<div dir="auto">Nice piece, I am just wondering if I can have this conversation with Adongo in Isebania. Reading through the piece I am curious to know where most of the data controlers are located. My suspicion is Nairobi. Might it reflect the general state of ecommerce in the country?</div><br><div class="gmail_quote"><div dir="ltr" class="gmail_attr">On Mon, 5 Dec 2022, 1:12 am Mwendwa Kivuva via KICTANet, <<a href="mailto:kictanet@lists.kictanet.or.ke">kictanet@lists.kictanet.or.ke</a>> wrote:<br></div><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><span style="font-family:-apple-system-body,system-ui,BlinkMacSystemFont,"Segoe UI",Roboto,"Helvetica Neue","Fira Sans",Ubuntu,Oxygen,"Oxygen Sans",Cantarell,"Droid Sans","Lucida Grande",Helvetica,Arial,sans-serif,"Apple Color Emoji","Segoe UI Emoji","Segoe UI Emoji","Segoe UI Symbol","Hiragino Kaku Gothic Pro",Meiryo,"Hiragino Sans GB W3","Noto Naskh Arabic","Droid Arabic Naskh","Geeza Pro","Simplified Arabic","Noto Sans Thai",Thonburi,Dokchampa,"Droid Sans Thai","Droid Sans Fallback",".SFNSDisplay-Regular","Heiti SC","Microsoft Yahei";font-size:14.875px;white-space:pre-wrap;color:rgba(0,0,0,0.9)">By Immaculate Kassait, Commissioner, Office of the Data Protection Commission, via LinkedIn <div style="font-family:-apple-system-body,system-ui,BlinkMacSystemFont,"Segoe UI",Roboto,"Helvetica Neue","Fira Sans",Ubuntu,Oxygen,"Oxygen Sans",Cantarell,"Droid Sans","Lucida Grande",Helvetica,Arial,sans-serif,"Apple Color Emoji","Segoe UI Emoji","Segoe UI Emoji","Segoe UI Symbol","Hiragino Kaku Gothic Pro",Meiryo,"Hiragino Sans GB W3","Noto Naskh Arabic","Droid Arabic Naskh","Geeza Pro","Simplified Arabic","Noto Sans Thai",Thonburi,Dokchampa,"Droid Sans Thai","Droid Sans Fallback",".SFNSDisplay-Regular","Heiti SC","Microsoft Yahei""><a href="https://www.linkedin.com/feed/update/activity:6998187244096303104" target="_blank" rel="noreferrer">https://www.linkedin.com/feed/update/activity:6998187244096303104</a></div>
During the drafting process of the Data Protection Regulations, data localization was one area we received many queries about. Initially, we had very stringed regulations that required data to be stored locally. But upon receiving feedback from the stakeholders, we adjusted the requirements from processing information in Kenya to having just a copy stored in the country.  The key questions we received on data localization were:
1. How do you insist on data localization in an era of Cloud Computing with the services not available in Kenya?
2. Does Kenya have the pre-requisite infrastructure i.e. tier three and above data centers, can we guarantee electricity flows, back-up, security, and safety of people’s data?
<br></span><div dir="auto"><span style="font-family:-apple-system-body,system-ui,BlinkMacSystemFont,"Segoe UI",Roboto,"Helvetica Neue","Fira Sans",Ubuntu,Oxygen,"Oxygen Sans",Cantarell,"Droid Sans","Lucida Grande",Helvetica,Arial,sans-serif,"Apple Color Emoji","Segoe UI Emoji","Segoe UI Emoji","Segoe UI Symbol","Hiragino Kaku Gothic Pro",Meiryo,"Hiragino Sans GB W3","Noto Naskh Arabic","Droid Arabic Naskh","Geeza Pro","Simplified Arabic","Noto Sans Thai",Thonburi,Dokchampa,"Droid Sans Thai","Droid Sans Fallback",".SFNSDisplay-Regular","Heiti SC","Microsoft Yahei";font-size:14.875px;white-space:pre-wrap;color:rgba(0,0,0,0.9)">The rationale behind data localization from a national security standpoint is purely about the data sovereignty of a nation. Imagine going to your bank to urgently get your statement for visa application, then you’re told you cannot access it because the undersea cable is down and hence it will take about 2 weeks to be fixed! Such challenges in accessing information as and when needed makes it difficult for business continuity and could result in revenue loss and reputational damage.
<br></span><div dir="auto"><span style="font-family:-apple-system-body,system-ui,BlinkMacSystemFont,"Segoe UI",Roboto,"Helvetica Neue","Fira Sans",Ubuntu,Oxygen,"Oxygen Sans",Cantarell,"Droid Sans","Lucida Grande",Helvetica,Arial,sans-serif,"Apple Color Emoji","Segoe UI Emoji","Segoe UI Emoji","Segoe UI Symbol","Hiragino Kaku Gothic Pro",Meiryo,"Hiragino Sans GB W3","Noto Naskh Arabic","Droid Arabic Naskh","Geeza Pro","Simplified Arabic","Noto Sans Thai",Thonburi,Dokchampa,"Droid Sans Thai","Droid Sans Fallback",".SFNSDisplay-Regular","Heiti SC","Microsoft Yahei";font-size:14.875px;white-space:pre-wrap;color:rgba(0,0,0,0.9)">As a sovereign state, there’s critical information unique and important to our country such that if the information is not available, the country will be grounded. In order to balance between the concerns raised on accessing this information and the sensitivity of the information, we resolved to have at least a copy of the information stored locally. This helps protect personal information created in Kenya, national security, law enforcement, and competitiveness of domestic market hence creating job opportunities for citizens.
