<div dir="auto">This will be a step in the right direction if it comes to pass. Of implementation???</div><br><div class="gmail_quote"><div dir="ltr" class="gmail_attr">On Thu, 29 Oct 2020, 08:57 simiyu mse via kictanet, <<a href="mailto:kictanet@lists.kictanet.or.ke">kictanet@lists.kictanet.or.ke</a>> wrote:<br></div><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div dir="auto">A recent development with regards to data accessibility and portability.<div dir="auto"><br></div><div dir="auto"><span style="background-color:rgb(255,255,255);color:rgb(77,77,77);font-family:"pt serif","times new roman",times,serif;font-size:1.3rem">'Technology giants like Twitter, Facebook and Google will soon come under government scrutiny for their handling of personal information belonging to Kenyans, the nominee for the position of Data Protection Commissioner told Parliament Wednesday.</span><br></div><div dir="auto"><p style="margin:1.5rem 0px 0px;color:rgb(77,77,77);font-size:1.3rem;font-family:"pt serif","times new roman",times,serif;line-height:2;padding:0px;border:0px;background-color:rgb(255,255,255)">Appearing before the National Assembly’s ICT committee for vetting, Immaculate Kassait said the multinational technology companies will be held liable for the use of data belonging to Kenya or Kenyans whether they operate locally or outside the country.</p><p style="margin:1.5rem 0px 0px;color:rgb(77,77,77);font-size:1.3rem;font-family:"pt serif","times new roman",times,serif;line-height:2;padding:0px;border:0px;background-color:rgb(255,255,255)">The data protection law, approved in November last year, sets out restrictions on how personally identifiable data obtained by firms and government entities can be handled, stored and shared.</p><p style="margin:1.5rem 0px 0px;color:rgb(77,77,77);font-size:1.3rem;font-family:"pt serif","times new roman",times,serif;line-height:2;padding:0px;border:0px;background-color:rgb(255,255,255)">The Data Protection Act 2019 gives the commissioner sweeping powers on the investigation of data breaches. These include powers of entry and search and issuing administrative fines.</p><p style="margin:1.5rem 0px 0px;color:rgb(77,77,77);font-size:1.3rem;font-family:"pt serif","times new roman",times,serif;line-height:2;padding:0px;border:0px;background-color:rgb(255,255,255)">“Even if they are internationally based companies and as long as they have data about Kenya, they have responsibility to adhere to laws of Kenya,” Ms Kassait, the current director of voter education at the Independent Electoral and Boundaries Commission (IEBC), said.</p><p style="margin:1.5rem 0px 0px;color:rgb(77,77,77);font-size:1.3rem;font-family:"pt serif","times new roman",times,serif;line-height:2;padding:0px;border:0px;background-color:rgb(255,255,255)">Facebook said in 2018 the personal information of up to 87 million users may have been improperly shared with political consultancy Cambridge Analytica.</p><p style="margin:1.5rem 0px 0px;color:rgb(77,77,77);font-size:1.3rem;font-family:"pt serif","times new roman",times,serif;line-height:2;padding:0px;border:0px;background-color:rgb(255,255,255)">[Link] </p><br><span style="font-family:sans-serif"><a href="https://www.businessdailyafrica.com/bd/economy/facebook-twitter-put-on-notice-for-personal-data-breach-2724682" target="_blank" rel="noreferrer">https://www.businessdailyafrica.com/bd/economy/facebook-twitter-put-on-notice-for-personal-data-breach-2724682</a></span><p style="margin:1.5rem 0px 0px;color:rgb(77,77,77);font-size:1.3rem;font-family:"pt serif","times new roman",times,serif;line-height:2;padding:0px;border:0px;background-color:rgb(255,255,255)">Regards.</p><p style="margin:1.5rem 0px 0px;color:rgb(77,77,77);font-size:1.3rem;font-family:"pt serif","times new roman",times,serif;line-height:2;padding:0px;border:0px;background-color:rgb(255,255,255)">Simiyu.