- KICTANet - KICTANet

Online moderated discussion on the Policy and Regulatory framework on Privacy and Data Protection
by Grace Githaiga 20 Aug '18

20 Aug '18

Good afternoon Listers As a follow up to an earlier email where I shared the _Policy and Regulatory Framework on Privacy and Data Protection _ (https://www.kictanet.or.ke/?wpdmpro=policy-and-regulatory-framework-on-priv…) I wish to invite all listers to participate in the online moderated debate which will take place over a period of seven days. The Data and Privac framework was developed by a task force constituted by the Minister of ICT in May. Our Grace Bomu and Mercy Mutemi will lead us in the discussion starting which will commence on Wednesday August 22, 2018. Please see the proposed schedule. We look forward to your active participation. Asanteni sana. Date Topic 20 Aug Intro to list * Structure of the discussion * Reference to DP brief Wed 22 Aug Principles of data protection Thur 23 Aug Rights of data subjects Friday 24 Aug Rights of data subjects: II Monday 27 Aug Obligations of processors and controllers Tues 28 Aug Offences and remedies Wed 29 Aug Institutional framework Thur 30 Aug Comments for Way Forward Fri 31 Aug Key findings Best regards Githaiga, Grace Co-Convenor Kenya ICT Action Network (KICTANet) Twitter:@ggithaiga Tel: 254722701495 Skype: gracegithaiga Alternate email: ggithaiga(a)hotmail.com Linkedin: https://www.linkedin.com/in/gracegithaiga www.kictanet.or.ke "Change only happens when ordinary people get involved, get engaged and come together to demand it. I am asking you to believe. Not in my ability to bring about change – but in yours"---Barrack Obama.

1 1

How China is working to overtake the internet and butt heads with the U.S. - Axios
by WANGARI KABIRU 18 Aug '18

18 Aug '18

2 1

Introduction to Network Operations course- Free online course
by Mercy Njue 18 Aug '18

18 Aug '18

Greetings, Botlab has partnered with ISOC to offer a free online course- Introduction to Network Operations course ( September Cohort Registration). The courses are free and anyone can apply. Those who complete this course will be allowed to take on the Network service and monitoring course. If you are interested, check the links below: *Introduction to Network Operations course * Course outline and prerequisites click here <https://isoc-inforum.afrinic.net/wiki/tiki-index.php?page=Introduction%20to…> Sign up sheet, click here <https://docs.google.com/forms/d/e/1FAIpQLSeq-stz_l6BC6SFYJzFByHa9Jz_DdEusP9…> *Network Services and Monitoring course* Course outline and prerequisites click here <https://isoc-inforum.afrinic.net/wiki/tiki-index.php?page=Network%20Service…> -- Mercy Njue Founder Botlab Botlab Physical Address: Ngong hills Hotel along Ngong road, 5th Floor Office line: +254 700 915197 Mobile: +254 729758 701 Email: Mercy(a)botlab.biz *Endless possibilities :* www.botlab.biz *"* What we are is God's gift to us. What we become is our gift to God. - Eleanor Powell

2 1

Telcos CEOs on the spot in push to declare Safaricom dominant
by Ali Hussein 18 Aug '18

18 Aug '18

Listers This talk of Dominance is getting tiring.. Telco CEOs on the spot for pushing Safaricom Dominance narrative <https://www.businessdailyafrica.com/economy/Telcos-CEOs-on-the-spot-in-push…> Regards *Ali Hussein* *Principal* *AHK & Associates* Tel: +254 713 601113 Twitter: @AliHKassim Skype: abu-jomo LinkedIn: http://ke.linkedin.com/in/alihkassim <http://ke.linkedin.com/in/alihkassim> 13th Floor , Delta Towers, Oracle Wing, Chiromo Road, Westlands, Nairobi, Kenya. Any information of a personal nature expressed in this email are purely mine and do not necessarily reflect the official positions of the organizations that I work with.

14 30

Kenya Wins Top Africa ICT seat
by Alwala, Rachel 18 Aug '18

18 Aug '18

Dear listers, Kenya’s Mr. John Omo has today been elected the new Secretary General of the African Telecommunications Union (ATU). Out of the 26 votes, Mr.Omo garnered 23 beating his sole challenge, Burundi’s Mr. Constaque Hakizimana who managed two (2) votes at elections held today during the 5th Ordinary Session of the ATU Plenipotentiary Conference in Nairobi. One vote was spoilt. Attached is the press release on the same as well as the Nairobi Declaration by the African menus states at the end of the ATU Plenipotentiary Conference today. Attached too are images of Mr.Omo giving his acceptance speech and receiving the instruments of office from the outgoing Secretary general Mr.Abdoulkarim Soumaila We thank you for your continued support. I Regards, Rachel

