What should happen to personal data when someone dies?

Listers, As we continue to discuss the data protection bill, an issue that has come up and is not captured in the proposed laws is the issue of legacy. For example, a viral clipping in social media has a newspaper report stating that a woman who was recently murdered was HIV positive. Normally, HIV status is sensitive personal information that would not be disclosed. Which begs the question, what should happen to personal data on the death of a person? Should we treat data as property that is transferred during succession or should anyone with a legitimate interest be able to access it? Should data processors/controllers have to delete such data? Is this something that should be addressed in the proposed law or should we wait for judicial interpretation? -- Grace Mutung'u Skype: gracebomu @Bomu PGP ID : 0x33A3450F

Good morning Listers, I think that data protection should apply for citizens/residents whether dead or alive. Affected parties(family, business partners etc) have reason to seek justice should this information be made public or disclosed to unintended parties without their consent; and more-so if disclosure implicates them. However, the type of data for retention for xx period of time should be discussed to ensure relevance. For instance the telephone numbers, social media details or physical address may be of little relevance over time. Regards, Martha Muriuki. On Wed, Sep 12, 2018 at 11:58 PM Grace Bomu via kictanet < kictanet@lists.kictanet.or.ke> wrote:
Listers, As we continue to discuss the data protection bill, an issue that has come up and is not captured in the proposed laws is the issue of legacy. For example, a viral clipping in social media has a newspaper report stating that a woman who was recently murdered was HIV positive. Normally, HIV status is sensitive personal information that would not be disclosed. Which begs the question, what should happen to personal data on the death of a person? Should we treat data as property that is transferred during succession or should anyone with a legitimate interest be able to access it? Should data processors/controllers have to delete such data?
Is this something that should be addressed in the proposed law or should we wait for judicial interpretation?
-- Grace Mutung'u Skype: gracebomu @Bomu PGP ID : 0x33A3450F
_______________________________________________ kictanet mailing list kictanet@lists.kictanet.or.ke https://lists.kictanet.or.ke/mailman/listinfo/kictanet Twitter: http://twitter.com/kictanet Facebook: https://www.facebook.com/KICTANet/ Domain Registration sponsored by www.eacdirectory.co.ke
Unsubscribe or change your options at https://lists.kictanet.or.ke/mailman/options/kictanet/marthamuriuki%40gmail....
The Kenya ICT Action Network (KICTANet) is a multi-stakeholder platform for people and institutions interested and involved in ICT policy and regulation. The network aims to act as a catalyst for reform in the ICT sector in support of the national aim of ICT enabled growth and development.
KICTANetiquette : Adhere to the same standards of acceptable behaviors online that you follow in real life: respect people's times and bandwidth, share knowledge, don't flame or abuse or personalize, respect privacy, do not spam, do not market your wares or qualifications.

An excellent question Grace I believe that privacy is a human right, like the right to dignity. One does not lose this right after death. I think that ones rights under data protection, should be in principle, the same after death. -- Alex Comninos http://alex.africa I am transitioning to a new email address: hello@alex.africa
On 12 Sep 2018, at 10:25, Grace Bomu via kictanet <kictanet@lists.kictanet.or.ke> wrote:
Listers, As we continue to discuss the data protection bill, an issue that has come up and is not captured in the proposed laws is the issue of legacy. For example, a viral clipping in social media has a newspaper report stating that a woman who was recently murdered was HIV positive. Normally, HIV status is sensitive personal information that would not be disclosed. Which begs the question, what should happen to personal data on the death of a person? Should we treat data as property that is transferred during succession or should anyone with a legitimate interest be able to access it? Should data processors/controllers have to delete such data?
Is this something that should be addressed in the proposed law or should we wait for judicial interpretation?
-- Grace Mutung'u Skype: gracebomu @Bomu PGP ID : 0x33A3450F
_______________________________________________ kictanet mailing list kictanet@lists.kictanet.or.ke https://lists.kictanet.or.ke/mailman/listinfo/kictanet Twitter: http://twitter.com/kictanet Facebook: https://www.facebook.com/KICTANet/ Domain Registration sponsored by www.eacdirectory.co.ke
Unsubscribe or change your options at https://lists.kictanet.or.ke/mailman/options/kictanet/alex.comninos%40gmail....
The Kenya ICT Action Network (KICTANet) is a multi-stakeholder platform for people and institutions interested and involved in ICT policy and regulation. The network aims to act as a catalyst for reform in the ICT sector in support of the national aim of ICT enabled growth and development.
KICTANetiquette : Adhere to the same standards of acceptable behaviors online that you follow in real life: respect people's times and bandwidth, share knowledge, don't flame or abuse or personalize, respect privacy, do not spam, do not market your wares or qualifications.

