Tax and Legal Alerts

We provide a wealth of publications by PwC Kenya providing informed commentary on current developments in the tax and legal arena.

Through analysis and comment on new law and judicial decisions of interest, they assist business executives to identify developments and trends in tax law and revenue practice that might impact their business.

Subscribe to our Tax and Legal Alert mailing list here

In this alert:

Legal Alert - Data Protection Officer guidance: Key governance and compliance considerations 

The ODPC recently issued the Guidance Note for Data Protection Officers (DPOs), 2026, (the “Guidance Note”) providing practical direction on the appointment, roles and responsibilities of DPO in Kenya.

The Guidance Note clarifies when organisations should appoint a DPO and recognises internal, external and shared DPO arrangements. It further outlines the ODPC’s expectations concerning DPO independence, reporting lines, conflicts of interest, professional competence, remuneration, resourcing, and publication of DPO contact details.

Although the Guidance Note does not create obligations beyond the Data Protection Act, 2019 and applicable regulations, it is likely to inform the standards applied by the ODPC during audits, investigations and enforcement action. Data controllers and data processors should therefore review their existing DPO arrangements and implement any necessary governance, contractual and operational measures to align with the Guidance Note.