Day 1- Policy and Regulatory Framework on Privacy and Data Protection
Day 1- Principles of Data Protection Dear Listers, As GG had indicated on Monday, we will hold online moderated discussions on the policy and regulatory framework on privacy and data protection. I will kick us off with a discussion on the proposed principles of data protection (Part 5 of the draft policy and Part IV of the draft bill). There are seven proposed principles– (a) Fairness, lawfulness and transparency (b) Purpose limitation (c) Data minimisation (d) Storage limitation (e) Accuracy (f) Confidentiality and Integrity (g) Accountability To begin with, I welcome comments on -what is your first impression of the principles? -why do we need to set out principles? -are the principles clearly defined in the draft policy and bill? Tujadiliane! -- Mercy Mutemi.
I have attached the draft policy and bill for ease of reference.
On 22 Aug 2018, at 09:11, kanini mutemi <kaninimutemi@gmail.com> wrote:
Day 1- Principles of Data Protection
Dear Listers,
As GG had indicated on Monday, we will hold online moderated discussions on the policy and regulatory framework on privacy and data protection. I will kick us off with a discussion on the proposed principles of data protection (Part 5 of the draft policy and Part IV of the draft bill).
There are seven proposed principles– (a) Fairness, lawfulness and transparency (b) Purpose limitation (c) Data minimisation (d) Storage limitation (e) Accuracy (f) Confidentiality and Integrity (g) Accountability
To begin with, I welcome comments on
-what is your first impression of the principles?
-why do we need to set out principles?
-are the principles clearly defined in the draft policy and bill?
Tujadiliane! -- Mercy Mutemi.
Listers, please note that the bill is also hosted on the Jadili platform @ http://jadili.ictpolicy.org/docs/privacy-and-data-protection-policy-and-bill... for your easy access. Lets have your views so that what finally goes to parliament has stakeholder support with less risk of court-cases ;-) walu. On Wednesday, August 22, 2018, 10:47:31 AM GMT+3, kanini mutemi via kictanet <kictanet@lists.kictanet.or.ke> wrote: Day 1- Principles of Data Protection Dear Listers, As GG had indicated on Monday, we will hold online moderated discussions on the policy and regulatory framework on privacy and data protection. I will kick us off with a discussion on the proposed principles of data protection (Part 5 of the draft policy and Part IV of the draft bill). There are seven proposed principles– (a) Fairness, lawfulness and transparency (b) Purpose limitation (c) Data minimisation (d) Storage limitation (e) Accuracy (f) Confidentiality and Integrity (g) Accountability To begin with, I welcome comments on -what is your first impression of the principles? -why do we need to set out principles? -are the principles clearly defined in the draft policy and bill? Tujadiliane! -- Mercy Mutemi. _______________________________________________ kictanet mailing list kictanet@lists.kictanet.or.ke https://lists.kictanet.or.ke/mailman/listinfo/kictanet Twitter: http://twitter.com/kictanet Facebook: https://www.facebook.com/KICTANet/ Domain Registration sponsored by www.eacdirectory.co.ke Unsubscribe or change your options at https://lists.kictanet.or.ke/mailman/options/kictanet/jwalu%40yahoo.com The Kenya ICT Action Network (KICTANet) is a multi-stakeholder platform for people and institutions interested and involved in ICT policy and regulation. The network aims to act as a catalyst for reform in the ICT sector in support of the national aim of ICT enabled growth and development. KICTANetiquette : Adhere to the same standards of acceptable behaviors online that you follow in real life: respect people's times and bandwidth, share knowledge, don't flame or abuse or personalize, respect privacy, do not spam, do not market your wares or qualifications.
Listers, On the topic of transparency - I somehow feel that the office of the data protection commissioner should be required to publish (preferably on the web) at least statistics on the number of cases/complaints brought to them for various periods of time - this way it would be easier to determine if the problem of data-protection is growing. I might argue that it should even be public which company the individual complaints are against so that it is possible for the public to take note of which companies they reliably can trust with their data. On the topic of fairness I am deeply concerned that the legislation is written only with "large data holders" in mind and not SME's - In terms of requirements for compliance, fee-structures, administrative-overhead. The burden may be too large for startups and SME's and hereby limit innovation and growth of new companies. It might be more fair if the requirements increased as a result of the amount of data you hold - i.e. if you hold data for less than 10000 individuals you may only need to provide a compliance report to the office once a year. But if you hold data for more than 1million indidviduals then you need to report monthly/quaterly etc. Kind regards Michael Pedersen On 08/22/2018 01:02 PM, Walubengo J via kictanet wrote:
Listers,
please note that the bill is also hosted on the Jadili platform @ http://jadili.ictpolicy.org/docs/privacy-and-data-protection-policy-and-bill... for your easy access.
Lets have your views so that what finally goes to parliament has stakeholder support with less risk of court-cases ;-)
walu.
On Wednesday, August 22, 2018, 10:47:31 AM GMT+3, kanini mutemi via kictanet <kictanet@lists.kictanet.or.ke> wrote:
*Day 1- Principles of Data Protection * * * Dear Listers,
As GG had indicated on Monday, we will hold online moderated discussions on the policy and regulatory framework on privacy and data protection. I will kick us off with a discussion on the proposed principles of data protection (Part 5 of the draft policy and Part IV of the draft bill).
