The Politics of Data Privacy and Elections in KE
A pattern is very evident since late last year on database breaches for political ends. ------ "It appears that all ID numbers from perceived Jubilee strongholds have been run through the IEBC voters register to find out their registration status. The chiefs have been issued with sheets of papers containing mobile numbers of all residents within their locations and sub locations who are not registered. … “We got this data from the registrar of persons and the brief to the chiefs was to ascertain whether these people are registered. I don’t see anything wrong with that. We are not coercing anybody to register,” Sosio said. He added: “I don’t know whether the same is taking place in other counties but as you know, homes are run differently and this is how we have chosen to do it in Nyeri.” ------- Read more: https://www.standardmedia.co.ke/mobile/article/2001228175/revealed-inside-ju... --- Moses Karanja www.moseskaranja.com/blog <http://www.moseskaranja.com/blog>
Moses Definitely a worrying trend were it to be found true. In the absence of a Data Protection bill in the country anyone can run roughshod over personal and other data. Begs the question why isn't this particular law being prioritized? Ali Hussein Principal Hussein & Associates +254 0713 601113 Twitter: @AliHKassim Skype: abu-jomo LinkedIn: http://ke.linkedin.com/in/alihkassim "We are what we repeatedly do. Excellence, therefore, is not an act but a habit." ~ Aristotle Sent from my iPad
On 4 Feb 2017, at 7:05 PM, Mose Karanja via kictanet <[email protected]> wrote:
A pattern is very evident since late last year on database breaches for political ends. ------ "It appears that all ID numbers from perceived Jubilee strongholds have been run through the IEBC voters register to find out their registration status. The chiefs have been issued with sheets of papers containing mobile numbers of all residents within their locations and sub locations who are not registered. …
“We got this data from the registrar of persons and the brief to the chiefs was to ascertain whether these people are registered. I don’t see anything wrong with that. We are not coercing anybody to register,” Sosio said. He added: “I don’t know whether the same is taking place in other counties but as you know, homes are run differently and this is how we have chosen to do it in Nyeri.” ------- Read more:
https://www.standardmedia.co.ke/mobile/article/2001228175/revealed-inside-ju...
--- Moses Karanja www.moseskaranja.com/blog
_______________________________________________ kictanet mailing list [email protected] https://lists.kictanet.or.ke/mailman/listinfo/kictanet Twitter: http://twitter.com/kictanet Facebook: https://www.facebook.com/KICTANet/
Unsubscribe or change your options at https://lists.kictanet.or.ke/mailman/options/kictanet/info%40alyhussein.com
The Kenya ICT Action Network (KICTANet) is a multi-stakeholder platform for people and institutions interested and involved in ICT policy and regulation. The network aims to act as a catalyst for reform in the ICT sector in support of the national aim of ICT enabled growth and development.
KICTANetiquette : Adhere to the same standards of acceptable behaviors online that you follow in real life: respect people's times and bandwidth, share knowledge, don't flame or abuse or personalize, respect privacy, do not spam, do not market your wares or qualifications.
