How Kenya’s New Data Guidance Addresses Global Transfers

Kenya’s Office of the Data Protection Commissioner (ODPC) published its Guidance Notes for Cross-border Data Transfers in September 2026. The notes provide operational guidance on Part VI of the Data Protection Act (DPA) of 2019 and Regulation 40 of the Data Protection (General) Regulations of 2021. They apply to all entities that handle personal data within Kenya and transfer or intend to transfer such data outside Kenya.