<div dir="ltr"><div class="gmail_default" style="font-family:verdana,sans-serif">Thank you Liz for the comparison with access to information, which was initially meant to twin with data protection. Your concerns on funding and sustaining the office of the DPC are not far fetched. We have also noted your contribution on transition to the data protection regime and enhancing the independence of the office by separating it from control of the executive.</div><div class="gmail_default" style="font-family:verdana,sans-serif"><br></div></div><br><div class="gmail_quote"><div dir="ltr">Il giorno gio 30 ago 2018 alle ore 13:29 Liz Orembo <<a href="mailto:lizorembo@gmail.com">lizorembo@gmail.com</a>> ha scritto:<br></div><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div dir="auto"><div dir="ltr">
<p class="MsoNormal" style="margin:0in 0in 8pt;line-height:107%;font-size:11pt;font-family:"Calibri",sans-serif">Grace,<br></p><p class="MsoNormal" style="margin:0in 0in 8pt;line-height:107%;font-size:11pt;font-family:"Calibri",sans-serif">Considering that commissions like the Judiciary and the
KNHRC are getting very little allocations (and the rumors that <i>sirkal</i> is broke), DPC will mostly rely
on license fees from data processors. Perhaps we should ask if that's enough
to sustain the office and to discharge all the duties outlined in this policy. <span> </span>How many data processing entities are we going
to license? And at what reasonable fee? <span></span></p>
<p class="MsoNormal" style="margin:0in 0in 8pt;line-height:107%;font-size:11pt;font-family:"Calibri",sans-serif">I’m still trying to figure out DPCs level of independence
given that the commissioners are appointed from the ministry. Can it independently
handle data protection issues between citizens and other state agencies? and who should give exemptions? <span></span></p>
<div><span style="font-size:11pt;line-height:107%;font-family:"Calibri",sans-serif">Lastly, to avoid the challenges experienced with
the ATI, the policy should give guidelines on the initial works of the DPP in
promoting the policy. And how long is the transition period?</span></div><div><span style="font-size:11pt;line-height:107%;font-family:"Calibri",sans-serif"><br></span></div><div><span style="font-size:11pt;line-height:107%;font-family:"Calibri",sans-serif">My quick thoughts.<br></span></div>
</div></div><br><div class="gmail_quote"><div dir="ltr">On Wed, Aug 29, 2018 at 10:22 PM Grace Bomu via kictanet <<a href="mailto:kictanet@lists.kictanet.or.ke" rel="noreferrer" target="_blank">kictanet@lists.kictanet.or.ke</a>> wrote:<br></div><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">Listers,<div>I would have hoped for more views on this topic as it is one of the key differences between this draft bill and the Senate data protection bill. Should there be a harmonisation of the two bills, your input on how the data protection regime will be enforced will be useful for the nation. </div><div>I therefore really hope that we find time to consider this matter and give our views. </div><div><br></div><div>Tomorrow we shall look at issues we missed out while going through the draft, key among them being exemptions from certain provisions of the law. </div><div><br></div><div>Goodnight,</div><div><br><br>Il mercoledì 29 agosto 2018, kanini mutemi <<a href="mailto:kaninimutemi@gmail.com" rel="noreferrer" target="_blank">kaninimutemi@gmail.com</a>> ha scritto:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div style="word-wrap:break-word;line-break:after-white-space"><font face="Avenir-Book" style="font-size:14px">Good morning Grace, </font><div><font face="Avenir-Book" style="font-size:14px"><br></font></div><div><font face="Avenir-Book" style="font-size:14px">I don’t think the Office of the DPC is set up to be an independent office. That the DPC will be appointed by the CS is comparable to the elusive ‘independence of the Communication Authority’. The obvious concern is that this will water down the DPC’s watchdog powers when it comes to regulating the government as a controller and processor. The best the Office will be able to do is make recommendations to other government offices to comply with the Act. </font></div><div><font