

The Office of the Data Protection Commissioner (ODPC) has bagged four prestigious awards at the 47th Global Privacy Assembly (GPA) in Seoul, South Korea, cementing Kenya’s growing reputation as a leader in digital governance and data protection.
The ODPC was feted for excellence in leadership, solidarity and commitment to digital education and public awareness.
It was also honoured for its exemplary role in dispute resolution and enforcement, and pioneering innovative solutions through its innovative chatbot that enhances citizen engagement.
Data Commissioner Immaculate Kassait attributed the international recognition to the hard work of her team and the strong support of partners
This includes the Ministry of Information, Communications and the Digital Economy, the National Assembly Committee on Communication, Information and Innovation, and development partners such as GIZ.
“This recognition is a testament to our dedication to safeguarding citizens’ data rights. We are grateful to our partners whose collaboration has enabled us to achieve this milestone,” Kassait said.
ICT Principal Secretary John Tanui congratulated Kassait and her team, noting that their achievements were making Kenya a trusted investment destination and accelerating the growth of the digital economy.
Meanwhile, in a major boost to Kenya’s global standing, it was also announced that Nairobi will host the 49th Global Privacy Assembly in 2027, a historic first for the continent.
The decision positions Kenya at the heart of international dialogue on data rights, innovation in governance, and the protection of privacy as a fundamental human right.
At the ongoing summit, Kassait joined a high-level panel on Mastering Investigation Strategies and Choosing the Right Enforcement Tools, where she underscored the importance of proactive investigations, rapid risk sensing, and transparency in building public trust.
She also urged regulators to prepare for transnational investigations, embrace capacity-building, and cultivate tech-savvy enforcement teams to keep pace with evolving digital risks.
She also participated in a separate panel on Enhancing Interoperability in Cross-Border Data Flows.
In that session, she emphasised the facilitative role data protection authorities must play in ensuring seamless data sharing across jurisdictions, particularly in the age of Artificial Intelligence.
Kassait called for robust capacity building among regulators to create guardrails that mitigate the risks of AI and other emerging technologies.
She further encouraged humanitarian organisations to collaborate with regulators in promoting responsible data processing, including the development of guidance notes that highlight data protection concerns while balancing legitimate policy objectives with regulatory sovereignty.
She urged the adoption of self-regulation mechanisms such as codes of conduct, memoranda of understanding, and ISO certification standards.
To strengthen data protection in the humanitarian sphere, Kassait advocated for a whole-of-society approach anchored in inclusivity, sustainability, accountability, and human rights.
“The effective and active involvement of all stakeholders, including government, private sector, and civil society representatives, is essential to develop measures that promote a higher level of certainty and confidence among themselves, thus increasing the overall efficiency of legal frameworks,” she said.
With global recognition in hand and the world’s privacy community heading to Nairobi in two years, Kenya is firmly stamping its authority as a continental and international leader in data protection.