Not rocket science here ....Election API( provided by IEBC) + Registrar of persons data( by Govt) capable of that ID data registry generation ...... a 3rd element of matching ID #s to Cellphone #s is possibly due data breach from a Telco data responsible for the phone #s ( most likely 3rd party Telco partners) Big Data analysis can only responsible for metadata that can be inferred from social media and there is no mention of that.... However its encouraging to learn that now data is is being used to drive intelligent targeting of potentials voters...only if the data Privacy protocol is observed and also in observance of our constitutional right of choice.... Blessed Sunday all. Regards Tim Timothy Oriedo about.me/Timoriedo On 4 Feb 2017 7:06 pm, "Mose Karanja via kictanet" < [email protected]> wrote:
A pattern is very evident since late last year on database breaches for political ends. ------ "It appears that all ID numbers from perceived Jubilee strongholds have been run through the IEBC voters register to find out their registration status. The chiefs have been issued with sheets of papers containing mobile numbers of all residents within their locations and sub locations who are not registered. …
“We got this data from the registrar of persons and the brief to the chiefs was to ascertain whether these people are registered. I don’t see anything wrong with that. We are not coercing anybody to register,” Sosio said. He added: “I don’t know whether the same is taking place in other counties but as you know, homes are run differently and this is how we have chosen to do it in Nyeri.” ------- Read more:
https://www.standardmedia.co.ke/mobile/article/2001228175/ revealed-inside-jubilee-s-vote-machine-to-beat-raila-odinga
--- Moses Karanja www.moseskaranja.com/blog
_______________________________________________ kictanet mailing list [email protected] https://lists.kictanet.or.ke/mailman/listinfo/kictanet Twitter: http://twitter.com/kictanet Facebook: https://www.facebook.com/KICTANet/
Unsubscribe or change your options at https://lists.kictanet.or.ke/ mailman/options/kictanet/timoriedo%40gmail.com
The Kenya ICT Action Network (KICTANet) is a multi-stakeholder platform for people and institutions interested and involved in ICT policy and regulation. The network aims to act as a catalyst for reform in the ICT sector in support of the national aim of ICT enabled growth and development.
KICTANetiquette : Adhere to the same standards of acceptable behaviors online that you follow in real life: respect people's times and bandwidth, share knowledge, don't flame or abuse or personalize, respect privacy, do not spam, do not market your wares or qualifications.
This is really worrying especially when citizens have no knowledge of how their data was obtained and how it is used/ stored and how long it is retained. We really need the Data Protection law ASAP. -- Best Regards, *Ephraim Percy Kenyanito* Legal Researcher/ Policy Analyst Website: https://ephraimkenyanito.com/ Twitter: @ekenyanito <https://twitter.com/ekenyanito> PGP Fingerprint: B0FA394AF73DEB7AA1FDC7360CFED26DE6BA8DC1 [image: --] Ephraim Percy Kenyanito [image: https://]about.me/ekenyanito <https://about.me/ekenyanito?promo=email_sig&utm_source=email_sig&utm_medium=email_sig&utm_campaign=external_links> On 5 February 2017 at 12:36, Timothy- Coach- Oriedo via kictanet < [email protected]> wrote:
Not rocket science here ....Election API( provided by IEBC) + Registrar of persons data( by Govt) capable of that ID data registry generation ...... a 3rd element of matching ID #s to Cellphone #s is possibly due data breach from a Telco data responsible for the phone #s ( most likely 3rd party Telco partners) Big Data analysis can only responsible for metadata that can be inferred from social media and there is no mention of that....
However its encouraging to learn that now data is is being used to drive intelligent targeting of potentials voters...only if the data Privacy protocol is observed and also in observance of our constitutional right of choice....
Blessed Sunday all.
Regards
Tim
Timothy Oriedo
about.me/Timoriedo
On 4 Feb 2017 7:06 pm, "Mose Karanja via kictanet" < [email protected]> wrote:
A pattern is very evident since late last year on database breaches for political ends. ------ "It appears that all ID numbers from perceived Jubilee strongholds have been run through the IEBC voters register to find out their registration status. The chiefs have been issued with sheets of papers containing mobile numbers of all residents within their locations and sub locations who are not registered. …
“We got this data from the registrar of persons and the brief to the chiefs was to ascertain whether these people are registered. I don’t see anything wrong with that. We are not coercing anybody to register,” Sosio said. He added: “I don’t know whether the same is taking place in other counties but as you know, homes are run differently and this is how we have chosen to do it in Nyeri.” ------- Read more:
https://www.standardmedia.co.ke/mobile/article/2001228175/re vealed-inside-jubilee-s-vote-machine-to-beat-raila-odinga
--- Moses Karanja www.moseskaranja.com/blog
_______________________________________________ kictanet mailing list [email protected] https://lists.kictanet.or.ke/mailman/listinfo/kictanet Twitter: http://twitter.com/kictanet Facebook: https://www.facebook.com/KICTANet/
Unsubscribe or change your options at https://lists.kictanet.or.ke/m ailman/options/kictanet/timoriedo%40gmail.com
The Kenya ICT Action Network (KICTANet) is a multi-stakeholder platform for people and institutions interested and involved in ICT policy and regulation. The network aims to act as a catalyst for reform in the ICT sector in support of the national aim of ICT enabled growth and development.
