CompliancePinned
What the Kenya Data Protection Act requires of your business
A plain-language walkthrough of controller and processor duties under Kenya's Data Protection Act 2019, ODPC registration, and the 72-hour breach clock.
· 5 min read
RESEARCH & THREAT INTELLIGENCE
Insights
Practical cybersecurity writing for operators: threat briefs, data protection guidance, and lessons from real engagements.
100% Practitioner Authored
PUBLISHED BRIEFINGS
Recent Technical Advisories
- Threats
Prompt injection: the flaw in the AI feature you are shipping
Why prompt injection cannot be patched away, how it reaches systems that only call a third-party API, and why permissioning the agent is the real control.
· 5 min read
- Compliance
How to report a data breach to the ODPC, and what happens next
The decision tree for whether a breach must be notified in Kenya, what the ODPC expects in the report, and how the 72-hour clock is actually counted.
· 5 min read
BROWSE BY PRACTICE TAXONOMY
REGULATORY & THREAT TAGS
INTELLIGENCE WITHOUT LIMITS
Have questions on emerging threats?
Our practice directors advise institutions on data protection compliance, API security, and incident response.
Direct Hotline:+254 740 658 068
NO-OBLIGATION GUARANTEE
What to expect in your scoping call
Direct Senior Lead
You talk to a seasoned cybersecurity consultant, never a sales script.
Strict Confidentiality
We operate under mutual NDA before discussing sensitive architecture.
Actionable Next Steps
Immediate priorities and costed options, whether you engage us or not.