Professional Training · ESSCO TRAINING ACADEMY

Data Protection and Privacy Management

A practical professional programme in Kenyan data protection law, privacy governance, information security and responsible data use.

PAY PER MODULE

KSh 1,000

Access one module at a time, after payment approval.

FULL COURSE

KSh 10,000

One payment for the complete programme.

Course curriculum

MODULE 1

Introduction to Data Protection

Privacy, data protection and the right to privacy
Why personal information must be protected
The personal data lifecycle
Roles, accountability and the data protection ecosystem

MODULE 2

Kenyan Data Protection Legal Framework

Constitutional and statutory foundations
The Data Protection Act: principles and lawful bases
Data subject rights and how to respond
Controllers, processors, registration and enforcement

MODULE 3

Personal Data Management

Identifying personal, sensitive and special-category data
Collection, transparency and consent
Data classification, accuracy and minimisation
Retention, archiving and secure disposal

MODULE 4

Organizational Compliance

Building a data protection governance programme
Privacy notices and consent management
Data sharing, transfers and processor agreements
Registration, records and compliance monitoring

MODULE 5

Information Security

Cybersecurity and the confidentiality-integrity-availability model
Identity, passwords and access control
Encryption, secure storage and safe handling
Backups, resilience and disaster recovery

MODULE 6

Data Protection Impact Assessments

When a DPIA is required and why it matters
Describe processing and consult stakeholders
Identify and evaluate privacy risks
Select mitigations, document and review

MODULE 7

Data Breach Management

Recognising personal data breaches
Incident response: contain, assess and preserve evidence
Kenyan notification duties and communication
Recovery, documentation and lessons learned

MODULE 8

Artificial Intelligence and Data Privacy

AI systems, data flows and governance
Privacy risks across the AI lifecycle
Automated decisions, transparency and human oversight
Responsible AI procurement and deployment

MODULE 9

Practical Exercises and Institutional Application

Data mapping and processing inventory
Draft a privacy notice and data sharing terms
Conduct a mini-DPIA and risk assessment
Breach simulation and compliance action plan

Enrol in this course

Back to Academy home