Data has a personal aspect as well as commercial aspect, among others. It is property which upon the demise of the "owner" should pass to his/ her estate just as is the case with other assets. The "how" of administration of data after death ought to be covered in the data law in the making, the law to apply alongside the law of succession. On Wed, 12 Sep 2018, 23:58 Grace Bomu via kictanet, < kictanet@lists.kictanet.or.ke> wrote:
Listers, As we continue to discuss the data protection bill, an issue that has come up and is not captured in the proposed laws is the issue of legacy. For example, a viral clipping in social media has a newspaper report stating that a woman who was recently murdered was HIV positive. Normally, HIV status is sensitive personal information that would not be disclosed. Which begs the question, what should happen to personal data on the death of a person? Should we treat data as property that is transferred during succession or should anyone with a legitimate interest be able to access it? Should data processors/controllers have to delete such data?
Is this something that should be addressed in the proposed law or should we wait for judicial interpretation?
-- Grace Mutung'u Skype: gracebomu @Bomu PGP ID : 0x33A3450F
_______________________________________________ kictanet mailing list kictanet@lists.kictanet.or.ke https://lists.kictanet.or.ke/mailman/listinfo/kictanet Twitter: http://twitter.com/kictanet Facebook: https://www.facebook.com/KICTANet/ Domain Registration sponsored by www.eacdirectory.co.ke
Unsubscribe or change your options at https://lists.kictanet.or.ke/mailman/options/kictanet/fmwangangi1%40gmail.co...
The Kenya ICT Action Network (KICTANet) is a multi-stakeholder platform for people and institutions interested and involved in ICT policy and regulation. The network aims to act as a catalyst for reform in the ICT sector in support of the national aim of ICT enabled growth and development.
KICTANetiquette : Adhere to the same standards of acceptable behaviors online that you follow in real life: respect people's times and bandwidth, share knowledge, don't flame or abuse or personalize, respect privacy, do not spam, do not market your wares or qualifications.

Data has a personal aspect as well as commercial aspect, among others. It is property which upon the demise of the "owner" should pass to his/ her estate just as is the case with other assets. The "how" of administration of data after death ought to be covered in the data law in the making, the law to apply alongside the law of succession.
I think its a great idea that data protection laws could enable the execution of how private data and personal information is handled according to the deceased last will and testament. This should be seen in the sense of executing the last will and testament of the deceased though, not treating ones data as property. When I die, there is a LOT of personal information and private information I should like to the grave, some of which I would like to be shared. I would not like all my private and memories and personal memories to become “property” of my next of kin when I am dead, solely because they left a digital footprint.

So what should determine the data should be available to successors? It is easy to see how DNA data would be useful for proving kinship or for health reasons. But how far should we go? And wouldn't someone else (the data processor or controller) still have access to the deceased's data anyway? Il giorno ven 14 set 2018 alle ore 11:10 Alex Comninos via kictanet < kictanet@lists.kictanet.or.ke> ha scritto:
Data has a personal aspect as well as commercial aspect, among others. It is property which upon the demise of the "owner" should pass to his/ her estate just as is the case with other assets. The "how" of administration of data after death ought to be covered in the data law in the making, the law to apply alongside the law of succession.
I think its a great idea that data protection laws could enable the execution of how private data and personal information is handled according to the deceased last will and testament. This should be seen in the sense of executing the last will and testament of the deceased though, not treating ones data as property.
When I die, there is a LOT of personal information and private information I should like to the grave, some of which I would like to be shared. I would not like all my private and memories and personal memories to become “property” of my next of kin when I am dead, solely because they left a digital footprint. _______________________________________________ kictanet mailing list kictanet@lists.kictanet.or.ke https://lists.kictanet.or.ke/mailman/listinfo/kictanet Twitter: http://twitter.com/kictanet Facebook: https://www.facebook.com/KICTANet/ Domain Registration sponsored by www.eacdirectory.co.ke
Unsubscribe or change your options at https://lists.kictanet.or.ke/mailman/options/kictanet/nmutungu%40gmail.com
The Kenya ICT Action Network (KICTANet) is a multi-stakeholder platform for people and institutions interested and involved in ICT policy and regulation. The network aims to act as a catalyst for reform in the ICT sector in support of the national aim of ICT enabled growth and development.
KICTANetiquette : Adhere to the same standards of acceptable behaviors online that you follow in real life: respect people's times and bandwidth, share knowledge, don't flame or abuse or personalize, respect privacy, do not spam, do not market your wares or qualifications.
-- Grace Mutung'u Skype: gracebomu @Bomu PGP ID : 0x33A3450F

