Day 2- Policy and Regulatory Framework on Privacy and Data Protection

My concern is that the policy talks about ‘the right to be forgotten’ but
the bill doesn’t have a section on it. One can only delete misleading
information which is rather too limiting. The legal standards we are trying
to catch up with included the right to be forgotten in 2014 yet our draft
law doesn’t have it in 2018. The right should be there…maybe with
limitations. I don’t think limiting it to ‘false or misleading data’ is in
good faith.

On Thu, 23 Aug 2018 at 09:55, kanini mutemi via kictanet <> wrote:

> *Day 2- Rights of Data Subjects *
> Good morning Listers,
> Day 1 we commented on the principles of data protection mentioned in the
> draft policy and bill. Today, we will look at the rights of data subjects.
> For demonstration purpose, when you fill in your details at a mobile money
> agent’s shop–
> * You- data subject *
> * The mobile money agent- data processor *
> The data subject is the person to whom the data concerns.
> Here are the rights as listed in Clause 23 of the Bill. I have added
> comments underneath to help us visualise what these rights would mean in
> the future.
> *1. The right to be informed of the use to which the personal data is to
> be put*
> Eg. When we leave our details at the entrance to buildings, I expect that
> they will explain what the data will be used for.
> *2. Right to access their personal data in custody of data controller*
> Will we be able to demand from our mobile network operators to see our
> account details and transactional history?
> *3. Object to the collection or processing of all or part of their
> personal data*
> Will we be able to opt out of the biometric ID registration proposed by
> the Ministry of ICT here
> <>
> ?
> *4. Correction and deletion of false or misleading data *
> Are we ready for a right to be forgotten? Should it be absolute?
> What do we think of these Listers? Are there other rights that ought to be
> included?
> 1.
> _______________________________________________
> kictanet mailing list
> Twitter:
> Facebook:
> Domain Registration sponsored by
> Unsubscribe or change your options at
> The Kenya ICT Action Network (KICTANet) is a multi-stakeholder platform
> for people and institutions interested and involved in ICT policy and
> regulation. The network aims to act as a catalyst for reform in the ICT
> sector in support of the national aim of ICT enabled growth and development.
> KICTANetiquette : Adhere to the same standards of acceptable behaviors
> online that you follow in real life: respect people’s times and bandwidth,
> share knowledge, don’t flame or abuse or personalize, respect privacy, do
> not spam, do not market your wares or qualifications.

KICTANet Admin information

Related Posts

Submit a Comment

Your email address will not be published. Required fields are marked *

This site uses Akismet to reduce spam. Learn how your comment data is processed.