<div dir="auto">The pro-rated model seems more practical, after all we want data processors playing by the law, not causing irreparable financial harm when they violate the law.</div><br><div class="gmail_quote"><div dir="ltr">On Tue, Aug 28, 2018, 10:17 AM anyega jefferson <<a href="mailto:jeffersonanyega@gmail.com">jeffersonanyega@gmail.com</a>> wrote:<br></div><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div dir="auto">Good morning,<div dir="auto"><br></div><div dir="auto">The size of the data processor should have an effect on the magnitude of the fines. Although all offences are equal , all penalties can't be the same ,otherwise it would be an academic exercise really. Of say, an individual offender were fined large amounts ,then basically the option would be a jail term by default for many non-wealthy persons.</div><div dir="auto"><br></div><div dir="auto"><br></div></div><br><div class="gmail_quote"><div dir="ltr">On Tue, Aug 28, 2018, 9:56 AM Grace Bomu via kictanet <<a href="mailto:kictanet@lists.kictanet.or.ke" target="_blank" rel="noreferrer">kictanet@lists.kictanet.or.ke</a>> wrote:<br></div><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div dir="ltr"><div class="gmail_default" style="font-family:verdana,sans-serif">Offences are public in nature and their prosecution and sentencing is carried out through the criminal justice system. Remedies on the other hand may be considered from a civil lens and examples include damages, restitution, coercive (injunctions) and declaratory remedies. They are personal and their aim is to give justice to the injured person. A trend with newer laws is the provision of both offences and remedies. In the copyright law for example, in addition to criminal offences, one can recover profits from pirated material. <br>Back to our bill, the following offences are created: <br clear="all"></div><div style="font-family:verdana,sans-serif" class="gmail_default">
<span></span>
<table width="100%" cellspacing="0" cellpadding="4">
<colgroup><col width="127*">
<col width="129*">
</colgroup><tbody><tr valign="top">
<td style="border-color:rgb(0,0,0) currentcolor rgb(0,0,0) rgb(0,0,0);border-style:solid none solid solid;border-width:1px medium 1px 1px;padding:0.04in 0in 0.04in 0.04in" width="50%">
<p style="margin-bottom:0in;line-height:115%"><b>Offence </b>
</p>
</td>
<td style="border:1px solid rgb(0,0,0);padding:0.04in" width="50%">
<p style="margin-bottom:0in;line-height:115%"><b>Penalty </b>
</p>
</td>
</tr>
<tr valign="top">
<td style="border-color:currentcolor currentcolor rgb(0,0,0) rgb(0,0,0);border-style:none none solid solid;border-width:medium medium 1px 1px;padding:0in 0in 0.04in 0.04in" width="50%">
<p style="margin-bottom:0in;line-height:115%">Knowingly supplying false information to the data commissioner
during registration as a data controller or processor ( clause 15
(3))</p>
</td>
<td style="border-color:currentcolor rgb(0,0,0) rgb(0,0,0);border-style:none solid solid;border-width:medium 1px 1px;padding:0in 0.04in 0.04in" width="50%">
<p style="margin-bottom:0in;line-height:115%">General penalty under clause 59:
</p>
<p style="margin-bottom:0in;line-height:115%">5 million shillings fine or 5 years imprisonment or both</p>
<p style="margin-bottom:0in;line-height:115%">plus
</p>
<p style="margin-bottom:0in;line-height:115%">possible forfeiture of equipment and prohibition order
</p>
</td>
</tr>
<tr valign="top">
<td style="border-color:currentcolor currentcolor rgb(0,0,0) rgb(0,0,0);border-style:none none solid solid;border-width:medium medium 1px 1px;padding:0in 0in 0.04in 0.04in" width="50%">
<p style="margin-bottom:0in;line-height:115%">Data controller or processor failing to notify the data
commissioner about a change in particulars (clause 16 (7))</p>
</td>
<td style="border-color:currentcolor rgb(0,0,0) rgb(0,0,0);border-style:none solid solid;border-width:medium 1px 1px;padding:0in 0.04in 0.04in" width="50%">
<p style="margin-bottom:0in;line-height:115%">General penalty
</p>
</td>
</tr>
<tr valign="top">