There are seven proposed principles– /(a) Fairness, lawfulness and transparency (b) Purpose limitation (c) Data minimisation (d) Storage limitation (e) Accuracy (f) Confidentiality and Integrity (g) Accountability / To begin with, I welcome comments on
*-what is your first impression of the principles?* * -why do we need to set out principles?* * -are the principles clearly defined in the draft policy and bill?* * * Tujadiliane! -- *Mercy Mutemi . * *
* _______________________________________________ kictanet mailing list kictanet@lists.kictanet.or.ke <mailto:kictanet@lists.kictanet.or.ke> https://lists.kictanet.or.ke/mailman/listinfo/kictanet Twitter: http://twitter.com/kictanet Facebook: https://www.facebook.com/KICTANet/ Domain Registration sponsored by www.eacdirectory.co.ke
Unsubscribe or change your options at https://lists.kictanet.or.ke/mailman/options/kictanet/jwalu%40yahoo.com
The Kenya ICT Action Network (KICTANet) is a multi-stakeholder platform for people and institutions interested and involved in ICT policy and regulation. The network aims to act as a catalyst for reform in the ICT sector in support of the national aim of ICT enabled growth and development.
KICTANetiquette : Adhere to the same standards of acceptable behaviors online that you follow in real life: respect people's times and bandwidth, share knowledge, don't flame or abuse or personalize, respect privacy, do not spam, do not market your wares or qualifications.
_______________________________________________ kictanet mailing list kictanet@lists.kictanet.or.ke https://lists.kictanet.or.ke/mailman/listinfo/kictanet Twitter: http://twitter.com/kictanet Facebook: https://www.facebook.com/KICTANet/ Domain Registration sponsored by www.eacdirectory.co.ke
Unsubscribe or change your options at https://lists.kictanet.or.ke/mailman/options/kictanet/michael%40pluspeople.d...
The Kenya ICT Action Network (KICTANet) is a multi-stakeholder platform for people and institutions interested and involved in ICT policy and regulation. The network aims to act as a catalyst for reform in the ICT sector in support of the national aim of ICT enabled growth and development.
KICTANetiquette : Adhere to the same standards of acceptable behaviors online that you follow in real life: respect people's times and bandwidth, share knowledge, don't flame or abuse or personalize, respect privacy, do not spam, do not market your wares or qualifications.
Thank you Gerishon and Matthew. @Gerishon, on consent: The draft policy indicates that fairness means that the data subjects (you and me) are informed of 1. the name of the data controller (the person who determines the purpose and means of data collection) and 2. the purpose for which data is being collected. Consent is also dealt with under Clause 27 of the draft bill. Here is a follow up question : *What amounts to ‘consent’? When can it be said that one has agreed to have their data collected and processed in a certain manner? * @Matthew thanks for flagging the inequity between small and large scale controllers. I wonder whether it would have been useful to acknowledge innovation as one of the principles. The documents do set a restrictive tone I note- leaning towards restricting the collection of data as opposed to encouraging it. Eg the principles of data minimization and storage limitation will not allow controllers to collect data that would be considered ‘extra’ or ‘luxurious’. Is there a way to balance the two- protection of privacy vis-a-vis promoting innovation through aggressive research? Listers, I would like to hear from more of you. On Wed, 22 Aug 2018 at 14:20, Michael Pedersen via kictanet < kictanet@lists.kictanet.or.ke> wrote:
Listers,
On the topic of transparency - I somehow feel that the office of the data protection commissioner should be required to publish (preferably on the web) at least statistics on the number of cases/complaints brought to them for various periods of time - this way it would be easier to determine if the problem of data-protection is growing.
I might argue that it should even be public which company the individual complaints are against so that it is possible for the public to take note of which companies they reliably can trust with their data.
On the topic of fairness I am deeply concerned that the legislation is written only with "large data holders" in mind and not SME's - In terms of requirements for compliance, fee-structures, administrative-overhead. The burden may be too large for startups and SME's and hereby limit innovation and growth of new companies. It might be more fair if the requirements increased as a result of the amount of data you hold - i.e. if you hold data for less than 10000 individuals you may only need to provide a compliance report to the office once a year. But if you hold data for more than 1million indidviduals then you need to report monthly/quaterly etc.
Kind regards Michael Pedersen
On 08/22/2018 01:02 PM, Walubengo J via kictanet wrote:
Listers,
please note that the bill is also hosted on the Jadili platform @ http://jadili.ictpolicy.org/docs/privacy-and-data-protection-policy-and-bill... for your easy access.
Lets have your views so that what finally goes to parliament has stakeholder support with less risk of court-cases ;-)
walu.
On Wednesday, August 22, 2018, 10:47:31 AM GMT+3, kanini mutemi via kictanet <kictanet@lists.kictanet.or.ke> <kictanet@lists.kictanet.or.ke> wrote:
*Day 1- Principles of Data Protection *
Dear Listers,
As GG had indicated on Monday, we will hold online moderated discussions on the policy and regulatory framework on privacy and data protection. I will kick us off with a discussion on the proposed principles of data protection (Part 5 of the draft policy and Part IV of the draft bill).
