Your personal data
How to see, correct or delete what companies hold about you, stop marketing, and complain.
Checked against the law on 16 October 2026
Your rights
To be told how your personal data will be used.
Data Protection Act 2019 — s.26(a)(opens Kenya Law)To access the personal data a company or government office holds about you.
Data Protection Act 2019 — s.26(b)(opens Kenya Law)To object to the processing of all or part of your data.
Data Protection Act 2019 — s.26(c)(opens Kenya Law)To have false or misleading data corrected or deleted.
Data Protection Act 2019 — s.26(d), (e)(opens Kenya Law)A company that suffers a data breach must notify the Data Commissioner within 72 hours of becoming aware of it.
Data Protection Act 2019 — s.43(1)(opens Kenya Law)
What to do
Write to the company’s data protection officer, say which right you are using, and keep a copy with the date.
For unwanted promotional messages, use the opt-out the sender offers (such as replying STOP) and keep a screenshot; if they continue, complain to the Data Commissioner.
Time limits that apply
- Notify the Data Commissioner of a personal-data breach — 3 days
Where to get help
- Office of the Data Protection Commissioner (ODPC) File a free complaint if a company ignores your request or misuses your data.
Every situation is different. Ask Verisha with your facts — answers cite the law.
Ask VerishaInformation, not legal advice. Check the official source, or an advocate, before you act.