EMFADCourses
Basket
Instant access by email once payment is confirmed14-day refundSecure checkoutSupport by email, phone and WhatsApp

Cybersecurity

Kenya Data Protection Act Compliance for Businesses

Understand what the Data Protection Act, 2019 requires of your business and build a practical compliance programme for the personal data you handle.

Level
Beginner
Format
Written, self-paced
Length
About 6 hours
Lessons
15
Modules
4
Certificate
Yes, verifiable
Last updated
October 2026

About this course

Understand what the Data Protection Act, 2019 expects of businesses that handle personal data in Kenya and build a practical compliance programme. Awareness-level guidance, not legal advice.

Self-paced written course: text lessons, practical exercises, module quizzes and a final project, delivered online. No video and no live tutor.

What you will learn

  • Identify personal and sensitive personal data and decide when your organisation is a controller or processor
  • Apply the data protection principles to forms, systems and everyday business processes
  • Choose a lawful basis for each purpose and obtain consent that meets the Act's standard
  • Handle data subject requests and write a clear, accurate privacy notice
  • Map your data, assess registration, carry out a DPIA and review processor contracts and transfers
  • Put practical security measures in place and respond to a data breach within the legal deadlines

Curriculum

Module 1Foundations of Data Protection in Kenya4 lessons
  1. 1Why the Data Protection Act Matters to Your Business3 min read Free preview
  2. 2Key Terms: Personal Data, Data Controller and Data Processor3 min read
  3. 3The Data Protection Principles in Plain Language3 min read
  4. 4The Role of the Office of the Data Protection Commissioner3 min read
  5. QuizModule quiz, 4 questions
Module 2Lawful Processing and Data Subject Rights4 lessons
  1. 5Choosing a Lawful Basis and Getting Valid Consent3 min read
  2. 6Sensitive Personal Data and Children's Data3 min read
  3. 7Responding to Access, Correction and Deletion Requests3 min read
  4. 8Writing a Clear Privacy Notice3 min read
  5. QuizModule quiz, 4 questions
Module 3Building Your Compliance Programme4 lessons
  1. 9Mapping the Personal Data You Hold3 min read
  2. 10Registration as a Controller or Processor in Principle3 min read
  3. 11Data Protection Impact Assessments Step by Step3 min read
  4. 12Contracts with Processors and Cross-Border Transfers3 min read
  5. QuizModule quiz, 4 questions
Module 4Security, Breaches and Accountability3 lessons
  1. 13Practical Security Measures for Small Organisations3 min read
  2. 14Handling and Reporting a Data Breach3 min read
  3. 15Course Project: Data Protection Compliance Pack for a Small Business3 min read
  4. QuizModule quiz, 4 questions

Final project

Data Protection Compliance Pack for a Small Business. A practical brief with ordered steps, what to produce and how to check your own work. You confirm it in your learner area.

Who it is for

  • Business owners and managers who handle customer or employee data in Kenya
  • HR, administration and IT staff responsible for records and systems
  • Anyone asked to lead data protection compliance in a small or medium organisation

Not for you if you already work confidently with everything in the curriculum below. Look at the other cybersecurity courses instead.

Requirements

  • No legal background is needed
  • Access to your organisation's forms, systems and policies is helpful
  • A computer or smartphone with internet access to read ODPC guidance

What is included

  • 15 written lessons
  • 15 practical exercises
  • 4 module quizzes
  • A final project
  • Certificate of completion with a verification code
  • Lifetime access to what you buy

Questions about this course

What do I need before I start?

No legal background is needed. Access to your organisation's forms, systems and policies is helpful. A computer or smartphone with internet access to read ODPC guidance.

What device do I need?

A phone, tablet or computer with a modern web browser and an internet connection. Lessons are written, so they work on slow connections.

How long do I have access?

Lifetime access to the full course or to any module you buy. All Access and Teams give 12 months of access to every course.

Can I get a refund?

Yes: a full refund within 14 days of purchase if you have completed less than 30% of the course (or of the module, for a single module). Read the refund policy.

Should I buy a module or the full course?

A module (USD 10) unlocks that module's lessons and quiz. The full course (USD 39) unlocks everything and leads to the certificate. If you buy modules first, each one you own is credited at USD 10 when you buy the full course.

Which currency will I pay in?

US dollars (USD). Prices include all taxes where applicable. Your bank may apply its own conversion fee. Card payment is being set up with our bank. After you place your order we email you payment instructions within one working day; your access starts as soon as payment is confirmed.

Cybersecurity learning path

All 8 open courses in this subject for USD 229. Bought separately they cost USD 382, so you save USD 153.

See the path

More in Cybersecurity.

All cybersecurity courses

USD 39Full course