KICTANetiquette : Adhere to the same standards of acceptable behaviors online that you follow in real life: respect people's times and bandwidth, share knowledge, don't flame or abuse or personalize, respect privacy, do not spam, do not market your wares or qualifications.
_______________________________________________ kictanet mailing list [email protected] https://lists.kictanet.or.ke/mailman/listinfo/kictanet Twitter: http://twitter.com/kictanet Facebook: https://www.facebook.com/KICTANet/
Unsubscribe or change your options at https://lists.kictanet.or.ke/ mailman/options/kictanet/ekenyanito%40gmail.com
The Kenya ICT Action Network (KICTANet) is a multi-stakeholder platform for people and institutions interested and involved in ICT policy and regulation. The network aims to act as a catalyst for reform in the ICT sector in support of the national aim of ICT enabled growth and development.
KICTANetiquette : Adhere to the same standards of acceptable behaviors online that you follow in real life: respect people's times and bandwidth, share knowledge, don't flame or abuse or personalize, respect privacy, do not spam, do not market your wares or qualifications.
The *current Data Protection Bill 2013 section 17 (b)* waters down the provisions regarding misuse of information in section 16 by allowing use of personal data for commercial purposes without obtaining consent as long as it is allowed by *any other law*. This clause provides a loophole that can be exploited to evade the principles provided for in section 4. Furthermore, *t**here is no provision prohibiting supply and sale of i.e electoral registers, registration of persons records* for political and commercial purposes having regard to the nature of the data contained in the registers, including in particular that it is personal data compulsorily obtained for the specific purpose of enabling Kenyans transact and qualifying electors to vote. The current Data Protection Bill 2013 offers no solid protection to the data subject and doesn’t reflect the current best practices globally. With the current Bill, data subjects remain at the mercy of the data processors and controllers (agencies) as the legal burden/responsibility the act imposes on the authorized users is not sufficient . There is an urgent need to revise the current draft to address some of these issues that we are currently experiencing. Further reference: https://wbilaw.wordpress.com/2016/07/30/data-protection-bill-kenya-analysis/ Regards, Esther Kamande Advocate | Policy Analyst Twitter: @enkamande Regards, Esther Kamande Advocate | Policy Analyst Twitter: @enkamande On Sat, Feb 4, 2017 at 7:05 PM, Mose Karanja via kictanet < [email protected]> wrote:
A pattern is very evident since late last year on database breaches for political ends. ------ "It appears that all ID numbers from perceived Jubilee strongholds have been run through the IEBC voters register to find out their registration status. The chiefs have been issued with sheets of papers containing mobile numbers of all residents within their locations and sub locations who are not registered. …
“We got this data from the registrar of persons and the brief to the chiefs was to ascertain whether these people are registered. I don’t see anything wrong with that. We are not coercing anybody to register,” Sosio said. He added: “I don’t know whether the same is taking place in other counties but as you know, homes are run differently and this is how we have chosen to do it in Nyeri.” ------- Read more:
https://www.standardmedia.co.ke/mobile/article/2001228175/ revealed-inside-jubilee-s-vote-machine-to-beat-raila-odinga
--- Moses Karanja www.moseskaranja.com/blog
_______________________________________________ kictanet mailing list [email protected] https://lists.kictanet.or.ke/mailman/listinfo/kictanet Twitter: http://twitter.com/kictanet Facebook: https://www.facebook.com/KICTANet/
Unsubscribe or change your options at https://lists.kictanet.or.ke/ mailman/options/kictanet/enkamande%40gmail.com
The Kenya ICT Action Network (KICTANet) is a multi-stakeholder platform for people and institutions interested and involved in ICT policy and regulation. The network aims to act as a catalyst for reform in the ICT sector in support of the national aim of ICT enabled growth and development.
