Archive · Kenya
All 9 archive entries on Kenya, most recent first.
The Central Bank of Kenya advertised senior and managerial roles for virtual asset licensing and compliance functions in late April 2026, applications closing 18 May, before the VASP Regulations had even been finalised.
In a determination dated 14 April 2026 (Peter Macharia Waithira v LOLC MFB), Data Commissioner Immaculate Kassait held LOLC Kenya Microfinance Bank liable for publishing a former employee's image and personal details in public notices on its social media platforms without consent or lawful basis, ordered deletion within 14 days, and recommended the bank's directors for criminal prosecution for obstruction after the lender failed to cooperate with the investigation, with fines up to KES 5 million or two years' imprisonment on conviction.
Public participation on the Draft Virtual Asset Service Providers Regulations 2026 closed on 10 April 2026, keeping Kenya on track to operationalise VASP licensing in 2026.
Kenya's ODPC opened a suo moto investigation into Ray-Ban Meta smart glasses in April 2026, after a direct appeal filed 6 March 2026 raised the devices' embedded recording capabilities.
The National Treasury published the Draft Virtual Asset Service Providers Regulations 2026 for public consultation on 17 March 2026, the first implementing instrument under the VASP Act 2025.
In Muthoni v Africa International University [2026] KEHC 2254 (KLR), decided 16 February 2026, the High Court dealt with an application to adopt a July 2025 ODPC determination (Complaint No.
On 26 January 2026, ahead of the 2026 Data Privacy Day Conference in Mombasa, Kenya's ODPC announced it had issued 184 compensation orders to data subjects, against a cumulative docket of 9,061 complaints, 357 determinations, 134 enforcement notices and 20 penalty notices since the Data Protection Act 2019 took effect.
Kenya's Virtual Asset Service Providers Act 2025, assented 15 October 2025 and in force from 4 November 2025, made Kenya the first East African country with standalone virtual asset legislation.
On 5 May 2025 the High Court of Kenya declared Worldcoin's operations unlawful under both the Data Protection Act 2019 and Article 31 of the Constitution, in Republic v Tools for Humanity Corporation & 9 others [2025] KEHC 5629 (KLR).
Enforcement decisions, new laws and regulatory movement across African jurisdictions, in one brief. Free, and built to be forwarded to the colleague who needs it.
Your address goes to our email service provider and is used to send you the Digest, nothing else. Unsubscribe in one click, in every issue. Privacy policy. This site itself sets no cookies.