Office of the Data Protection Commissioner (ODPC) Kenya

SECTION 1 — BASIC DETAILS

Indicate if you are registering as a:*

Data Controller

Data Processor

Both (Data Controller & Data Processor)

Name of Entity / Organization*

Trading Name (if different)

Postal Address*

Telephone Number*

Official Email Address*

County*

Select from all 47 counties or International / Other

Specify Other County / Jurisdiction

Country*

Select your country of incorporation or establishment

Sector / Industry*

Select the primary sector of operation

Specify Other Sector / Industry

Legal Establishment*

Select legal structure

Specify Other Legal Form

Registration / BRS Number

Business Registration Service (BRS) number or NGO/Sacco number

For Public Body (Specify State or County Department)

SECTION 2 — PERSONAL DATA

Category of Data Subjects*

Provide details of the categories of data subjects whose personal data is processed.

Description of Personal Data to be Processed*

List the types and subsets of personal data collected and processed.

Purpose of Processing*

Specify the lawful purposes for which personal data is processed.

SECTION 3 — SENSITIVE PERSONAL DATA

Is Sensitive Personal Data Processed?*

Applicable (fill details below)

Not Applicable (proceed to Section 4)

Categories of Sensitive Personal Data Processed

Racial or ethnic origin

Political opinion or adherence

Religious or philosophical beliefs

Marital status and family details

Physical or mental health or condition

Sexual orientation, practices or preferences

Biometric data

Select all applicable sensitive data categories as specified in Section 44 of the Act.

Specific Purpose(s) for Processing Sensitive Personal Data

SECTION 4 — TRANSFER OF DATA OUTSIDE KENYA

Is Personal Data Transferred Outside Kenya?*

Applicable (fill details below)

Not Applicable (proceed to Section 5)

List the Destination Country(ies)

List all countries to which personal data is transferred or hosted outside Kenya.

Safeguards & Legal Transfer Mechanisms Implemented

SECTION 5 — MEASURES FOR PROTECTION OF PERSONAL DATA

Identified Risks to Personal Data*

Identify specific risks associated with personal data processing in your organization.

Safeguards, Security Measures & Mechanisms Implemented*

Outline technical, administrative and physical security measures deployed.

SECTION 6 — NUMBER OF EMPLOYEES

Number of Employees (Indicate by selecting)*

Organization with 1-9 employees

Organization with 10-49 employees

Organization with 50-99 employees

Organization with more than 99 employees

SECTION 7 — PREVIOUS YEAR ANNUAL TURNOVER

Previous Year Annual Turnover (Indicate by selecting)*

Organization has less than KES 2,000,000 annual turnover

Organization has KES 2,000,000 - 5,000,000 annual turnover

Organization has KES 5,000,000 - 10,000,000 annual turnover

Organization has KES 10,000,000 - 50,000,000 annual turnover

Organization with more than KES 50,000,000 annual turnover

DECLARATION & CERTIFICATION

I certify that the particulars provided are correct and complete and hereby apply to be registered as Data Controller or Data Processor.*

Full Name of Authorized Signatory*

Capacity / Designation*

Date of Certification*

Digital Signature Confirmation*

By typing your full legal name, you execute this statutory filing.

Data Protection Registration (Form DPR 1)