KICTANetiquette : Adhere to the same standards of acceptable behaviors online that you follow in real life: respect people's times and bandwidth, share knowledge, don't flame or abuse or personalize, respect privacy, do not spam, do not market your wares or qualifications.
Ms.Esther, We need to specify, amend or enact at least 3 laws in Kenya... (i) Data protection - includes privacy clauses but also covers "data residency" - general situations when/where data must be resident in Kenya or East Africa. This is to encourage data center development in our region. Also to ensure we are not held hostage by evil, local and foreign actors. A Kenyan firm may be allowed to host data in Mauritius, but a go.ke body only back-ups. For emergency services, it may be specified, data servers, MUST be hosted locally + backed up across borders, within East Africa. (ii) Privacy law - specific to privacy, but includes data (e.g. password) protection clauses. No need to travel to Canada to copy their Laws :) http://www.servercloudcanada.com/2015/09/canadian-privacy-laws-canadian-clou... (iii) "Access to information" law may be amended if it does not interpret "Access" as either "Electronic" or "Physical". For example, Go.Ke data/servers (electronic access) should be accessible by persons within Kenya where there is no IP or GSM network connection. Please follow up and keep us posted. SMM *"Better a patient person than a warrior, one with self-control than one who takes a city." Prov 16:32* On Tue, Feb 7, 2017 at 9:35 PM, esther kamande via kictanet < [email protected]> wrote:
The *current Data Protection Bill 2013 section 17 (b)* waters down the provisions regarding misuse of information in section 16 by allowing use of personal data for commercial purposes without obtaining consent as long as it is allowed by *any other law*. This clause provides a loophole that can be exploited to evade the principles provided for in section 4. Furthermore, *t**here is no provision prohibiting supply and sale of i.e electoral registers, registration of persons records* for political and commercial purposes having regard to the nature of the data contained in the registers, including in particular that it is personal data compulsorily obtained for the specific purpose of enabling Kenyans transact and qualifying electors to vote.
The current Data Protection Bill 2013 offers no solid protection to the data subject and doesn’t reflect the current best practices globally. With the current Bill, data subjects remain at the mercy of the data processors and controllers (agencies) as the legal burden/responsibility the act imposes on the authorized users is not sufficient .
There is an urgent need to revise the current draft to address some of these issues that we are currently experiencing.
Further reference: https://wbilaw.wordpress.com/ 2016/07/30/data-protection-bill-kenya-analysis/
Regards,
Esther Kamande
Advocate | Policy Analyst
Twitter: @enkamande
Regards,
Esther Kamande
Advocate | Policy Analyst
Twitter: @enkamande
On Sat, Feb 4, 2017 at 7:05 PM, Mose Karanja via kictanet < [email protected]> wrote:
A pattern is very evident since late last year on database breaches for political ends. ------ "It appears that all ID numbers from perceived Jubilee strongholds have been run through the IEBC voters register to find out their registration status. The chiefs have been issued with sheets of papers containing mobile numbers of all residents within their locations and sub locations who are not registered. …
“We got this data from the registrar of persons and the brief to the chiefs was to ascertain whether these people are registered. I don’t see anything wrong with that. We are not coercing anybody to register,” Sosio said. He added: “I don’t know whether the same is taking place in other counties but as you know, homes are run differently and this is how we have chosen to do it in Nyeri.” ------- Read more:
https://www.standardmedia.co.ke/mobile/article/2001228175/re vealed-inside-jubilee-s-vote-machine-to-beat-raila-odinga
--- Moses Karanja www.moseskaranja.com/blog
_______________________________________________ kictanet mailing list [email protected] https://lists.kictanet.or.ke/mailman/listinfo/kictanet Twitter: http://twitter.com/kictanet Facebook: https://www.facebook.com/KICTANet/
Unsubscribe or change your options at https://lists.kictanet.or.ke/m ailman/options/kictanet/enkamande%40gmail.com
The Kenya ICT Action Network (KICTANet) is a multi-stakeholder platform for people and institutions interested and involved in ICT policy and regulation. The network aims to act as a catalyst for reform in the ICT sector in support of the national aim of ICT enabled growth and development.