There are seven proposed principles–
*(a) Fairness, lawfulness and transparency (b) Purpose limitation (c) Data minimisation (d) Storage limitation (e) Accuracy (f) Confidentiality and Integrity (g) Accountability * To begin with, I welcome comments on
*-what is your first impression of the principles?*
* -why do we need to set out principles?*
* -are the principles clearly defined in the draft policy and bill?*
Tujadiliane! -- *Mercy Mutemi . *
_______________________________________________ kictanet mailing list kictanet@lists.kictanet.or.ke https://lists.kictanet.or.ke/mailman/listinfo/kictanet Twitter: http://twitter.com/kictanet Facebook: https://www.facebook.com/KICTANet/ Domain Registration sponsored by www.eacdirectory.co.ke
Unsubscribe or change your options at https://lists.kictanet.or.ke/mailman/options/kictanet/jwalu%40yahoo.com
The Kenya ICT Action Network (KICTANet) is a multi-stakeholder platform for people and institutions interested and involved in ICT policy and regulation. The network aims to act as a catalyst for reform in the ICT sector in support of the national aim of ICT enabled growth and development.
KICTANetiquette : Adhere to the same standards of acceptable behaviors online that you follow in real life: respect people's times and bandwidth, share knowledge, don't flame or abuse or personalize, respect privacy, do not spam, do not market your wares or qualifications.
_______________________________________________ kictanet mailing listkictanet@lists.kictanet.or.kehttps://lists.kictanet.or.ke/mailman/listinfo/kictanet Twitter: http://twitter.com/kictanet Facebook: https://www.facebook.com/KICTANet/ Domain Registration sponsored by www.eacdirectory.co.ke
Unsubscribe or change your options at https://lists.kictanet.or.ke/mailman/options/kictanet/michael%40pluspeople.d...
The Kenya ICT Action Network (KICTANet) is a multi-stakeholder platform for people and institutions interested and involved in ICT policy and regulation. The network aims to act as a catalyst for reform in the ICT sector in support of the national aim of ICT enabled growth and development.
KICTANetiquette : Adhere to the same standards of acceptable behaviors online that you follow in real life: respect people's times and bandwidth, share knowledge, don't flame or abuse or personalize, respect privacy, do not spam, do not market your wares or qualifications.
_______________________________________________ kictanet mailing list kictanet@lists.kictanet.or.ke https://lists.kictanet.or.ke/mailman/listinfo/kictanet Twitter: http://twitter.com/kictanet Facebook: https://www.facebook.com/KICTANet/ Domain Registration sponsored by www.eacdirectory.co.ke
Unsubscribe or change your options at https://lists.kictanet.or.ke/mailman/options/kictanet/kaninimutemi%40gmail.c...
The Kenya ICT Action Network (KICTANet) is a multi-stakeholder platform for people and institutions interested and involved in ICT policy and regulation. The network aims to act as a catalyst for reform in the ICT sector in support of the national aim of ICT enabled growth and development.
KICTANetiquette : Adhere to the same standards of acceptable behaviors online that you follow in real life: respect people's times and bandwidth, share knowledge, don't flame or abuse or personalize, respect privacy, do not spam, do not market your wares or qualifications.
-- *Mercy Mutemi, Advocate*.
@Michael, You make a very good case to expand the policy so that it its objective is not just to anchor the law but to give a more comprehensive plan for Kenya's data economy. For example, the policy should cover issues of smaller players, skills gap in data related work as well as creation of awareness among the public. If these and other such issues are covered in the policy, it will set the proposed data commissioner and other actors to start on a more holistic footing. Il giorno mer 22 ago 2018 alle ore 17:15 kanini mutemi via kictanet < kictanet@lists.kictanet.or.ke> ha scritto:
Thank you Gerishon and Matthew.
@Gerishon, on consent: The draft policy indicates that fairness means that the data subjects (you and me) are informed of 1. the name of the data controller (the person who determines the purpose and means of data collection) and 2. the purpose for which data is being collected.
Consent is also dealt with under Clause 27 of the draft bill. Here is a follow up question :
*What amounts to ‘consent’? When can it be said that one has agreed to have their data collected and processed in a certain manner? *
@Matthew thanks for flagging the inequity between small and large scale controllers. I wonder whether it would have been useful to acknowledge innovation as one of the principles. The documents do set a restrictive tone I note- leaning towards restricting the collection of data as opposed to encouraging it. Eg the principles of data minimization and storage limitation will not allow controllers to collect data that would be considered ‘extra’ or ‘luxurious’. Is there a way to balance the two- protection of privacy vis-a-vis promoting innovation through aggressive research?
Listers, I would like to hear from more of you.
On Wed, 22 Aug 2018 at 14:20, Michael Pedersen via kictanet < kictanet@lists.kictanet.or.ke> wrote:
Listers,
On the topic of transparency - I somehow feel that the office of the data protection commissioner should be required to publish (preferably on the web) at least statistics on the number of cases/complaints brought to them for various periods of time - this way it would be easier to determine if the problem of data-protection is growing.
I might argue that it should even be public which company the individual complaints are against so that it is possible for the public to take note of which companies they reliably can trust with their data.
