ODPC Explains Registration Process for Businesses Handling Personal Data

The Office of the Data Protection Commissioner (ODPC) of Kenya released on Monday, June 8, 2026, the official registration process for data controllers and processors. Applications can be submitted online or in person, requiring documents such as a certificate of incorporation, audited financial statements, and a declaration of employee numbers. Registration fees vary by entity size: Ksh4,000 for micro and small entities, Ksh16,000 for medium, and Ksh40,000 for large. The certificate is valid for two years, and non-compliant organizations risk fines up to Ksh5 million.