</p></div></div><br><div class="gmail_quote"><div dir="ltr" class="gmail_attr">On Wed, Oct 28, 2020, 3:32 PM Rafe Mazer via kictanet <<a href="mailto:kictanet@lists.kictanet.or.ke" target="_blank" rel="noreferrer">kictanet@lists.kictanet.or.ke</a>> wrote:<br></div><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div dir="ltr">I think the issue is not that there is technically an ability to access your data, it's that the laws make no ability to make that easy, and easily transferable to third parties to acquire new products and services. The data portability language in the DPA gives up to 30 days, and allows for a "reasonable fee" to be assessed. Those are subtle but significant barriers to achieving the impact of portability being realized in other jurisdictions and I think was an opportunity wasted when the DPA was drafted--despite recommendations to revise this language during the comments period.</div><br><div class="gmail_quote"><div dir="ltr" class="gmail_attr">On Mon, Oct 26, 2020 at 5:00 PM Sidney Ochieng via kictanet <<a href="mailto:kictanet@lists.kictanet.or.ke" rel="noreferrer noreferrer" target="_blank">kictanet@lists.kictanet.or.ke</a>> wrote:<br></div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex"><div dir="ltr"><div>A bit late to this discussion. I'm surprised that the entirety of this discussion didn't mention GDPR's data portability requirements or Kenya's own Access to Information(A2I) act. The mechanisms for this exist though this data is not necessarily accessible via API. GDPR even <a href="https://gdpr-info.eu/art-20-gdpr/" rel="noreferrer noreferrer" target="_blank">explicits says</a> that the data be machine readable and freely transferable. <br></div><div><br></div><div>GDPR has helped with this in Europe, and it applies to every company that has data on European citizens no matter where in the world they are, and it comes with stiff fines for non-compliance. If we look at it locally I'm yet to find any public entity that is in compliance with any part of the practical aspects of A2I act, including the CA of whom I've made a couple of requests that seem to have disappeared into the ether. <br></div><div><br></div><div>Even organisations like Safaricom that have the technical and financial capicity don't make it clear how to go about getting information from them, given that for sure they have Europeans on their network I wonder whether they're GDPR compliant and if that process is accessible to Kenyans.<br></div><div><br></div><div>Listers the A2I was passed in 2016. How many of us have tried to use it to get information from an entity, public or private? What was the outcome?</div></div><br><div class="gmail_quote"><div dir="ltr" class="gmail_attr">On Tue, 13 Oct 2020 at 11:11, John Kieti via kictanet <<a href="mailto:kictanet@lists.kictanet.or.ke" rel="noreferrer noreferrer" target="_blank">kictanet@lists.kictanet.or.ke</a>> wrote:<br></div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex"><div dir="ltr">Dear Listers,<div><br></div><div>Just a random thought. What if the law entitled users to a periodic (eg. quarterly) download of all data collected of them by large platform companies (including telcos); and the users could grant file access to the competitors as the user migrates? What if it was API-based data access that the user could grant to third parties including competitors?</div><div><br></div><div>What if there was an automated data depository eg. for telcos; whereby I can invoke the right to access all the data the telco holds of me, and I proceed to grant the data depository access to my data, automatically retrieved from my telco A. That way my data <b>anonymized or otherwise permitted</b> can be accessible from the depository and aggregated with other peoples' to develop services on top of the data layer by third parties such as startups, data mining & research services, and even telco B which competes as an underdog with telco A.</div><div><br></div><div>The assumption would be that the user owns the data held by the platform/telco which has already got its head start with appropriating my data by collecting it in realtime. It would also be assumed that access to my data in the depository is only by licensed entities under stringent rules that respect my access permission settings.</div><div><br></div><div>What could go wrong with such an approach to user data? What could go well?