8 7

Re: [kictanet] Kenya Wins Top Africa ICT seat
by ceo 18 Aug '18

18 Aug '18

Congrats Mr. Omo! May God give you wisdom in your new position. Regards, Abdalla On Aug 17, 2018 10:18 PM, "Alwala, Rachel via kictanet" <kictanet(a)lists.kictanet.or.ke> wrote: > > Dear listers, > > Kenya’s Mr. John Omo has today been elected the new Secretary General of the African Telecommunications Union (ATU). > > Out of the 26 votes, Mr.Omo garnered 23 beating his sole challenge, Burundi’s Mr. Constaque Hakizimana who managed two (2) votes at elections held today during the 5th Ordinary Session of the ATU Plenipotentiary Conference in Nairobi. One vote was spoilt. Attached is the press release on the same as well as the Nairobi Declaration by the African menus states at the end of the ATU Plenipotentiary Conference today. > > Attached too are images of Mr.Omo giving his acceptance speech and receiving the instruments of office from the outgoing Secretary general Mr.Abdoulkarim Soumaila > > We thank you for your continued support. I > >

1 0

Why local funding is critical for ICT projects
by S.M. Muraya 17 Aug '18

17 Aug '18

Last week Walu penned some very pertinent thoughts (will create a second thread for that article). The current one is somehow related https://www.nation.co.ke/oped/blogs/dot9/walubengo/Why-local-funding-critic… Quote: "What is this that foreign investors see in our ICT potential that local investors don’t? Additionally, what are the ‘strings’ attached, which more often than not go hand in hand with foreign money... our typical local investor is only interested in the traditional assets.." Reality: We (veterans in ignoring/undermining each other) did not model decency for upcoming talent and now they worship foreigners who due to cultural differences (misunderstanding) cannot move our nation forward. https://businesstech.co.za/news/cloud-hosting/251373/amazon-and-microsoft-t… Case in point, why do excellent multi nationals (e.g. Microsoft, Amazon) favor South Africa for data centers? In South Africa there is an efficient, creative (primarily white) minority population which does not undermine (deceive) itself as much as we do. To conclude, last year, a well spoken, well presented employer/investor (former high school mate of mine 25+ years ago) was shocked by Kenyans in their early twenties. He conducted a research for one of his clients and 24 out of 26 lied in their submissions. That is all.

4 4

Why the Digital ID project is important
by S.M. Muraya 17 Aug '18

17 Aug '18

Dear Listers, To avoid being tried (in future) for treason (selling/entrusting Kenyan bio-metric data to foreigners) our public officials need to ensure the Digital ID project is localized (managed/operated) by Kenyans (excluding dual citizens). Walu has described why the Digital ID project is important https://www.nation.co.ke/oped/blogs/dot9/walubengo/Digital-ID-project-raise… "Globally, this problem is known as an Identity Management problem and in Kenya, it has reached an acute stage and requires an urgent but carefully thought through approach to resolve.."

2 2

A survey on value added services for airtime credit and other mobile based micro credit
by Geoffrey Gitau 14 Aug '18

14 Aug '18

Dear Kictanet friends I am Dr Gitau Kamau and with my partner institution Infoholic we are conducting a interational survey to determine infographics on financial technologies (fintech) through mobile service providers value added services such as micro credit via mpesa among others. Kindly help me by completing attached questionnaire. Rgds Dr Gitau Kamau On Tue, 14 Aug 2018, 13:04 Mercy Njue via kictanet, < kictanet(a)lists.kictanet.or.ke> wrote: > Greetings, > > Botlab has partnered with ISOC to offer a free online course- Introduction > to Network Operations course ( September Cohort Registration). The courses > are free and anyone can apply. Those who complete this course will be > allowed to take on the Network service and monitoring course. > > If you are interested, check the links below: > > *Introduction to Network Operations course * > Course outline and prerequisites click here > <https://isoc-inforum.afrinic.net/wiki/tiki-index.php?page=Introduction%20to…> > Sign up sheet, click here > <https://docs.google.com/forms/d/e/1FAIpQLSeq-stz_l6BC6SFYJzFByHa9Jz_DdEusP9…> > > *Network Services and Monitoring course* > Course outline and prerequisites click here > <https://isoc-inforum.afrinic.net/wiki/tiki-index.php?page=Network%20Service…> > -- > Mercy Njue > Founder Botlab > > Botlab Physical Address: Ngong hills Hotel along Ngong road, 5th Floor > Office line: +254 700 915197 > Mobile: +254 729758 701 > Email: Mercy(a)botlab.biz > *Endless possibilities :* www.botlab.biz > > > > *"* What we are is God's gift to us. What we become is our gift to God. - > Eleanor Powell > _______________________________________________ > kictanet mailing list > kictanet(a)lists.kictanet.or.ke > https://lists.kictanet.or.ke/mailman/listinfo/kictanet > Twitter: http://twitter.com/kictanet > Facebook: https://www.facebook.com/KICTANet/ > Domain Registration sponsored by www.eacdirectory.co.ke > > Unsubscribe or change your options at > https://lists.kictanet.or.ke/mailman/options/kictanet/gitaugk%40gmail.com > > The Kenya ICT Action Network (KICTANet) is a multi-stakeholder platform > for people and institutions interested and involved in ICT policy and > regulation. The network aims to act as a catalyst for reform in the ICT > sector in support of the national aim of ICT enabled growth and development. > > KICTANetiquette : Adhere to the same standards of acceptable behaviors > online that you follow in real life: respect people's times and bandwidth, > share knowledge, don't flame or abuse or personalize, respect privacy, do > not spam, do not market your wares or qualifications. >