<td style="border-color:currentcolor currentcolor rgb(0,0,0) rgb(0,0,0);border-style:none none solid solid;border-width:medium medium 1px 1px;padding:0in 0in 0.04in 0.04in" width="50%">
<p style="margin-bottom:0in;line-height:115%">unlawful processing of personal data (clause 27)
</p>
</td>
<td style="border-color:currentcolor rgb(0,0,0) rgb(0,0,0);border-style:none solid solid;border-width:medium 1px 1px;padding:0in 0.04in 0.04in" width="50%">
<p style="margin-bottom:0in;line-height:115%">5 million shillings fine or 5 years imprisonment
</p>
</td>
</tr>
<tr valign="top">
<td style="border-color:currentcolor currentcolor rgb(0,0,0) rgb(0,0,0);border-style:none none solid solid;border-width:medium medium 1px 1px;padding:0in 0in 0.04in 0.04in" width="50%">
<p style="margin-bottom:0in;line-height:115%">Unlawful processing of sensitive personal data (part v)
</p>
</td>
<td style="border-color:currentcolor rgb(0,0,0) rgb(0,0,0);border-style:none solid solid;border-width:medium 1px 1px;padding:0in 0.04in 0.04in" width="50%">
<p style="margin-bottom:0in;line-height:115%">5 million shillings fine or 5 years imprisonment
</p>
</td>
</tr>
<tr valign="top">
<td style="border-color:currentcolor currentcolor rgb(0,0,0) rgb(0,0,0);border-style:none none solid solid;border-width:medium medium 1px 1px;padding:0in 0in 0.04in 0.04in" width="50%">
<p style="margin-bottom:0in;line-height:115%">Refusing to comply with a notice from the data commissioner or
knowingly furnishing the commissioner with false information
during investigations (clause 52(3))</p>
</td>
<td style="border-color:currentcolor rgb(0,0,0) rgb(0,0,0);border-style:none solid solid;border-width:medium 1px 1px;padding:0in 0.04in 0.04in" width="50%">
<p style="margin-bottom:0in;line-height:115%">General penalty
</p>
</td>
</tr>
<tr valign="top">
<td style="border-color:currentcolor currentcolor rgb(0,0,0) rgb(0,0,0);border-style:none none solid solid;border-width:medium medium 1px 1px;padding:0in 0in 0.04in 0.04in" width="50%">
<p style="margin-bottom:0in;line-height:115%">Disclosure of personal data by controller against specified
purpose (clause 58 (1))</p>
</td>
<td style="border-color:currentcolor rgb(0,0,0) rgb(0,0,0);border-style:none solid solid;border-width:medium 1px 1px;padding:0in 0.04in 0.04in" width="50%">
<p style="margin-bottom:0in;line-height:115%">General penalty
</p>
</td>
</tr>
<tr valign="top">
<td style="border-color:currentcolor currentcolor rgb(0,0,0) rgb(0,0,0);border-style:none none solid solid;border-width:medium medium 1px 1px;padding:0in 0in 0.04in 0.04in" width="50%">
<p style="margin-bottom:0in;line-height:115%">Disclosure of personal data by processor without authority of
controller (clause 58 (2))</p>
</td>
<td style="border-color:currentcolor rgb(0,0,0) rgb(0,0,0);border-style:none solid solid;border-width:medium 1px 1px;padding:0in 0.04in 0.04in" width="50%">
<p style="margin-bottom:0in;line-height:115%">General penalty
</p>
</td>
</tr>
<tr valign="top">
<td style="border-color:currentcolor currentcolor rgb(0,0,0) rgb(0,0,0);border-style:none none solid solid;border-width:medium medium 1px 1px;padding:0in 0in 0.04in 0.04in" width="50%">
<p style="margin-bottom:0in;line-height:115%">Obtaining personal data without prior authority of controller
or processor (clause 58 (3)(a))</p>
</td>
<td style="border-color:currentcolor rgb(0,0,0) rgb(0,0,0);border-style:none solid solid;border-width:medium 1px 1px;padding:0in 0.04in 0.04in" width="50%">
<p style="margin-bottom:0in;line-height:115%">General penalty
</p>
</td>
</tr>
<tr valign="top">
<td style="border-color:currentcolor currentcolor rgb(0,0,0) rgb(0,0,0);border-style:none none solid solid;border-width:medium medium 1px 1px;padding:0in 0in 0.04in 0.04in" width="50%">
<p style="margin-bottom:0in;line-height:115%">Disclosure to a third party (clause 58 (3) (b))</p>
</td>
<td style="border-color:currentcolor rgb(0,0,0) rgb(0,0,0);border-style:none solid solid;border-width:medium 1px 1px;padding:0in 0.04in 0.04in" width="50%">
<p style="margin-bottom:0in;line-height:115%">General penalty</p>
</td>
</tr>
<tr valign="top">