</div><div><br></div><div>Any thoughts?</div><div><br></div><div><br></div><div>-- <br><div dir="ltr"><div dir="ltr"><div><div dir="ltr"><div><div dir="ltr"><div><font color="#999999"><br>John Kieti<br>Phone: +254-735-764242 // +254-722-764242<br>Twitter: @<a href="https://twitter.com/johnkieti" rel="noreferrer noreferrer" target="_blank">johnKieti</a> // Skype: jkieti</font><span><font color="#999999"><cite><b></b></cite></font></span><font color="#999999"><cite><b><br></b></cite>Blog:</font><span><font color="#999999"> </font></span><a href="http://www.gmeltdown.com" rel="noreferrer noreferrer" target="_blank"><font color="#0000ff">gmeltdown.com</font></a><font color="#336666"> // </font><span><span><font color="#999999">LinkedIn: </font></span></span><a href="https://ke.linkedin.com/in/kieti" rel="noreferrer noreferrer" target="_blank"><font color="#0000ff"><span style="font-size:14px;line-height:16px;white-space:nowrap">https://ke.linkedin.com/in/</span><b style="font-size:14px;line-height:16px;white-space:nowrap">kieti</b></font></a></div><div><div><font color="#999999"><br>The ordinary just won't do</font></div></div></div></div></div></div></div></div></div></div>
_______________________________________________<br>
kictanet mailing list<br>
<a href="mailto:kictanet@lists.kictanet.or.ke" rel="noreferrer noreferrer" target="_blank">kictanet@lists.kictanet.or.ke</a><br>
<a href="https://lists.kictanet.or.ke/mailman/listinfo/kictanet" rel="noreferrer noreferrer noreferrer" target="_blank">https://lists.kictanet.or.ke/mailman/listinfo/kictanet</a><br>
Twitter: <a href="http://twitter.com/kictanet" rel="noreferrer noreferrer noreferrer" target="_blank">http://twitter.com/kictanet</a><br>
Facebook: <a href="https://www.facebook.com/KICTANet/" rel="noreferrer noreferrer noreferrer" target="_blank">https://www.facebook.com/KICTANet/</a><br>
<br>
Unsubscribe or change your options at <a href="https://lists.kictanet.or.ke/mailman/options/kictanet/sidney.ochieng%40gmail.com" rel="noreferrer noreferrer noreferrer" target="_blank">https://lists.kictanet.or.ke/mailman/options/kictanet/sidney.ochieng%40gmail.com</a><br>
<br>
The Kenya ICT Action Network (KICTANet) is a multi-stakeholder platform for people and institutions interested and involved in ICT policy and regulation. The network aims to act as a catalyst for reform in the ICT sector in support of the national aim of ICT enabled growth and development.<br>
<br>
KICTANetiquette : Adhere to the same standards of acceptable behaviors online that you follow in real life: respect people's times and bandwidth, share knowledge, don't flame or abuse or personalize, respect privacy, do not spam, do not market your wares or qualifications.<br>
</blockquote></div><br clear="all"><br>-- <br><div dir="ltr"><div dir="ltr"><div><div dir="ltr"><div><div dir="ltr"><div style="font-size:12.8px"><font size="2">Regards,</font></div><div style="font-size:12.8px"><span style="font-size:small">Sidney</span><br></div><div style="font-size:12.8px"><table style="font-family:verdana;font-size:11px;color:rgb(51,61,71)" width="100%" cellspacing="0" cellpadding="0"><tbody><tr><td valign="middle" height="20"><font size="2"><strong><br>Twitter:</strong> <a href="https://twitter.com/princelySid" rel="noreferrer noreferrer" target="_blank">@princelySid</a> | <b>Web: </b><a href="http://sidneyochieng.co.ke/" rel="noreferrer noreferrer" target="_blank">sidneyochieng.co.ke</a><br><b>Skype: </b>sidney.ochieng | <b>Github:</b> <a href="https://github.com/princelySid" rel="noreferrer noreferrer" target="_blank">princelySid</a></font><br></td></tr></tbody></table></div></div></div></div></div></div></div>
_______________________________________________<br>
kictanet mailing list<br>
<a href="mailto:kictanet@lists.kictanet.or.ke" rel="noreferrer noreferrer" target="_blank">kictanet@lists.kictanet.or.ke</a><br>
<a href="https://lists.kictanet.or.ke/mailman/listinfo/kictanet" rel="noreferrer noreferrer noreferrer" target="_blank">https://lists.kictanet.or.ke/mailman/listinfo/kictanet</a><br>