1 0

Re: [kictanet] Policy and Regulatory Framework on Privacy and Data Protection (Draft)
by Jimmy Gitonga 14 Aug '18

14 Aug '18

This is an excellent summary of the draft bill on Data Protection. Thank you Michael. While working on platforms that hold public information and register users through 3rd party authorisation applications, I suppose those types are exempted. But let me read the draft for myself :-D. With the best regards, Jimmy Gitonga > On 14 Aug 2018, at 12:00 PM, kictanet-request(a)lists.kictanet.or.ke wrote: > > Hi Listers, > > > > Have just finished the first read-through of this document, here are > my initial thoughts/questions/concerns (in no particular order) > > > > Registration fee > I am concerned that the registration-fee might be prohibitive for many > startup ICT businesses - especially since this is not just a cost that > is meant to cover the actual cost of processing the application, but > is intended to cover the entire cost of the office of the data > protection regulator (as mentioned in section 12.2). > > This may lead to a situation where many/most startups either stay > non-compliant with the law (in which case - then whats the point?), or > they may be unable to launch new innovation due to compliance-costs. > > > Reporting frequency > As mentioned in section 11.4 the data protection officer needs to make > regular compliance reports to "the office" but I could not find any > mention of what "regular" means - is it once a year, once a month or > ... It could be a rather significant administrative burden (especially > for a SME) so that there are no quantification of "regular" worries me > quite a bit. > > > Compliance levels > The way I see it a very high percentage of ICT startups would be > subject to this law, but I fear that very few will have the capacity > to actually become (and remain) compliant on this matter. > If compliance levels remain low then few consumers/end-users/customers > will be requesting compliant vendors or even aware of their rights > according to this law a negative circle will be created where no-one > expect compliance and hence no-one will offer it. > > > No Breach notification incentive > 8.2.6 and section 38.1 states that data controllers are obligated to > notify on breaches - this is good and probably the most important > element in my mind - accidents will happen but they key thing is that > affected people gets notified (and of-course that measures are taken > to prevent it happening again). > However section 70.1+2 tells us that a data-controller who "looses" > data will be committing an offense and subject to a fine of (max) > 10million kes. > > This sounds to me like there are absolutely NO incentive to report a > breach - in fact it kinda encourages data controllers to keep VERY > quiet about breaches and hope that no-one notices. > Would it not be smart to make so that if the breach was reported to > "the office" prior to "the office" receiving any complaints then any > subsequent fine/penalty would be discounted i.e. 50% - but it would be > 100% if no reporting had happened... > > I just fear that the main point of the exercise - to ensure that > people actually are aware if their data is "lost" and give them the > ability to react before someone exploits their data. > > > Training / capacity > I wonder what kind of training program would be available for all the > newly designated data protection officers. > How are we going to ensure that they get up to speed with this (new) > legislation fast (?) > > > Scope > Initially I thought that effectively every company in Kenya would have > to register (and pay registration fee) - as everyone would have > private data on their employees in some kind of "system" / HR-file. > Although my gut kinda told me that it is not the intention. > > However section 56(a) sounds like it would exclude data obtained in > relation to employment - Anyone else who have reached the same > conclusion on this ? > > > Our own house > Looking internally I am actually in doubt if our company would need to > register or not. > Our company builds and runs HR/Payroll management systems - and the > system does hold private data, because... that is kinda what the > system does ;-) > The reason that I am in doubt is when I read section 49(1)(c) where it > explicitly exempts data related to assessment of taxes - and this is > exactly what our system(s) does, so depending on how I read that we > could be exempt (?) - but somehow I get the feeling that 49(1)(c) is > intended specifically for government-bodies (read KRA) not private > entities.. So am a little confused. > > > Security by design > Section 5.3.4 dictates that systems should incorporate "security by > design", which is an absolutely great way to approach developing such > systems. > However from what I have seen being developed while interacting with > various SME's and startups "security by design" is not a principle > that very many apply, or even have on their "radar". > To make things worse unless you do a very close evaluation of the > actual systems and HOW they are developed it can be really hard to > determine if they utilize "security by design"... > All in all this sounds kinda like wishful thinking - If it's meant as > a way of creating awareness of "security by design" then great - but > can't really see it as a condition. > > > Kind regards > Michael Pedersen

1 0