Latest Posts

Kenya High Court’s Worldcoin Determination: Upholding Consent, Accountability and Data Sovereignty in Biometric Data Processing

September 11, 2025

On 05 May 2025, the High Court of Kenya declared Worldcoin’s biometric data collection in Kenya unlawful and in violation…

Understanding Botswana’s 2018 and 2024 Data Protection Acts

March 26, 2025

Introduction Botswana enacted its new Data Protection Act on 29 October 2024,1 repealing the 2018 Data Protection Act.2 The repealed…

Kenya’s TikTok Dilemma: Balancing Regulation and Digital Rights

February 7, 2025

Introduction As TikTok continues to dominate the global social media landscape, its implications for digital rights and data governance have…

IMEI Declaration and Registration in Kenya: Balancing Tax Compliance and Data Protection

February 3, 2025

On 23rd October, 2024, the Communications Authority of Kenya (CAK) formally put the Kenyan public on notice of a measure…

In the Eyes of IDEMIA’s Vigilance Plan 2023: New Perspectives on Data Protection Impact Assessment Obligations for Big Tech

December 13, 2024

Introduction IDEMIA is a France-based multinational technology company which provides biometric solutions for States and private entities in sectors such…

Ethiopia’s Personal Data Protection Proclamation of 2024 and its Budding Digital Identity Regime

November 12, 2024

Introduction Various legal regimes that address privacy and data protection to some extent have marked the journey towards enacting the…

Insights from Recent ODPC Rulings: Evaluating Commercial Use of Minors’ Personal Data and Image Rights

November 7, 2024

Introduction The Office of the Data Protection (ODPC) was constituted by the Data Protection Act, under the auspices of Section…

Facilitating Privacy Compliance in Nigeria: Key Issues in the GAID Draft 2024

September 9, 2024

INTRODUCTION Following the introduction of the widely lauded Nigeria Data Protection Act (NDP Act) in June 2023, Nigeria has made…

Challenging the Constitutionality of the Personal Data Protection Act: Tito Magoti v Attorney General

August 9, 2024

The Personal Data Protection Act (CAP 44 of 2023) (hereinafter “PDPA”) represents a significant legislative effort by Tanzania to establish…

Highlights from Sector-Specific Guidance Notes on Processing Personal Data by the ODPC

July 25, 2024

In January 2024, the Office of the Data Protection Commissioner (ODPC) published sector-specific guidance notes for the education, health, communications,…