On the topic of fairness I am deeply concerned that the legislation is written only with "large data holders" in mind and not SME's - In terms of requirements for compliance, fee-structures, administrative-overhead. The burden may be too large for startups and SME's and hereby limit innovation and growth of new companies. It might be more fair if the requirements increased as a result of the amount of data you hold - i.e. if you hold data for less than 10000 individuals you may only need to provide a compliance report to the office once a year. But if you hold data for more than 1million indidviduals then you need to report monthly/quaterly etc.
Kind regards Michael Pedersen
On 08/22/2018 01:02 PM, Walubengo J via kictanet wrote:
Listers,
please note that the bill is also hosted on the Jadili platform @ http://jadili.ictpolicy.org/docs/privacy-and-data-protection-policy-and-bill... for your easy access.
Lets have your views so that what finally goes to parliament has stakeholder support with less risk of court-cases ;-)
walu.
On Wednesday, August 22, 2018, 10:47:31 AM GMT+3, kanini mutemi via kictanet <kictanet@lists.kictanet.or.ke> <kictanet@lists.kictanet.or.ke> wrote:
*Day 1- Principles of Data Protection *
Dear Listers,
As GG had indicated on Monday, we will hold online moderated discussions on the policy and regulatory framework on privacy and data protection. I will kick us off with a discussion on the proposed principles of data protection (Part 5 of the draft policy and Part IV of the draft bill).
There are seven proposed principles–
*(a) Fairness, lawfulness and transparency (b) Purpose limitation (c) Data minimisation (d) Storage limitation (e) Accuracy (f) Confidentiality and Integrity (g) Accountability * To begin with, I welcome comments on
*-what is your first impression of the principles?*
* -why do we need to set out principles?*
* -are the principles clearly defined in the draft policy and bill?*
Tujadiliane! -- *Mercy Mutemi . *
_______________________________________________ kictanet mailing list kictanet@lists.kictanet.or.ke https://lists.kictanet.or.ke/mailman/listinfo/kictanet Twitter: http://twitter.com/kictanet Facebook: https://www.facebook.com/KICTANet/ Domain Registration sponsored by www.eacdirectory.co.ke
Unsubscribe or change your options at https://lists.kictanet.or.ke/mailman/options/kictanet/jwalu%40yahoo.com
The Kenya ICT Action Network (KICTANet) is a multi-stakeholder platform for people and institutions interested and involved in ICT policy and regulation. The network aims to act as a catalyst for reform in the ICT sector in support of the national aim of ICT enabled growth and development.
KICTANetiquette : Adhere to the same standards of acceptable behaviors online that you follow in real life: respect people's times and bandwidth, share knowledge, don't flame or abuse or personalize, respect privacy, do not spam, do not market your wares or qualifications.
_______________________________________________ kictanet mailing listkictanet@lists.kictanet.or.kehttps://lists.kictanet.or.ke/mailman/listinfo/kictanet Twitter: http://twitter.com/kictanet Facebook: https://www.facebook.com/KICTANet/ Domain Registration sponsored by www.eacdirectory.co.ke
Unsubscribe or change your options at https://lists.kictanet.or.ke/mailman/options/kictanet/michael%40pluspeople.d...
The Kenya ICT Action Network (KICTANet) is a multi-stakeholder platform for people and institutions interested and involved in ICT policy and regulation. The network aims to act as a catalyst for reform in the ICT sector in support of the national aim of ICT enabled growth and development.
KICTANetiquette : Adhere to the same standards of acceptable behaviors online that you follow in real life: respect people's times and bandwidth, share knowledge, don't flame or abuse or personalize, respect privacy, do not spam, do not market your wares or qualifications.
_______________________________________________ kictanet mailing list kictanet@lists.kictanet.or.ke https://lists.kictanet.or.ke/mailman/listinfo/kictanet Twitter: http://twitter.com/kictanet Facebook: https://www.facebook.com/KICTANet/ Domain Registration sponsored by www.eacdirectory.co.ke
Unsubscribe or change your options at https://lists.kictanet.or.ke/mailman/options/kictanet/kaninimutemi%40gmail.c...
The Kenya ICT Action Network (KICTANet) is a multi-stakeholder platform for people and institutions interested and involved in ICT policy and regulation. The network aims to act as a catalyst for reform in the ICT sector in support of the national aim of ICT enabled growth and development.
KICTANetiquette : Adhere to the same standards of acceptable behaviors online that you follow in real life: respect people's times and bandwidth, share knowledge, don't flame or abuse or personalize, respect privacy, do not spam, do not market your wares or qualifications.
-- *Mercy Mutemi, Advocate*.
_______________________________________________ kictanet mailing list kictanet@lists.kictanet.or.ke https://lists.kictanet.or.ke/mailman/listinfo/kictanet Twitter: http://twitter.com/kictanet Facebook: https://www.facebook.com/KICTANet/ Domain Registration sponsored by www.eacdirectory.co.ke
Unsubscribe or change your options at https://lists.kictanet.or.ke/mailman/options/kictanet/nmutungu%40gmail.com
The Kenya ICT Action Network (KICTANet) is a multi-stakeholder platform for people and institutions interested and involved in ICT policy and regulation. The network aims to act as a catalyst for reform in the ICT sector in support of the national aim of ICT enabled growth and development.
KICTANetiquette : Adhere to the same standards of acceptable behaviors online that you follow in real life: respect people's times and bandwidth, share knowledge, don't flame or abuse or personalize, respect privacy, do not spam, do not market your wares or qualifications.