<br></span><div dir="auto"><span style="font-family:-apple-system-body,system-ui,BlinkMacSystemFont,"Segoe UI",Roboto,"Helvetica Neue","Fira Sans",Ubuntu,Oxygen,"Oxygen Sans",Cantarell,"Droid Sans","Lucida Grande",Helvetica,Arial,sans-serif,"Apple Color Emoji","Segoe UI Emoji","Segoe UI Emoji","Segoe UI Symbol","Hiragino Kaku Gothic Pro",Meiryo,"Hiragino Sans GB W3","Noto Naskh Arabic","Droid Arabic Naskh","Geeza Pro","Simplified Arabic","Noto Sans Thai",Thonburi,Dokchampa,"Droid Sans Thai","Droid Sans Fallback",".SFNSDisplay-Regular","Heiti SC","Microsoft Yahei";font-size:14.875px;white-space:pre-wrap;color:rgba(0,0,0,0.9)">It is important to note that data localization does not apply to all information. It only applies to categories of information on civil registration and legal identity management systems for national security (your identity as a Kenyan), facilitating the conduct of elections, representation of Kenya, public finance by state organs, running systems designated as protected computer systems in terms of section 20 of the computer misuse and cybercrime act, information about children, healthcare among others.
<br></span><div dir="auto"><span style="font-family:-apple-system-body,system-ui,BlinkMacSystemFont,"Segoe UI",Roboto,"Helvetica Neue","Fira Sans",Ubuntu,Oxygen,"Oxygen Sans",Cantarell,"Droid Sans","Lucida Grande",Helvetica,Arial,sans-serif,"Apple Color Emoji","Segoe UI Emoji","Segoe UI Emoji","Segoe UI Symbol","Hiragino Kaku Gothic Pro",Meiryo,"Hiragino Sans GB W3","Noto Naskh Arabic","Droid Arabic Naskh","Geeza Pro","Simplified Arabic","Noto Sans Thai",Thonburi,Dokchampa,"Droid Sans Thai","Droid Sans Fallback",".SFNSDisplay-Regular","Heiti SC","Microsoft Yahei";font-size:14.875px;white-space:pre-wrap;color:rgba(0,0,0,0.9)">Some of the myths around data localization include all information being processed even for private businesses should be stored in the country; organizations are not supposed to use cloud services and lastly, data localization is expensive compared to cloud services. I trust that we have addressed these misconceptions most of you might have about data localization.
What misconceptions did you have before reading this post?</span></div></div></div></div>-- <br><div dir="ltr" data-smartmail="gmail_signature"><div dir="ltr"><div>Best Regards,<br></div><div>______________________</div>Mwendwa Kivuva, Nairobi, Kenya<br><a href="https://www.linkedin.com/in/mwendwa-kivuva" target="_blank" rel="noreferrer">https://www.linkedin.com/in/mwendwa-kivuva</a></div></div>
_______________________________________________<br>
KICTANet mailing list<br>
<a href="mailto:KICTANet@lists.kictanet.or.ke" target="_blank" rel="noreferrer">KICTANet@lists.kictanet.or.ke</a><br>
<a href="https://lists.kictanet.or.ke/mailman/listinfo/kictanet" rel="noreferrer noreferrer" target="_blank">https://lists.kictanet.or.ke/mailman/listinfo/kictanet</a><br>
<br>
Twitter: <a href="https://twitter.com/KICTANet/" rel="noreferrer noreferrer" target="_blank">https://twitter.com/KICTANet/</a><br>
Facebook: <a href="https://www.facebook.com/KICTANet/" rel="noreferrer noreferrer" target="_blank">https://www.facebook.com/KICTANet/</a><br>
Instagram: <a href="https://www.instagram.com/KICTANet/" rel="noreferrer noreferrer" target="_blank">https://www.instagram.com/KICTANet/</a><br>
LinkedIn: <a href="https://www.linkedin.com/company/kictanet/" rel="noreferrer noreferrer" target="_blank">https://www.linkedin.com/company/kictanet/</a><br>
YouTube: <a href="https://www.youtube.com/channel/UCbcLVjnPtTGBEeYLGUb2Yow/" rel="noreferrer noreferrer" target="_blank">https://www.youtube.com/channel/UCbcLVjnPtTGBEeYLGUb2Yow/</a><br>
<br>
Unsubscribe or change your options at <a href="https://lists.kictanet.or.ke/mailman/options/kictanet/barrack%40kictanet.or.ke" rel="noreferrer noreferrer" target="_blank">https://lists.kictanet.or.ke/mailman/options/kictanet/barrack%40kictanet.or.ke</a><br>
<br>
<br>
KICTANet is a multi-stakeholder Think Tank for people and institutions interested and involved in ICT policy and regulation. KICTANet is a catalyst for reform in the Information and Communication Technology sector. Its work is guided by four pillars of Policy Advocacy, Capacity Building, Research, and Stakeholder Engagement.<br>
<br>
KICTANetiquette : Adhere to the same standards of acceptable behaviors online that you follow in real life: respect people's times and bandwidth, share knowledge, don't flame or abuse or personalize, respect privacy, do not spam, do not market your wares or qualifications.<br>
<br>
KICTANet - The Power of Communities, is Kenya's premier ICT policy engagement platform.<br>
</blockquote></div>