By Abdullahi Jamaa
In Wajir, where public awareness of data security and privacy remains among the lowest in Kenya, a new effort is underway that could transform how personal information is handled across government offices and civil society institutions.
This week, Amnesty International hosted a comprehensive training for civil society representatives in Wajir to deepen their understanding of Kenya’s Data Protection Act. The initiative seeks to bridge the awareness gap, particularly in remote and marginalised areas.
Despite the enactment of the Data Protection Act on 25 November 2019, many Kenyans, especially those in under-served regions like Wajir, remain unaware of its provisions and implications.
“The training on data protection was an eye opener for us,” said Ms. Habiba Shariff, a representative from Worthy Vision, one of the twenty civil society organisations that participated in the two-day workshop.
“Many people in Wajir are not aware about the data protection act, because majority are illiterate,” Ms. Habiba added.
While long overdue, the workshop arrived at a critical time for Wajir people, the majority of whom have limited knowledge not only about the act but also about how to protect their personal data. For people like Ms. Habiba, the training provided vital insights.
“We are taking this message to our people. It is very important that our people understand the necessity of protecting their personal data,” she noted.
In addition to focusing on personal data security, participants explored the implications of collecting and using personal information, particularly within humanitarian contexts where access to such data is often necessary.
“Sometimes we need personal data for humanitarian purposes. Understanding this act is very important for us so that we are aware of the pitfalls of collecting personal data and also learn on why it is necessary to protect personal data,” Ms. Habiba explained.
Low awareness
The rise of digital technologies and widespread use of social media has made private information more vulnerable than ever, exposing users to breaches that the act is designed to prevent.
Ms. Amina Abdullahi Adan from Wajir Women for Peace, one of the county’s oldest civil society organisations, emphasised the significance of the training.
“We have learnt a lot from the training. It has really inspired us on data governance. We have also learnt about the importance of privacy and confidentiality in personal and sensitive data” Ms. Amina said.
Concerned about her community’s limited awareness of data privacy, Ms. Amina and other representatives are determined to reshape the local narrative around the collection, use, and protection of personal data.
“We should not be trusting everyone with personal and sensitive data. We should be careful even with donors “Ms. Amina added
Even as government institutions race to implement frameworks for data protection, breaches remain rampant, particularly in remote areas like Wajir. This underlines the need for public education initiatives like those spearheaded by Amnesty International.
Concluding on Thursday, 19 June 2025, the training represented a pivotal step towards enhancing accountability, protecting citizen information, and reinforcing public trust in Kenya’s digital future.
“It is about strengthening data governance and digital rights,” said Ms. Sharlene Muthuri, Technology and Human Rights Campaigner at Amnesty International. “It is aimed at deepening the understanding of the act.”
The training, grounded in Article 31 of the Constitution and the mandate of the Office of the Data Protection Commissioner, covered essential topics such as secure data collection, responsible data management and sharing, protection of digital rights, and compliance with the Data Protection Act (DPA).
“We have seen that there is low level of public awareness when it comes to the Data Protection Act. Many people are not aware about it, especially in areas outside of Nairobi,” observed Ms. Muthuri.
The initiative is part of a broader effort to improve compliance with data protection standards and foster trust in digital services. Already conducted in ten other counties, Amnesty International hopes the knowledge shared during the training will help bridge the awareness gap.
“We need more awareness in grassroot communities because data protection begins at individual level. Also the government has a role to play in creating public awareness about the act and protection of personal data” M. Muthuri said