-- Grace Mutung'u Skype: gracebomu @Bomu PGP ID : 0x33A3450F
Sorry- I should have said Michael, not Matthew. Apologies. On Wed, 22 Aug 2018 at 17:12, kanini mutemi <kaninimutemi@gmail.com> wrote:
Thank you Gerishon and Matthew.
@Gerishon, on consent: The draft policy indicates that fairness means that the data subjects (you and me) are informed of 1. the name of the data controller (the person who determines the purpose and means of data collection) and 2. the purpose for which data is being collected.
Consent is also dealt with under Clause 27 of the draft bill. Here is a follow up question :
*What amounts to ‘consent’? When can it be said that one has agreed to have their data collected and processed in a certain manner? *
@Matthew thanks for flagging the inequity between small and large scale controllers. I wonder whether it would have been useful to acknowledge innovation as one of the principles. The documents do set a restrictive tone I note- leaning towards restricting the collection of data as opposed to encouraging it. Eg the principles of data minimization and storage limitation will not allow controllers to collect data that would be considered ‘extra’ or ‘luxurious’. Is there a way to balance the two- protection of privacy vis-a-vis promoting innovation through aggressive research?
Listers, I would like to hear from more of you.
On Wed, 22 Aug 2018 at 14:20, Michael Pedersen via kictanet < kictanet@lists.kictanet.or.ke> wrote:
Listers,
On the topic of transparency - I somehow feel that the office of the data protection commissioner should be required to publish (preferably on the web) at least statistics on the number of cases/complaints brought to them for various periods of time - this way it would be easier to determine if the problem of data-protection is growing.
I might argue that it should even be public which company the individual complaints are against so that it is possible for the public to take note of which companies they reliably can trust with their data.
On the topic of fairness I am deeply concerned that the legislation is written only with "large data holders" in mind and not SME's - In terms of requirements for compliance, fee-structures, administrative-overhead. The burden may be too large for startups and SME's and hereby limit innovation and growth of new companies. It might be more fair if the requirements increased as a result of the amount of data you hold - i.e. if you hold data for less than 10000 individuals you may only need to provide a compliance report to the office once a year. But if you hold data for more than 1million indidviduals then you need to report monthly/quaterly etc.
Kind regards Michael Pedersen
On 08/22/2018 01:02 PM, Walubengo J via kictanet wrote:
Listers,
please note that the bill is also hosted on the Jadili platform @ http://jadili.ictpolicy.org/docs/privacy-and-data-protection-policy-and-bill... for your easy access.
Lets have your views so that what finally goes to parliament has stakeholder support with less risk of court-cases ;-)
walu.
On Wednesday, August 22, 2018, 10:47:31 AM GMT+3, kanini mutemi via kictanet <kictanet@lists.kictanet.or.ke> <kictanet@lists.kictanet.or.ke> wrote:
*Day 1- Principles of Data Protection *
Dear Listers,
As GG had indicated on Monday, we will hold online moderated discussions on the policy and regulatory framework on privacy and data protection. I will kick us off with a discussion on the proposed principles of data protection (Part 5 of the draft policy and Part IV of the draft bill).
There are seven proposed principles–
*(a) Fairness, lawfulness and transparency (b) Purpose limitation (c) Data minimisation (d) Storage limitation (e) Accuracy (f) Confidentiality and Integrity (g) Accountability * To begin with, I welcome comments on
*-what is your first impression of the principles?*
* -why do we need to set out principles?*
* -are the principles clearly defined in the draft policy and bill?*
Tujadiliane! -- *Mercy Mutemi . *
_______________________________________________ kictanet mailing list kictanet@lists.kictanet.or.ke https://lists.kictanet.or.ke/mailman/listinfo/kictanet Twitter: http://twitter.com/kictanet Facebook: https://www.facebook.com/KICTANet/ Domain Registration sponsored by www.eacdirectory.co.ke
Unsubscribe or change your options at https://lists.kictanet.or.ke/mailman/options/kictanet/jwalu%40yahoo.com
The Kenya ICT Action Network (KICTANet) is a multi-stakeholder platform for people and institutions interested and involved in ICT policy and regulation. The network aims to act as a catalyst for reform in the ICT sector in support of the national aim of ICT enabled growth and development.
KICTANetiquette : Adhere to the same standards of acceptable behaviors online that you follow in real life: respect people's times and bandwidth, share knowledge, don't flame or abuse or personalize, respect privacy, do not spam, do not market your wares or qualifications.
_______________________________________________ kictanet mailing listkictanet@lists.kictanet.or.kehttps://lists.kictanet.or.ke/mailman/listinfo/kictanet Twitter: http://twitter.com/kictanet Facebook: https://www.facebook.com/KICTANet/ Domain Registration sponsored by www.eacdirectory.co.ke
Unsubscribe or change your options at https://lists.kictanet.or.ke/mailman/options/kictanet/michael%40pluspeople.d...
The Kenya ICT Action Network (KICTANet) is a multi-stakeholder platform for people and institutions interested and involved in ICT policy and regulation. The network aims to act as a catalyst for reform in the ICT sector in support of the national aim of ICT enabled growth and development.