face="Avenir-Book" style="font-size:14px"><br></font></div><div><font face="Avenir-Book" style="font-size:14px">Setting up a new body may also be a problem in the case of data protection. For context purposes, Acts that were passed in 2016 are just now being fully operationalised. Anything that requires the setting up of yet another government office has grave budgetary implications and unfortunately the restructuring takes quite some time. A legal framework on data protection is urgent- we don’t have the luxury of time. </font></div><div><font face="Avenir-Book" style="font-size:14px"><br></font></div><div><font face="Avenir-Book" style="font-size:14px">Good discussion! </font></div><div><div><br><blockquote type="cite"><div>On 29 Aug 2018, at 08:20, Grace Bomu via kictanet <<a href="mailto:kictanet@lists.kictanet.or.ke" rel="noreferrer" target="_blank">kictanet@lists.kictanet.or.ke</a>> wrote:</div><br><div><div dir="ltr"><div class="gmail_default" style="font-family:verdana,sans-serif">Good morning listers,</div><div class="gmail_default" style="font-family:verdana,sans-serif">The office of the data protection commissioner (DPC) is established as a state office and is expected to be independent. The DPC will however be appointed by the Cabinet Secretary, ICT. To qualify for the office, one needs to have extensive knowledge in data science, law, IT and related fields and meet requirements on leadership and integrity(Chapter six of the Katiba) <br></div><div class="gmail_default" style="font-family:verdana,sans-serif">The functions of the DPC include: oversight and enforcement of the Act; registration of data processors and controllers; control over data processing activities; promotion of self regulation of actors; investigation of complaints; creation of awareness on the Act; ensure compliance with international obligations; research and related functions from other laws. <br><br></div><div class="gmail_default" style="font-family:verdana,sans-serif">Powers of the DPC include: investigations; obtain professional assistance if need be; facilitate alternative dispute resolution; issue witness summons; request for information from persons governed by the bill. <br></div><div class="gmail_default" style="font-family:verdana,sans-serif">Further, the DPC may request for data audits (clause 20); appointment of guardian for child online services (clause 29) <br><br></div><div class="gmail_default" style="font-family:verdana,sans-serif">Apart from the usual sources of funds (allocation by Parliament, donations, grants etc) the bill also states that the office of DPC may be funded by funds accrued in performance of its functions. <br><br></div><div class="gmail_default" style="font-family:verdana,sans-serif">Some public fears on creation of yet another public body are based on concerns about funding the body, an expectation that registration will mean paying for licences and that there is not sufficient capacity in the country to oversee data protection. The bill however only proposes that DPC issues certificates and does not mention registration fees. <br></div><div class="gmail_default" style="font-family:verdana,sans-serif"><br></div><div class="gmail_default" style="font-family:verdana,sans-serif">To guide our discussion today, questions include: <br></div><ol><li>Are the functions and powers of the DPC adequate to implement the law? Are there any overboard provisions?</li><li> Considering that the government is a major data processor and controller, is the office of the DPC as structured in the bill sufficiently independent? </li></ol><div><br></div><div style="font-family:verdana,sans-serif;display:inline" class="gmail_default">As usual, please point out any good or problematic clauses. <br></div><div style="font-family:verdana,sans-serif;display:inline" class="gmail_default">Welcome to the discussion</div><br><div><br></div><div class="gmail_default" style="font-family:verdana,sans-serif"><br></div><div class="gmail_default" style="font-family:verdana,sans-serif"><br clear="all"></div><br>-- <br><div dir="ltr" data-smartmail="gmail_signature"><div dir="ltr"><div><div dir="ltr"><div dir="ltr"><div dir="ltr"><div>Grace Mutung'u <br>Skype: gracebomu<br>@Bomu<br><span style="font-size:12.8px">PGP ID : 0x33A3450F</span><br></div><div><br></div></div></div></div></div></div></div></div>