KICTANetiquette : Adhere to the same standards of acceptable behaviors online that you follow in real life: respect people's times and bandwidth, share knowledge, don't flame or abuse or personalize, respect privacy, do not spam, do not market your wares or qualifications.
_______________________________________________ kictanet mailing list [email protected] https://lists.kictanet.or.ke/mailman/listinfo/kictanet Twitter: http://twitter.com/kictanet Facebook: https://www.facebook.com/KICTANet/
Unsubscribe or change your options at https://lists.kictanet.or.ke/ mailman/options/kictanet/murigi.muraya%40gmail.com
The Kenya ICT Action Network (KICTANet) is a multi-stakeholder platform for people and institutions interested and involved in ICT policy and regulation. The network aims to act as a catalyst for reform in the ICT sector in support of the national aim of ICT enabled growth and development.
KICTANetiquette : Adhere to the same standards of acceptable behaviors online that you follow in real life: respect people's times and bandwidth, share knowledge, don't flame or abuse or personalize, respect privacy, do not spam, do not market your wares or qualifications.
The mere fact that a bill is 5 years old should tell us a lot about how much of a priority it it. Data is big business in this age and my speculations won't be far off if I allege that there are bodies that benefit from lack of data protection laws. The bill by itself is a lazy copy paste of the UK data protection act, only that the Kenyan one is rather too lenient. Bodies that collect data should come out and state their limits on the use of personal information. On Feb 8, 2017 9:38 AM, "S.M. Muraya via kictanet" < [email protected]> wrote:
Ms.Esther,
We need to specify, amend or enact at least 3 laws in Kenya...
(i) Data protection - includes privacy clauses but also covers "data residency" - general situations when/where data must be resident in Kenya or East Africa. This is to encourage data center development in our region. Also to ensure we are not held hostage by evil, local and foreign actors. A Kenyan firm may be allowed to host data in Mauritius, but a go.ke body only back-ups.
For emergency services, it may be specified, data servers, MUST be hosted locally + backed up across borders, within East Africa.
(ii) Privacy law - specific to privacy, but includes data (e.g. password) protection clauses.
No need to travel to Canada to copy their Laws :)
http://www.servercloudcanada.com/2015/09/canadian-privacy- laws-canadian-cloud-primer-canadian-businesses/
(iii) "Access to information" law may be amended if it does not interpret "Access" as either "Electronic" or "Physical". For example, Go.Ke data/servers (electronic access) should be accessible by persons within Kenya where there is no IP or GSM network connection.
Please follow up and keep us posted.
SMM
*"Better a patient person than a warrior, one with self-control than one who takes a city." Prov 16:32*
On Tue, Feb 7, 2017 at 9:35 PM, esther kamande via kictanet < [email protected]> wrote:
The *current Data Protection Bill 2013 section 17 (b)* waters down the provisions regarding misuse of information in section 16 by allowing use of personal data for commercial purposes without obtaining consent as long as it is allowed by *any other law*. This clause provides a loophole that can be exploited to evade the principles provided for in section 4. Furthermore, *t**here is no provision prohibiting supply and sale of i.e electoral registers, registration of persons records* for political and commercial purposes having regard to the nature of the data contained in the registers, including in particular that it is personal data compulsorily obtained for the specific purpose of enabling Kenyans transact and qualifying electors to vote.