KICTANetiquette : Adhere to the same standards of acceptable behaviors online that you follow in real life: respect people's times and bandwidth, share knowledge, don't flame or abuse or personalize, respect privacy, do not spam, do not market your wares or qualifications.
_______________________________________________ kictanet mailing list kictanet@lists.kictanet.or.ke https://lists.kictanet.or.ke/mailman/listinfo/kictanet Twitter: http://twitter.com/kictanet Facebook: https://www.facebook.com/KICTANet/ Domain Registration sponsored by www.eacdirectory.co.ke
Unsubscribe or change your options at https://lists.kictanet.or.ke/mailman/options/kictanet/kaninimutemi%40gmail.c...
The Kenya ICT Action Network (KICTANet) is a multi-stakeholder platform for people and institutions interested and involved in ICT policy and regulation. The network aims to act as a catalyst for reform in the ICT sector in support of the national aim of ICT enabled growth and development.
KICTANetiquette : Adhere to the same standards of acceptable behaviors online that you follow in real life: respect people's times and bandwidth, share knowledge, don't flame or abuse or personalize, respect privacy, do not spam, do not market your wares or qualifications.
-- *Mercy Mutemi, Advocate*.
-- *Mercy Mutemi, Advocate*.
I think we need a very serious data minimisation culture. Entities that collect data in their course of doing business need to collect what is needed. I should not be compelled to name my family tree plus a letter from my local chief just to gain admission into a building. (hyperbole alert) On 22 Aug 2018 09:58, "kanini mutemi via kictanet" < kictanet@lists.kictanet.or.ke> wrote:
*Day 1- Principles of Data Protection *
Dear Listers,
As GG had indicated on Monday, we will hold online moderated discussions on the policy and regulatory framework on privacy and data protection. I will kick us off with a discussion on the proposed principles of data protection (Part 5 of the draft policy and Part IV of the draft bill).
There are seven proposed principles–
*(a) Fairness, lawfulness and transparency(b) Purpose limitation(c) Data minimisation (d) Storage limitation (e) Accuracy(f) Confidentiality and Integrity (g) Accountability* To begin with, I welcome comments on
*-what is your first impression of the principles?*
*-why do we need to set out principles?*
*-are the principles clearly defined in the draft policy and bill?*
Tujadiliane! -- *Mercy Mutemi.*
_______________________________________________ kictanet mailing list kictanet@lists.kictanet.or.ke https://lists.kictanet.or.ke/mailman/listinfo/kictanet Twitter: http://twitter.com/kictanet Facebook: https://www.facebook.com/KICTANet/ Domain Registration sponsored by www.eacdirectory.co.ke
Unsubscribe or change your options at https://lists.kictanet.or.ke/ mailman/options/kictanet/monyango93%40gmail.com
The Kenya ICT Action Network (KICTANet) is a multi-stakeholder platform for people and institutions interested and involved in ICT policy and regulation. The network aims to act as a catalyst for reform in the ICT sector in support of the national aim of ICT enabled growth and development.
KICTANetiquette : Adhere to the same standards of acceptable behaviors online that you follow in real life: respect people's times and bandwidth, share knowledge, don't flame or abuse or personalize, respect privacy, do not spam, do not market your wares or qualifications.
Thank you @Francis. What impact will minimisation have on innovation? @Grace I like that you refer back to the draft policy as the underlying statement of intent. Indeed throughout this process we must consider both the draft policy and the draft bill. This thread will remain open even as we move to the Day 2 discussion.
On 22 Aug 2018, at 21:50, Francis Monyango <monyango93@gmail.com> wrote:
I think we need a very serious data minimisation culture. Entities that collect data in their course of doing business need to collect what is needed. I should not be compelled to name my family tree plus a letter from my local chief just to gain admission into a building. (hyperbole alert)
On 22 Aug 2018 09:58, "kanini mutemi via kictanet" <kictanet@lists.kictanet.or.ke <mailto:kictanet@lists.kictanet.or.ke>> wrote: Day 1- Principles of Data Protection
Dear Listers,
As GG had indicated on Monday, we will hold online moderated discussions on the policy and regulatory framework on privacy and data protection. I will kick us off with a discussion on the proposed principles of data protection (Part 5 of the draft policy and Part IV of the draft bill).
There are seven proposed principles– (a) Fairness, lawfulness and transparency (b) Purpose limitation (c) Data minimisation (d) Storage limitation (e) Accuracy (f) Confidentiality and Integrity (g) Accountability
To begin with, I welcome comments on
-what is your first impression of the principles?
-why do we need to set out principles?
-are the principles clearly defined in the draft policy and bill?
Tujadiliane! -- Mercy Mutemi.
_______________________________________________ kictanet mailing list kictanet@lists.kictanet.or.ke <mailto:kictanet@lists.kictanet.or.ke> https://lists.kictanet.or.ke/mailman/listinfo/kictanet <https://lists.kictanet.or.ke/mailman/listinfo/kictanet> Twitter: http://twitter.com/kictanet <http://twitter.com/kictanet> Facebook: https://www.facebook.com/KICTANet/ <https://www.facebook.com/KICTANet/> Domain Registration sponsored by www.eacdirectory.co.ke <http://www.eacdirectory.co.ke/>
Unsubscribe or change your options at https://lists.kictanet.or.ke/mailman/options/kictanet/monyango93%40gmail.com <https://lists.kictanet.or.ke/mailman/options/kictanet/monyango93%40gmail.com>
The Kenya ICT Action Network (KICTANet) is a multi-stakeholder platform for people and institutions interested and involved in ICT policy and regulation. The network aims to act as a catalyst for reform in the ICT sector in support of the national aim of ICT enabled growth and development.
