A practical case: There is an ongoing case by DCI about an alleged online child pornography/sex tourism. The case was brought to DCI&#39;s attention by the public. DCI in response posts the picture, ID number, phone number, full names, workplace and residence of the suspect on their Facebook page. (Its in form of a mugshot)<div>The reason for the post seems to be feedback to the public that the suspect they reported has been arrested.<br><div>My question is, what aspects of such cases should be covered under data protection? </div><div>See the post here <a href="https://mobile.facebook.com/Directorate-of-Criminal-Investigations-DCI-254903014712426/?refid=17&amp;_ft_=top_level_post_id.846695888866466%3Atl_objid.846695888866466%3Athrowback_story_fbid.846695888866466%3Apage_id.254903014712426%3Aphoto_attachments_list.%5B846747645527957%2C846747662194622%2C846747765527945%2C846747805527941%5D%3Apage_insights.%7B%22254903014712426%22%3A%7B%22role%22%3A1%2C%22page_id%22%3A254903014712426%2C%22post_context%22%3A%7B%22story_fbid%22%3A846695888866466%2C%22publish_time%22%3A1535004813%2C%22story_name%22%3A%22EntStatusCreationStory%22%2C%22object_fbtype%22%3A266%7D%2C%22actor_id%22%3A254903014712426%2C%22psn%22%3A%22EntStatusCreationStory%22%2C%22sl%22%3A4%2C%22dm%22%3A%7B%22isShare%22%3A0%2C%22originalPostOwnerID%22%3A0%7D%2C%22targets%22%3A%5B%7B%22page_id%22%3A254903014712426%2C%22actor_id%22%3A254903014712426%2C%22role%22%3A1%2C%22post_id%22%3A846695888866466%2C%22share_id%22%3A0%7D%5D%7D%7D%3Athid.254903014712426%3A306061129499414%3A2%3A0%3A1535785199%3A4873755382522269764&amp;__tn__=C-R" target="_blank">https://mobile.facebook.<wbr>com/Directorate-of-Criminal-<wbr>Investigations-DCI-<wbr>254903014712426/?refid=17&amp;_ft_<wbr>=top_level_post_id.<wbr>846695888866466%3Atl_objid.<wbr>846695888866466%3Athrowback_<wbr>story_fbid.846695888866466%<wbr>3Apage_id.254903014712426%<wbr>3Aphoto_attachments_list.%<wbr>5B846747645527957%<wbr>2C846747662194622%<wbr>2C846747765527945%<wbr>2C846747805527941%5D%3Apage_<wbr>insights.%7B%<wbr>22254903014712426%22%3A%7B%<wbr>22role%22%3A1%2C%22page_id%22%<wbr>3A254903014712426%2C%22post_<wbr>context%22%3A%7B%22story_fbid%<wbr>22%3A846695888866466%2C%<wbr>22publish_time%22%<wbr>3A1535004813%2C%22story_name%<wbr>22%3A%<wbr>22EntStatusCreationStory%22%<wbr>2C%22object_fbtype%22%3A266%<wbr>7D%2C%22actor_id%22%<wbr>3A254903014712426%2C%22psn%22%<wbr>3A%22EntStatusCreationStory%<wbr>22%2C%22sl%22%3A4%2C%22dm%22%<wbr>3A%7B%22isShare%22%3A0%2C%<wbr>22originalPostOwnerID%22%3A0%<wbr>7D%2C%22targets%22%3A%5B%7B%<wbr>22page_id%22%<wbr>3A254903014712426%2C%22actor_<wbr>id%22%3A254903014712426%2C%<wbr>22role%22%3A1%2C%22post_id%22%<wbr>3A846695888866466%2C%22share_<wbr>id%22%3A0%7D%5D%7D%7D%3Athid.<wbr>254903014712426%<wbr>3A306061129499414%3A2%3A0%<wbr>3A1535785199%<wbr>3A4873755382522269764&amp;__tn__=<wbr>C-R</a><br><div>And here </div><div><a href="https://twitter.com/DCI_Kenya/status/1032506686957907969">https://twitter.com/DCI_Kenya/status/1032506686957907969</a></div><div><br></div><div><br>Il giovedì 23 agosto 2018, william mathenge via kictanet &lt;<a href="mailto:kictanet@lists.kictanet.or.ke" target="_blank">kictanet@lists.kictanet.or.ke</a><wbr>&gt; ha scritto:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div dir="ltr"><div class="gmail_quote"><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex"><font face="tahoma, sans-serif">Hi listers, </font></blockquote><div><br></div><div>The rights as provided are quite progressive and commendable. However, one cannot help to but ask, what remedies are available for a data subject?</div><div>The Act criminalizes the various ways of misappropriating data which is an effective deterrent. All the same, it would be prudent in my humble opinion to include the right to compensation/ damages to the victims of such abuse of data. This would not only further deter the violation of a data subject&#39;s rights but would also provide a legislative basis for indemnifying the data subject for any damages sustained from such violations.</div><div><br></div><div>Kind Regards,</div><div>William.</div></div></div>
</blockquote>
</div></div></div>
<br><br>-- <br><div dir="ltr"><div><div dir="ltr"><div dir="ltr"><div dir="ltr"><div>Grace Mutung&#39;u <br>Skype: gracebomu<br>@Bomu<br><span style="font-size:12.8px">PGP ID : 0x33A3450F</span><br></div><div><br></div></div></div></div></div></div><br>