The Office of the Data Protection Commissioner (ODPC) has cautioned businesses and organisations that they risk penalties if they fail to renew expired registration certificates within 14 days.

🇰🇪 Breaking It Down

In a notice issued on Friday, August 28, the ODPC said the warning targets entities whose certificates have lapsed and who are required by law to maintain valid registration before handling personal data.

“All affected entities are required to regularise their registration status within fourteen (14) days from the date of this Notice by applying for renewal. Failure to comply within the stipulated period may result in the ODPC initiating appropriate enforcement action in accordance with the law,” the notice stated.

Data controllers and processors must submit renewal applications on the ODPC’s official portal by close of business on September 11.

📌 What You Need to Know

The renewal fee for micro and small entities is Ksh2,000, while medium-sized businesses will pay Ksh9,000.

Large entities will be charged Ksh25,000, while public institutions, charities and religious organisations will pay Ksh2,000.

The notice comes as the data protection regulator continues to enforce requirements governing organisations that collect, store or process personal information, with the ODPC imposing fines of up to Ksh5 million for failing to register .

According to the authority’s standing guidelines, registration certificates remain valid for 24 months and renewal applications should be submitted at least 30 days before expiry of the certificate.

The ODPC reminded businesses and organisations that any entity whose activities require registration cannot operate in that capacity without valid registration.

Its regulations further provide that processing personal data after a certificate expires without renewal constitutes a legal offence.

📰 Source: Kenyans.co.ke