<br><br>-- <br><div dir="ltr"><div><div dir="ltr"><div dir="ltr"><div dir="ltr"><div>Grace Mutung'u <br>Skype: gracebomu<br>@Bomu<br><span style="font-size:12.8px">PGP ID : 0x33A3450F</span><br></div><div><br></div></div></div></div></div></div><br>
_______________________________________________<br>kictanet mailing list<br><a href="mailto:kictanet@lists.kictanet.or.ke" rel="noreferrer" target="_blank">kictanet@lists.kictanet.or.ke</a><br><a href="https://lists.kictanet.or.ke/mailman/listinfo/kictanet" rel="noreferrer" target="_blank">https://lists.kictanet.or.ke/mailman/listinfo/kictanet</a><br>Twitter: <a href="http://twitter.com/kictanet" rel="noreferrer" target="_blank">http://twitter.com/kictanet</a><br>Facebook: <a href="https://www.facebook.com/KICTANet/" rel="noreferrer" target="_blank">https://www.facebook.com/KICTANet/</a><br>Domain Registration sponsored by <a href="http://www.eacdirectory.co.ke" rel="noreferrer" target="_blank">www.eacdirectory.co.ke</a><br><br>Unsubscribe or change your options at <a href="https://lists.kictanet.or.ke/mailman/options/kictanet/kaninimutemi%40gmail.com" rel="noreferrer" target="_blank">https://lists.kictanet.or.ke/mailman/options/kictanet/kaninimutemi%40gmail.com</a><br><br>The Kenya ICT Action Network (KICTANet) is a multi-stakeholder platform for people and institutions interested and involved in ICT policy and regulation. The network aims to act as a catalyst for reform in the ICT sector in support of the national aim of ICT enabled growth and development.<br><br>KICTANetiquette : Adhere to the same standards of acceptable behaviors online that you follow in real life: respect people's times and bandwidth, share knowledge, don't flame or abuse or personalize, respect privacy, do not spam, do not market your wares or qualifications.<br></div></blockquote></div><br></div></div></blockquote></div><br><br>-- <br><div dir="ltr"><div><div dir="ltr"><div dir="ltr"><div dir="ltr"><div>Grace Mutung'u <br>Skype: gracebomu<br>@Bomu<br><span style="font-size:12.8px">PGP ID : 0x33A3450F</span><br></div><div><br></div></div></div></div></div></div><br>
_______________________________________________<br>
kictanet mailing list<br>
<a href="mailto:kictanet@lists.kictanet.or.ke" rel="noreferrer" target="_blank">kictanet@lists.kictanet.or.ke</a><br>
<a href="https://lists.kictanet.or.ke/mailman/listinfo/kictanet" rel="noreferrer noreferrer" target="_blank">https://lists.kictanet.or.ke/mailman/listinfo/kictanet</a><br>
Twitter: <a href="http://twitter.com/kictanet" rel="noreferrer noreferrer" target="_blank">http://twitter.com/kictanet</a><br>
Facebook: <a href="https://www.facebook.com/KICTANet/" rel="noreferrer noreferrer" target="_blank">https://www.facebook.com/KICTANet/</a><br>
Domain Registration sponsored by <a href="http://www.eacdirectory.co.ke" rel="noreferrer noreferrer" target="_blank">www.eacdirectory.co.ke</a><br>
<br>
Unsubscribe or change your options at <a href="https://lists.kictanet.or.ke/mailman/options/kictanet/lizorembo%40gmail.com" rel="noreferrer noreferrer" target="_blank">https://lists.kictanet.or.ke/mailman/options/kictanet/lizorembo%40gmail.com</a><br>
<br>
The Kenya ICT Action Network (KICTANet) is a multi-stakeholder platform for people and institutions interested and involved in ICT policy and regulation. The network aims to act as a catalyst for reform in the ICT sector in support of the national aim of ICT enabled growth and development.<br>
<br>
KICTANetiquette : Adhere to the same standards of acceptable behaviors online that you follow in real life: respect people's times and bandwidth, share knowledge, don't flame or abuse or personalize, respect privacy, do not spam, do not market your wares or qualifications.<br>
</blockquote></div><br clear="all"><br>
</blockquote></div><br clear="all"><br>-- <br><div dir="ltr" class="gmail_signature" data-smartmail="gmail_signature"><div dir="ltr"><div><div dir="ltr"><div dir="ltr"><div dir="ltr"><div>Grace Mutung'u <br>Skype: gracebomu<br>@Bomu<br><span style="font-size:12.8px">PGP ID : 0x33A3450F</span><br></div><div><br></div></div></div></div></div></div></div>