data-smartmail="gmail_signature">Barrack O. Otieno<br>+254721325277<br>+254733206359<br>Skype: barrack.otieno<br>PGP ID: 0x2611D86A<br> <br><br><br><br></div>