Twitter: <a href="http://twitter.com/kictanet" rel="noreferrer noreferrer noreferrer" target="_blank">http://twitter.com/kictanet</a><br>
Facebook: <a href="https://www.facebook.com/KICTANet/" rel="noreferrer noreferrer noreferrer" target="_blank">https://www.facebook.com/KICTANet/</a><br>
<br>
Unsubscribe or change your options at <a href="https://lists.kictanet.or.ke/mailman/options/kictanet/rafe.mazer%40gmail.com" rel="noreferrer noreferrer noreferrer" target="_blank">https://lists.kictanet.or.ke/mailman/options/kictanet/rafe.mazer%40gmail.com</a><br>
<br>
The Kenya ICT Action Network (KICTANet) is a multi-stakeholder platform for people and institutions interested and involved in ICT policy and regulation. The network aims to act as a catalyst for reform in the ICT sector in support of the national aim of ICT enabled growth and development.<br>
<br>
KICTANetiquette : Adhere to the same standards of acceptable behaviors online that you follow in real life: respect people's times and bandwidth, share knowledge, don't flame or abuse or personalize, respect privacy, do not spam, do not market your wares or qualifications.<br>
</blockquote></div>
_______________________________________________<br>
kictanet mailing list<br>
<a href="mailto:kictanet@lists.kictanet.or.ke" rel="noreferrer noreferrer" target="_blank">kictanet@lists.kictanet.or.ke</a><br>
<a href="https://lists.kictanet.or.ke/mailman/listinfo/kictanet" rel="noreferrer noreferrer noreferrer" target="_blank">https://lists.kictanet.or.ke/mailman/listinfo/kictanet</a><br>
Twitter: <a href="http://twitter.com/kictanet" rel="noreferrer noreferrer noreferrer" target="_blank">http://twitter.com/kictanet</a><br>
Facebook: <a href="https://www.facebook.com/KICTANet/" rel="noreferrer noreferrer noreferrer" target="_blank">https://www.facebook.com/KICTANet/</a><br>
<br>
Unsubscribe or change your options at <a href="https://lists.kictanet.or.ke/mailman/options/kictanet/kensimiyu%40gmail.com" rel="noreferrer noreferrer noreferrer" target="_blank">https://lists.kictanet.or.ke/mailman/options/kictanet/kensimiyu%40gmail.com</a><br>
<br>
The Kenya ICT Action Network (KICTANet) is a multi-stakeholder platform for people and institutions interested and involved in ICT policy and regulation. The network aims to act as a catalyst for reform in the ICT sector in support of the national aim of ICT enabled growth and development.<br>
<br>
KICTANetiquette : Adhere to the same standards of acceptable behaviors online that you follow in real life: respect people's times and bandwidth, share knowledge, don't flame or abuse or personalize, respect privacy, do not spam, do not market your wares or qualifications.<br>
</blockquote></div>
_______________________________________________<br>
kictanet mailing list<br>
<a href="mailto:kictanet@lists.kictanet.or.ke" target="_blank" rel="noreferrer">kictanet@lists.kictanet.or.ke</a><br>
<a href="https://lists.kictanet.or.ke/mailman/listinfo/kictanet" rel="noreferrer noreferrer" target="_blank">https://lists.kictanet.or.ke/mailman/listinfo/kictanet</a><br>
Twitter: <a href="http://twitter.com/kictanet" rel="noreferrer noreferrer" target="_blank">http://twitter.com/kictanet</a><br>
Facebook: <a href="https://www.facebook.com/KICTANet/" rel="noreferrer noreferrer" target="_blank">https://www.facebook.com/KICTANet/</a><br>
<br>
Unsubscribe or change your options at <a href="https://lists.kictanet.or.ke/mailman/options/kictanet/fmwangangi1%40gmail.com" rel="noreferrer noreferrer" target="_blank">https://lists.kictanet.or.ke/mailman/options/kictanet/fmwangangi1%40gmail.com</a><br>
<br>
The Kenya ICT Action Network (KICTANet) is a multi-stakeholder platform for people and institutions interested and involved in ICT policy and regulation. The network aims to act as a catalyst for reform in the ICT sector in support of the national aim of ICT enabled growth and development.<br>
<br>
KICTANetiquette : Adhere to the same standards of acceptable behaviors online that you follow in real life: respect people's times and bandwidth, share knowledge, don't flame or abuse or personalize, respect privacy, do not spam, do not market your wares or qualifications.<br>
</blockquote></div>