Good day, 

Under the Data Protection Act, the letter and the Private Security Regulation Act could fall under section 30(1)(b)(ii). The section provides for data processing necessary 'for compliance with any legal obligation to which the controller is subject' . 

Operationalising section 48 of the Private Security Regulation Act is compliance with a legal obligation. However, in my view the issue is whether these private security companies have put in place privacy programmes, measures to comply with data protection principles and data subject rights. That is, what data policies do they have? What information is in their privacy notices? Have they trained these guards in information security, rights of data subjects etc? How do they store the data? 

Without proof of concrete information privacy compliance processes, operationalising section 48 will violate Article 31 on the right to privacy. 

Best, 

Laibuta 

Best

On Mon, 15 Jan 2024 at 21:53, Mutemi wa Kiama via KICTANet <kictanet@lists.kictanet.or.ke> wrote:
Dear listers,

Please receive my regards for the new year.

I am interested in you views regarding the attached letter from the government vis a vis privacy and Data protection.


Warm regards,

Mutemi wa Kiama

Co-Chair, Africans Rising Movement Coordinating Collective

Team Captain, This Is Africa: https://thisisafrica.me

Thoughts become things... choose the good ones!

-----------------------------------------------------------------------------------------------------------------------------

Public Intellectual, Social Justice & Social Accountability Entrepreneur, Strategic Planning & Organizational Development Facilitator, Strategic Communications, Movement Building Coach, Human Rights Defender, 

#DevolutionIsRevolution Champion.

Mzalendo Halisi Foundation (MHF)
https://mzalendohalisi.org

https://www.linkedin.com/in/edwin-mutemi-wa-kiama-1aa51615/

https://twitter.com/WanjikuRevolt
Ordinary, fearless Kenyans

https://twitter.com/MutemiWaKiama

http://www.scribd.com/wmkenya

"Never doubt that a small group of thoughtful, committed people can change the world. Indeed, it is the only thing that ever has." ~Margaret Mead
_______________________________________________
KICTANet mailing list -- kictanet@lists.kictanet.or.ke
To unsubscribe send an email to kictanet-leave@lists.kictanet.or.ke
Unsubscribe or change your options at: https://mm3-lists.kictanet.or.ke/mm/lists/kictanet.lists.kictanet.or.ke/

Mailing List Posts Online: https://posts.kictanet.or.ke/

Twitter: https://twitter.com/KICTANet/
Facebook: https://www.facebook.com/KICTANet/
Instagram: https://www.instagram.com/KICTANet/
LinkedIn: https://www.linkedin.com/company/kictanet/
YouTube: https://www.youtube.com/channel/UCbcLVjnPtTGBEeYLGUb2Yow/

KICTANet is a multi-stakeholder Think Tank for people and institutions interested and involved in ICT policy and regulation.
KICTANet is a catalyst for reform in the Information and Communication Technology sector. Its work is guided by four pillars
of Policy Advocacy, Capacity Building, Research, and Stakeholder Engagement.

KICTANetiquette : Adhere to the same standards of acceptable behaviors online that you follow in real life: respect people's
times and bandwidth, share knowledge, don't flame or abuse or personalize, respect privacy, do not spam, do not market your
wares or qualifications.

PRIVACY POLICY: See https://mm3-lists.kictanet.or.ke/mm/lists/kictanet.lists.kictanet.or.ke/

KICTANet - The Power of Communities, is Kenya's premier ICT policy engagement platform.