The current Data Protection Bill 2013 offers no solid protection to the data subject and doesn’t reflect the current best practices globally. With the current Bill, data subjects remain at the mercy of the data processors and controllers (agencies) as the legal burden/responsibility the act imposes on the authorized users is not sufficient .
There is an urgent need to revise the current draft to address some of these issues that we are currently experiencing.
Further reference: https://wbilaw.wordpress.com/2 016/07/30/data-protection-bill-kenya-analysis/
Regards,
Esther Kamande
Advocate | Policy Analyst
Twitter: @enkamande
Regards,
Esther Kamande
Advocate | Policy Analyst
Twitter: @enkamande
On Sat, Feb 4, 2017 at 7:05 PM, Mose Karanja via kictanet < [email protected]> wrote:
A pattern is very evident since late last year on database breaches for political ends. ------ "It appears that all ID numbers from perceived Jubilee strongholds have been run through the IEBC voters register to find out their registration status. The chiefs have been issued with sheets of papers containing mobile numbers of all residents within their locations and sub locations who are not registered. …
“We got this data from the registrar of persons and the brief to the chiefs was to ascertain whether these people are registered. I don’t see anything wrong with that. We are not coercing anybody to register,” Sosio said. He added: “I don’t know whether the same is taking place in other counties but as you know, homes are run differently and this is how we have chosen to do it in Nyeri.” ------- Read more:
https://www.standardmedia.co.ke/mobile/article/2001228175/re vealed-inside-jubilee-s-vote-machine-to-beat-raila-odinga
--- Moses Karanja www.moseskaranja.com/blog
_______________________________________________ kictanet mailing list [email protected] https://lists.kictanet.or.ke/mailman/listinfo/kictanet Twitter: http://twitter.com/kictanet Facebook: https://www.facebook.com/KICTANet/
Unsubscribe or change your options at https://lists.kictanet.or.ke/m ailman/options/kictanet/enkamande%40gmail.com
The Kenya ICT Action Network (KICTANet) is a multi-stakeholder platform for people and institutions interested and involved in ICT policy and regulation. The network aims to act as a catalyst for reform in the ICT sector in support of the national aim of ICT enabled growth and development.
KICTANetiquette : Adhere to the same standards of acceptable behaviors online that you follow in real life: respect people's times and bandwidth, share knowledge, don't flame or abuse or personalize, respect privacy, do not spam, do not market your wares or qualifications.
_______________________________________________ kictanet mailing list [email protected] https://lists.kictanet.or.ke/mailman/listinfo/kictanet Twitter: http://twitter.com/kictanet Facebook: https://www.facebook.com/KICTANet/
Unsubscribe or change your options at https://lists.kictanet.or.ke/m ailman/options/kictanet/murigi.muraya%40gmail.com
The Kenya ICT Action Network (KICTANet) is a multi-stakeholder platform for people and institutions interested and involved in ICT policy and regulation. The network aims to act as a catalyst for reform in the ICT sector in support of the national aim of ICT enabled growth and development.
KICTANetiquette : Adhere to the same standards of acceptable behaviors online that you follow in real life: respect people's times and bandwidth, share knowledge, don't flame or abuse or personalize, respect privacy, do not spam, do not market your wares or qualifications.
_______________________________________________ kictanet mailing list [email protected] https://lists.kictanet.or.ke/mailman/listinfo/kictanet Twitter: http://twitter.com/kictanet Facebook: https://www.facebook.com/KICTANet/
Unsubscribe or change your options at https://lists.kictanet.or.ke/ mailman/options/kictanet/monyango93%40gmail.com
The Kenya ICT Action Network (KICTANet) is a multi-stakeholder platform for people and institutions interested and involved in ICT policy and regulation. The network aims to act as a catalyst for reform in the ICT sector in support of the national aim of ICT enabled growth and development.
