Share this
Professional services consulting firm, PwC, is now advising Faith-Based Organizations (FBOs) to ensure that they adhere to the data protection regulations in the wake of a push for stricter adherence by the Office of the Data Protection Commissioner (ODPC).
Personal Data Processed by FBOs
In a recently released legal alert, PwC highlights that faith-based organizations in the country, which include religious organizations, process (collect, use, store, and dispose of) colossal amounts of personal data in order to fulfil their core functions.
These include names, identification card numbers, emails, phone numbers, bank account information, health data, and family details, among others.
Rethinking Data-Handling Practices
With the introduction of data protection and privacy laws in East Africa, FBOs need to rethink and reset their data-handling practices and overall strategies.
By carefully managing personal data, FBOs will not only be exercising good practices but also protecting themselves from a wide spectrum of consequences, including financial and criminal sanctions, reputational damage for non-compliance, and operational restrictions.
Recommendations for FBOs
PwC recommends that FBOs accelerate efficiencies through standardization and automation and reconfigure operating models since data protection and privacy have now become a foundational element of trust. Some steps FBOs can take include:
- Registering with the ODPC: FBOs should register as data controllers or processors with the Office of the Data Protection Commissioner.
- Ensuring Compliance: FBOs must ensure compliance with the Data Protection Act No. 24 of 2019 (the “DPA”) and relevant regulations.
- Implementing Policies and Procedures: FBOs should implement robust data protection policies and procedures to safeguard personal data.
- Training Staff: Regularly training staff on data protection and privacy best practices is essential for maintaining compliance.
- Conducting Audits: FBOs should conduct regular audits to ensure ongoing compliance with data protection regulations.
For more information on data protection and privacy for faith-based organizations in Kenya, please contact PwC’s Legal Business Solutions team.