<td style="border-color:currentcolor currentcolor rgb(0,0,0) rgb(0,0,0);border-style:none none solid solid;border-width:medium medium 1px 1px;padding:0in 0in 0.04in 0.04in" width="50%">
<p style="margin-bottom:0in;line-height:115%">Offer (advertisement) to sell personal data obtained through
unlawful disclosure ((clause 58 (4))</p>
</td>
<td style="border-color:currentcolor rgb(0,0,0) rgb(0,0,0);border-style:none solid solid;border-width:medium 1px 1px;padding:0in 0.04in 0.04in" width="50%">
<p style="margin-bottom:0in;line-height:115%">General penalty</p>
</td>
</tr>
</tbody></table>
<br></div><div style="font-family:verdana,sans-serif" class="gmail_default">The bill has taken the criminal law track and has not provided remedies targeting persons injured by contravention of the bill. It does however create a complaints mechanism where the public can lodge complaints with the data commissioner. The powers of the commissioner in addressing such complaints are limited to issuing notices.(and we shall be discussing more about the office powers of the data commissioner in due course)<br><br></div><div style="font-family:verdana,sans-serif" class="gmail_default">Our discussion today is on the question of choosing the offences route as opposed or in addition to the civil route. What are our thoughts on this? Should we have borrowed the pro-rated model of the GDPR where controllers/processors are charged administrative fines according to their revenue? <br></div><div style="font-family:verdana,sans-serif" class="gmail_default">And when we come to offences, are they adequate? Should the magnitude of the offence be measured against the size of the data processor or are all sins equal despite might of the transgressor?<br><br></div><div style="font-family:verdana,sans-serif" class="gmail_default">Listers, please share your views on these issues. As usual, we welcome identification of good and problematic clauses. Welcome to the discussion. <br></div><br>-- <br><div dir="ltr" class="m_-8982179373371706604m_-1923829574302841591gmail_signature" data-smartmail="gmail_signature"><div dir="ltr"><div><div dir="ltr"><div dir="ltr"><div dir="ltr"><div>Grace Mutung'u <br>Skype: gracebomu<br>@Bomu<br><span style="font-size:12.8px">PGP ID : 0x33A3450F</span><br></div><div><br></div></div></div></div></div></div></div></div>
_______________________________________________<br>
kictanet mailing list<br>
<a href="mailto:kictanet@lists.kictanet.or.ke" rel="noreferrer noreferrer" target="_blank">kictanet@lists.kictanet.or.ke</a><br>
<a href="https://lists.kictanet.or.ke/mailman/listinfo/kictanet" rel="noreferrer noreferrer noreferrer" target="_blank">https://lists.kictanet.or.ke/mailman/listinfo/kictanet</a><br>
Twitter: <a href="http://twitter.com/kictanet" rel="noreferrer noreferrer noreferrer" target="_blank">http://twitter.com/kictanet</a><br>
Facebook: <a href="https://www.facebook.com/KICTANet/" rel="noreferrer noreferrer noreferrer" target="_blank">https://www.facebook.com/KICTANet/</a><br>
Domain Registration sponsored by <a href="http://www.eacdirectory.co.ke" rel="noreferrer noreferrer noreferrer" target="_blank">www.eacdirectory.co.ke</a><br>
<br>
Unsubscribe or change your options at <a href="https://lists.kictanet.or.ke/mailman/options/kictanet/jeffersonanyega%40gmail.com" rel="noreferrer noreferrer noreferrer" target="_blank">https://lists.kictanet.or.ke/mailman/options/kictanet/jeffersonanyega%40gmail.com</a><br>
<br>
The Kenya ICT Action Network (KICTANet) is a multi-stakeholder platform for people and institutions interested and involved in ICT policy and regulation. The network aims to act as a catalyst for reform in the ICT sector in support of the national aim of ICT enabled growth and development.<br>
<br>
KICTANetiquette : Adhere to the same standards of acceptable behaviors online that you follow in real life: respect people's times and bandwidth, share knowledge, don't flame or abuse or personalize, respect privacy, do not spam, do not market your wares or qualifications.<br>
</blockquote></div>
</blockquote></div>