KICTANetiquette : Adhere to the same standards of acceptable behaviors online that you follow in real life: respect people's times and bandwidth, share knowledge, don't flame or abuse or personalize, respect privacy, do not spam, do not market your wares or qualifications.
(i) Stronger privacy laws will further restrict "unwarranted" wiretaps. (ii) Via Inooro FM & Kameme FM, have heard Central Kenya youth complaining about extortion at ID card collection points. One said he has gone almost everyday this week and is unlikely to get "Access to Information" until he parts with 300 bob others are paying. This does not include transport/fare this whole week. In other locations, 400 bob is the fee to buy "access to information" required to collect ID cards. This is the President's backyard, so It is not a political problem but bad manners plaguing our society. This kind of vice is replicated in every locality and go.ke department. https://www.youtube.com/watch?v=IQhw_Bm4Lak&feature=youtu.be&t=1641 "Privacy" and "Data protection" should be clearly specified so as not to hinder "Access to Information". Computer/workstation terminals for public use should be located at Huduma centers and all Registries (persons, companies, land, etc). These can be used to provide extranet access to data/documents we are denied after paying statutory fees. SMM *"Better a patient person than a warrior, one with self-control than one who takes a city." Prov 16:32* On Thu, Feb 9, 2017 at 6:18 AM, Francis Monyango <[email protected]> wrote:
The mere fact that a bill is 5 years old should tell us a lot about how much of a priority it it. Data is big business in this age and my speculations won't be far off if I allege that there are bodies that benefit from lack of data protection laws. The bill by itself is a lazy copy paste of the UK data protection act, only that the Kenyan one is rather too lenient. Bodies that collect data should come out and state their limits on the use of personal information.
On Feb 8, 2017 9:38 AM, "S.M. Muraya via kictanet" < [email protected]> wrote:
Ms.Esther,
We need to specify, amend or enact at least 3 laws in Kenya...
(i) Data protection - includes privacy clauses but also covers "data residency" - general situations when/where data must be resident in Kenya or East Africa. This is to encourage data center development in our region. Also to ensure we are not held hostage by evil, local and foreign actors. A Kenyan firm may be allowed to host data in Mauritius, but a go.ke body only back-ups.
For emergency services, it may be specified, data servers, MUST be hosted locally + backed up across borders, within East Africa.
(ii) Privacy law - specific to privacy, but includes data (e.g. password) protection clauses.
No need to travel to Canada to copy their Laws :)
http://www.servercloudcanada.com/2015/09/canadian-privacy-la ws-canadian-cloud-primer-canadian-businesses/
(iii) "Access to information" law may be amended if it does not interpret "Access" as either "Electronic" or "Physical". For example, Go.Ke data/servers (electronic access) should be accessible by persons within Kenya where there is no IP or GSM network connection.
Please follow up and keep us posted.
SMM
*"Better a patient person than a warrior, one with self-control than one who takes a city." Prov 16:32*
On Tue, Feb 7, 2017 at 9:35 PM, esther kamande via kictanet < [email protected]> wrote:
The *current Data Protection Bill 2013 section 17 (b)* waters down the provisions regarding misuse of information in section 16 by allowing use of personal data for commercial purposes without obtaining consent as long as it is allowed by *any other law*. This clause provides a loophole that can be exploited to evade the principles provided for in section 4. Furthermore, *t**here is no provision prohibiting supply and sale of i.e electoral registers, registration of persons records* for political and commercial purposes having regard to the nature of the data contained in the registers, including in particular that it is personal data compulsorily obtained for the specific purpose of enabling Kenyans transact and qualifying electors to vote.
The current Data Protection Bill 2013 offers no solid protection to the data subject and doesn’t reflect the current best practices globally. With the current Bill, data subjects remain at the mercy of the data processors and controllers (agencies) as the legal burden/responsibility the act imposes on the authorized users is not sufficient .
There is an urgent need to revise the current draft to address some of these issues that we are currently experiencing.