KICTANetiquette : Adhere to the same standards of acceptable behaviors online that you follow in real life: respect people's times and bandwidth, share knowledge, don't flame or abuse or personalize, respect privacy, do not spam, do not market your wares or qualifications.
Hi listers, I concur with @Francis. Data minimisation is essential in guaranteeing the least possible data breaches in the event of compromised systems or databases. It would also inspire innovation by focusing on relevant data for the purposes of which it is being collected. It would therefore aid in identifying problems and or gaps from processing the relevant data collected and consequently developing solutions to these problems. Kind Regards, William. On Thu, Aug 23, 2018 at 7:36 AM kanini mutemi via kictanet < kictanet@lists.kictanet.or.ke> wrote:
Thank you @Francis. What impact will minimisation have on innovation?
@Grace I like that you refer back to the draft policy as the underlying statement of intent. Indeed throughout this process we must consider both the draft policy and the draft bill.
This thread will remain open even as we move to the Day 2 discussion.
On 22 Aug 2018, at 21:50, Francis Monyango <monyango93@gmail.com> wrote:
I think we need a very serious data minimisation culture. Entities that collect data in their course of doing business need to collect what is needed. I should not be compelled to name my family tree plus a letter from my local chief just to gain admission into a building. (hyperbole alert)
On 22 Aug 2018 09:58, "kanini mutemi via kictanet" < kictanet@lists.kictanet.or.ke> wrote:
*Day 1- Principles of Data Protection *
Dear Listers,
As GG had indicated on Monday, we will hold online moderated discussions on the policy and regulatory framework on privacy and data protection. I will kick us off with a discussion on the proposed principles of data protection (Part 5 of the draft policy and Part IV of the draft bill).
There are seven proposed principles–
*(a) Fairness, lawfulness and transparency(b) Purpose limitation(c) Data minimisation (d) Storage limitation (e) Accuracy(f) Confidentiality and Integrity (g) Accountability* To begin with, I welcome comments on
*-what is your first impression of the principles?*
*-why do we need to set out principles?*
*-are the principles clearly defined in the draft policy and bill?*
Tujadiliane! -- *Mercy Mutemi.*
_______________________________________________ kictanet mailing list kictanet@lists.kictanet.or.ke https://lists.kictanet.or.ke/mailman/listinfo/kictanet Twitter: http://twitter.com/kictanet Facebook: https://www.facebook.com/KICTANet/ Domain Registration sponsored by www.eacdirectory.co.ke
Unsubscribe or change your options at https://lists.kictanet.or.ke/mailman/options/kictanet/monyango93%40gmail.com
The Kenya ICT Action Network (KICTANet) is a multi-stakeholder platform for people and institutions interested and involved in ICT policy and regulation. The network aims to act as a catalyst for reform in the ICT sector in support of the national aim of ICT enabled growth and development.
KICTANetiquette : Adhere to the same standards of acceptable behaviors online that you follow in real life: respect people's times and bandwidth, share knowledge, don't flame or abuse or personalize, respect privacy, do not spam, do not market your wares or qualifications.
_______________________________________________ kictanet mailing list kictanet@lists.kictanet.or.ke https://lists.kictanet.or.ke/mailman/listinfo/kictanet Twitter: http://twitter.com/kictanet Facebook: https://www.facebook.com/KICTANet/ Domain Registration sponsored by www.eacdirectory.co.ke
Unsubscribe or change your options at https://lists.kictanet.or.ke/mailman/options/kictanet/willbill.mathenge%40gm...
The Kenya ICT Action Network (KICTANet) is a multi-stakeholder platform for people and institutions interested and involved in ICT policy and regulation. The network aims to act as a catalyst for reform in the ICT sector in support of the national aim of ICT enabled growth and development.
KICTANetiquette : Adhere to the same standards of acceptable behaviors online that you follow in real life: respect people's times and bandwidth, share knowledge, don't flame or abuse or personalize, respect privacy, do not spam, do not market your wares or qualifications.
Dear Mercy, Many thanks for this thread and apologies for coming in late to the discussion. While we are late as a country in having a Policy and Regulatory Framework on Privacy and Data Protection i still have a number of questions lingering at the back of mind that might be straight forward but which i still feel i should share: 1) How much data are we generating as a country and to what extent should we regulate? Looking at it from a country code Top Level Domain perspective, more than 80 % of global registrations are in the European Region followed by China, their markets are generally at a point of saturation hence the efforts to ensure that the right policy and data frameworks (GDPR) are in place. On the other hand most African countries (Kenya included) are still net consumers of foreign content despite regardless of efforts made to promote local content. My general comment would be that the Policy and Regulatory framework on Privacy and Data Protection should promote Innovation in data science /analytics. It is my humble opinion that at this point in time, our ICT Industry is at at nascent stage and lots of personal data might be required by developers to come up with innovative products and services. I think the notion that we are a Silicon Savanna is a bit far fetched because day by day we are discovering that most of the Innovations we are celebrating locally have roots elsewhere. So far the Policy looks great, it is my hope that it wont get mutilated when it lands in the August House as has been the case with previous policy and regulatory frameworks. Regards On Thu, Aug 23, 2018 at 11:39 AM william mathenge via kictanet < kictanet@lists.kictanet.or.ke> wrote:
Hi listers, I concur with @Francis. Data minimisation is essential in guaranteeing the least possible data breaches in the event of compromised systems or databases. It would also inspire innovation by focusing on relevant data for the purposes of which it is being collected. It would therefore aid in identifying problems and or gaps from processing the relevant data collected and consequently developing solutions to these problems.
