Gap assessment
What personal data you hold, where it goes and what the Act expects.
Overview
Compliance that reaches your systems, not just your policies
Data Protection Act compliance in Kenya is not only paperwork. Regulators and clients want to see that personal data is actually protected in the systems you use every day. Eujim Solutions helps you assess where you stand, close the gaps and keep evidence of what you have done.
We are registered with the Office of the Data Protection Commissioner ourselves, and we work alongside your legal adviser where legal interpretation is needed.
Our Data Protection Compliance Services
What we can do for you
Policies and notices
Privacy notices, retention schedules and internal procedures.
DPIAs
Impact assessments for high-risk processing such as health or financial data.
System controls
Role-based access, encryption, audit trails and backups in your systems.
Staff training
Short, practical sessions so staff handle personal data correctly.
Breach readiness
A tested plan for detecting, containing and reporting a breach.
What the Act requires
The Data Protection Act 2019 sets rules for collecting and using personal data: a lawful reason for processing, collecting only what you need, keeping it secure and accurate, respecting people's rights to access and correct their data, and reporting serious breaches to the ODPC promptly. Many organisations must also register with the ODPC as data controllers or processors.
Our compliance assessment
We interview the teams that handle personal data, review your systems and contracts, and map how data flows in and out. You receive a report that ranks the gaps by risk and sets out a practical plan to close them.
System controls we build in
As software developers we can make the technical changes ourselves: limiting who sees what, encrypting sensitive fields, logging access, setting retention rules and building data-subject request handling into your systems. Pair this with penetration testing to prove the controls work.
How We Work
How we work with you
A clear, collaborative process that keeps you involved from the first idea to a system your team relies on every day.
-
01
Discover
We study your goals, users and data, then agree the scope, timeline and budget with you.
-
02
Design
Wireframes and clickable prototypes you can review and refine before any code is written.
-
03
Build & secure
Short development cycles with regular demos, followed by security testing before go-live.
-
04
Launch & support
Deployment, staff training, documentation and ongoing maintenance after launch.
FAQs
Data Protection Compliance questions
Answers to what clients most often ask us about data protection compliance.
Do we need to register with the ODPC?
Many organisations do, depending on their sector, size and the data they process. We help you check the current registration rules and prepare the application.
Is this legal advice?
No. We cover the operational and technical side of compliance and work with your legal adviser on questions of legal interpretation.
Explore more
Related services
Cybersecurity & Penetration Testing
Vulnerability assessments, penetration testing, security audits and data protection compliance to keep your systems and data safe.
Penetration Testing
Controlled attacks on your websites, systems, networks and apps, with a clear report of what we found and a retest once you have fixed it.
Systems that fit with this
- SACCO Management System in KenyaSavings, loans, guarantors and check-off reconciliation for Kenyan SACCOs.
- Hospital Management System in KenyaClinical, administrative and billing work for hospitals, clinics, labs and pharmacies in one system.
- School Management System in KenyaAdmissions, exams, fees and parent communication for schools and colleges.
Talk to us about Data Protection Compliance
Talk to our team about your website, mobile app, management system or bulk SMS needs. The first consultation is free.