READING LIST
Module IX: Data Protection in Practice
Primary Legislation and Regulations
Data Protection Act, Cap 411C (Kenya)
Data Protection (General) Regulations, 2021
Data Protection (Complaints Handling and Enforcement) Regulations, 2021
Data Protection (Registration of Data Controllers and Processors) Regulations, 2021
Constitution of Kenya, 2010: Art. 31 (Right to Privacy).
Computer Misuse and Cybercrimes Act, Cap 79C
ODPC Guidance and Determinations
ODPC Sector-Specific Guidelines: [Link]/guidelines-2/.
ODPC Annual Report and published determinations (2023–2025).
DPGSK Analysis: 2025 ODPC Determinations — Key Statistics and Regulatory Shifts.
Other
European Union General Data Protection Regulations and Recitals
Kuner C, Bygrave LA and Docksey C (eds), The EU General Data Protection Regulation
(GDPR): A Commentary (2nd edn, OUP 2020).
de Stadler E, Luttig Hattingh I, Esselaar P and Boast J, Over-thinking the Protection of
Personal Information Act: The Last POPIA Book You Will Ever Need (Juta 2021).
GDPR Recitals -Recitals of the GDPR (General Data Protection Regulation)
Burns Y and Burger-Smidt A A Commentary on the Protection of Personal Information
Act (2018) Durban: LexisNexis.
Gregory, Peter H. CIPM Certified Information Privacy Manager All-in-One Exam Guide.
1st ed., McGraw-Hill, 2021.
DAMA International. The DAMA Guide to the Data Management Body of Knowledge
(DAMA-DMBOK2R). 2nd ed., revised. Sedona, AZ: Technics Publications, LLC, 2024.
Lambert, Paul. The Data Protection Officer: Profession, Rules, and Role. Boca Raton, FL:
Auerbach Publications, 2017.