Kind Regards, William.
On Thu, Aug 23, 2018 at 7:36 AM kanini mutemi via kictanet < kictanet@lists.kictanet.or.ke> wrote:
Thank you @Francis. What impact will minimisation have on innovation?
@Grace I like that you refer back to the draft policy as the underlying statement of intent. Indeed throughout this process we must consider both the draft policy and the draft bill.
This thread will remain open even as we move to the Day 2 discussion.
On 22 Aug 2018, at 21:50, Francis Monyango <monyango93@gmail.com> wrote:
I think we need a very serious data minimisation culture. Entities that collect data in their course of doing business need to collect what is needed. I should not be compelled to name my family tree plus a letter from my local chief just to gain admission into a building. (hyperbole alert)
On 22 Aug 2018 09:58, "kanini mutemi via kictanet" < kictanet@lists.kictanet.or.ke> wrote:
*Day 1- Principles of Data Protection *
Dear Listers,
As GG had indicated on Monday, we will hold online moderated discussions on the policy and regulatory framework on privacy and data protection. I will kick us off with a discussion on the proposed principles of data protection (Part 5 of the draft policy and Part IV of the draft bill).
There are seven proposed principles–
*(a) Fairness, lawfulness and transparency(b) Purpose limitation(c) Data minimisation (d) Storage limitation (e) Accuracy(f) Confidentiality and Integrity (g) Accountability* To begin with, I welcome comments on
*-what is your first impression of the principles?*
*-why do we need to set out principles?*
*-are the principles clearly defined in the draft policy and bill?*
Tujadiliane! -- *Mercy Mutemi.*
_______________________________________________ kictanet mailing list kictanet@lists.kictanet.or.ke https://lists.kictanet.or.ke/mailman/listinfo/kictanet Twitter: http://twitter.com/kictanet Facebook: https://www.facebook.com/KICTANet/ Domain Registration sponsored by www.eacdirectory.co.ke
Unsubscribe or change your options at https://lists.kictanet.or.ke/mailman/options/kictanet/monyango93%40gmail.com
The Kenya ICT Action Network (KICTANet) is a multi-stakeholder platform for people and institutions interested and involved in ICT policy and regulation. The network aims to act as a catalyst for reform in the ICT sector in support of the national aim of ICT enabled growth and development.
KICTANetiquette : Adhere to the same standards of acceptable behaviors online that you follow in real life: respect people's times and bandwidth, share knowledge, don't flame or abuse or personalize, respect privacy, do not spam, do not market your wares or qualifications.
_______________________________________________ kictanet mailing list kictanet@lists.kictanet.or.ke https://lists.kictanet.or.ke/mailman/listinfo/kictanet Twitter: http://twitter.com/kictanet Facebook: https://www.facebook.com/KICTANet/ Domain Registration sponsored by www.eacdirectory.co.ke
Unsubscribe or change your options at https://lists.kictanet.or.ke/mailman/options/kictanet/willbill.mathenge%40gm...
The Kenya ICT Action Network (KICTANet) is a multi-stakeholder platform for people and institutions interested and involved in ICT policy and regulation. The network aims to act as a catalyst for reform in the ICT sector in support of the national aim of ICT enabled growth and development.
KICTANetiquette : Adhere to the same standards of acceptable behaviors online that you follow in real life: respect people's times and bandwidth, share knowledge, don't flame or abuse or personalize, respect privacy, do not spam, do not market your wares or qualifications.
_______________________________________________ kictanet mailing list kictanet@lists.kictanet.or.ke https://lists.kictanet.or.ke/mailman/listinfo/kictanet Twitter: http://twitter.com/kictanet Facebook: https://www.facebook.com/KICTANet/ Domain Registration sponsored by www.eacdirectory.co.ke
Unsubscribe or change your options at https://lists.kictanet.or.ke/mailman/options/kictanet/otieno.barrack%40gmail...
The Kenya ICT Action Network (KICTANet) is a multi-stakeholder platform for people and institutions interested and involved in ICT policy and regulation. The network aims to act as a catalyst for reform in the ICT sector in support of the national aim of ICT enabled growth and development.
KICTANetiquette : Adhere to the same standards of acceptable behaviors online that you follow in real life: respect people's times and bandwidth, share knowledge, don't flame or abuse or personalize, respect privacy, do not spam, do not market your wares or qualifications.
-- Barrack O. Otieno +254721325277 +254733206359 Skype: barrack.otieno PGP ID: 0x2611D86A
participants (8)
-
Barrack Otieno -
Francis Monyango -
Grace Bomu -
kanini mutemi -
Michael Pedersen -
Walubengo J -
WANGARI KABIRU -
william mathenge