ODPC Directs Entities Handling People's Data to Register or Face Ksh5 Million Fine

The Office of the Data Protection Commissioner (ODPC) has directed businesses and organizations that collect, store, or process personal data to register or face fines of up to Ksh5 million. The notice targets hospitals, banks, schools, telecommunications companies, and other entities handling personal information. Non-compliance will result in financial penalties and other sanctions. The ODPC aims to strengthen accountability and data protection safeguards.