Further reference: https://wbilaw.wordpress.com/2 016/07/30/data-protection-bill-kenya-analysis/
Regards,
Esther Kamande
Advocate | Policy Analyst
Twitter: @enkamande
Regards,
Esther Kamande
Advocate | Policy Analyst
Twitter: @enkamande
On Sat, Feb 4, 2017 at 7:05 PM, Mose Karanja via kictanet < [email protected]> wrote:
A pattern is very evident since late last year on database breaches for political ends. ------ "It appears that all ID numbers from perceived Jubilee strongholds have been run through the IEBC voters register to find out their registration status. The chiefs have been issued with sheets of papers containing mobile numbers of all residents within their locations and sub locations who are not registered. …
“We got this data from the registrar of persons and the brief to the chiefs was to ascertain whether these people are registered. I don’t see anything wrong with that. We are not coercing anybody to register,” Sosio said. He added: “I don’t know whether the same is taking place in other counties but as you know, homes are run differently and this is how we have chosen to do it in Nyeri.” ------- Read more:
https://www.standardmedia.co.ke/mobile/article/2001228175/re vealed-inside-jubilee-s-vote-machine-to-beat-raila-odinga
--- Moses Karanja www.moseskaranja.com/blog
_______________________________________________ kictanet mailing list [email protected] https://lists.kictanet.or.ke/mailman/listinfo/kictanet Twitter: http://twitter.com/kictanet Facebook: https://www.facebook.com/KICTANet/
Unsubscribe or change your options at https://lists.kictanet.or.ke/m ailman/options/kictanet/enkamande%40gmail.com
The Kenya ICT Action Network (KICTANet) is a multi-stakeholder platform for people and institutions interested and involved in ICT policy and regulation. The network aims to act as a catalyst for reform in the ICT sector in support of the national aim of ICT enabled growth and development.
KICTANetiquette : Adhere to the same standards of acceptable behaviors online that you follow in real life: respect people's times and bandwidth, share knowledge, don't flame or abuse or personalize, respect privacy, do not spam, do not market your wares or qualifications.
_______________________________________________ kictanet mailing list [email protected] https://lists.kictanet.or.ke/mailman/listinfo/kictanet Twitter: http://twitter.com/kictanet Facebook: https://www.facebook.com/KICTANet/
Unsubscribe or change your options at https://lists.kictanet.or.ke/m ailman/options/kictanet/murigi.muraya%40gmail.com
The Kenya ICT Action Network (KICTANet) is a multi-stakeholder platform for people and institutions interested and involved in ICT policy and regulation. The network aims to act as a catalyst for reform in the ICT sector in support of the national aim of ICT enabled growth and development.
KICTANetiquette : Adhere to the same standards of acceptable behaviors online that you follow in real life: respect people's times and bandwidth, share knowledge, don't flame or abuse or personalize, respect privacy, do not spam, do not market your wares or qualifications.
_______________________________________________ kictanet mailing list [email protected] https://lists.kictanet.or.ke/mailman/listinfo/kictanet Twitter: http://twitter.com/kictanet Facebook: https://www.facebook.com/KICTANet/
Unsubscribe or change your options at https://lists.kictanet.or.ke/m ailman/options/kictanet/monyango93%40gmail.com
The Kenya ICT Action Network (KICTANet) is a multi-stakeholder platform for people and institutions interested and involved in ICT policy and regulation. The network aims to act as a catalyst for reform in the ICT sector in support of the national aim of ICT enabled growth and development.
KICTANetiquette : Adhere to the same standards of acceptable behaviors online that you follow in real life: respect people's times and bandwidth, share knowledge, don't flame or abuse or personalize, respect privacy, do not spam, do not market your wares or qualifications.
participants (7)
-
Ali Hussein -
Ephraim Percy Kenyanito -
esther kamande -
Francis Monyango -
Mose Karanja -
S.M. Muraya -
Timothy- Coach- Oriedo