It seems that a will and testament is a form of consent. So if we look at this issue as one of consent, we assume that unless it is expressed in perpetuity, eg through a last will and testament, that the consent has not been granted, nor will it ever be. -Mallory On 14/09/18 11:49, Grace Bomu via kictanet wrote:
So what should determine the data should be available to successors? It is easy to see how DNA data would be useful for proving kinship or for health reasons. But how far should we go? And wouldn't someone else (the data processor or controller) still have access to the deceased's data anyway?
Il giorno ven 14 set 2018 alle ore 11:10 Alex Comninos via kictanet <kictanet@lists.kictanet.or.ke <mailto:kictanet@lists.kictanet.or.ke>> ha scritto:
> Data has a personal aspect as well as commercial aspect, among others. It is property which upon the demise of the "owner" should pass to his/ her estate just as is the case with other assets. The "how" of administration of data after death ought to be covered in the data law in the making, the law to apply alongside the law of succession.
I think its a great idea that data protection laws could enable the execution of how private data and personal information is handled according to the deceased last will and testament. This should be seen in the sense of executing the last will and testament of the deceased though, not treating ones data as property.
When I die, there is a LOT of personal information and private information I should like to the grave, some of which I would like to be shared. I would not like all my private and memories and personal memories to become “property” of my next of kin when I am dead, solely because they left a digital footprint. _______________________________________________ kictanet mailing list kictanet@lists.kictanet.or.ke <mailto:kictanet@lists.kictanet.or.ke> https://lists.kictanet.or.ke/mailman/listinfo/kictanet Twitter: http://twitter.com/kictanet Facebook: https://www.facebook.com/KICTANet/ Domain Registration sponsored by www.eacdirectory.co.ke <http://www.eacdirectory.co.ke>
Unsubscribe or change your options at https://lists.kictanet.or.ke/mailman/options/kictanet/nmutungu%40gmail.com
The Kenya ICT Action Network (KICTANet) is a multi-stakeholder platform for people and institutions interested and involved in ICT policy and regulation. The network aims to act as a catalyst for reform in the ICT sector in support of the national aim of ICT enabled growth and development.
KICTANetiquette : Adhere to the same standards of acceptable behaviors online that you follow in real life: respect people's times and bandwidth, share knowledge, don't flame or abuse or personalize, respect privacy, do not spam, do not market your wares or qualifications.
-- Grace Mutung'u Skype: gracebomu @Bomu PGP ID : 0x33A3450F
_______________________________________________ kictanet mailing list kictanet@lists.kictanet.or.ke https://lists.kictanet.or.ke/mailman/listinfo/kictanet Twitter: http://twitter.com/kictanet Facebook: https://www.facebook.com/KICTANet/ Domain Registration sponsored by www.eacdirectory.co.ke
Unsubscribe or change your options at https://lists.kictanet.or.ke/mailman/options/kictanet/mallory%40mayfirst.org
The Kenya ICT Action Network (KICTANet) is a multi-stakeholder platform for people and institutions interested and involved in ICT policy and regulation. The network aims to act as a catalyst for reform in the ICT sector in support of the national aim of ICT enabled growth and development.
KICTANetiquette : Adhere to the same standards of acceptable behaviors online that you follow in real life: respect people's times and bandwidth, share knowledge, don't flame or abuse or personalize, respect privacy, do not spam, do not market your wares or qualifications.
-- Mallory Knodel May First/People Link :: mayfirst.org gpg fingerprint :: E3EB 63E0 65A3 B240 BCD9 B071 0C32 A271 BD3C C780

True Mallory,wills could be one avenue for consenting to succession of data. Our reality however is that majority of the population do not make wills for cultural and other reasons. Il giorno ven 14 set 2018 alle ore 12:41 Mallory Knodel via kictanet < kictanet@lists.kictanet.or.ke> ha scritto:
It seems that a will and testament is a form of consent. So if we look at this issue as one of consent, we assume that unless it is expressed in perpetuity, eg through a last will and testament, that the consent has not been granted, nor will it ever be.
-Mallory
On 14/09/18 11:49, Grace Bomu via kictanet wrote:
So what should determine the data should be available to successors? It is easy to see how DNA data would be useful for proving kinship or for health reasons. But how far should we go? And wouldn't someone else (the data processor or controller) still have access to the deceased's data anyway?
Il giorno ven 14 set 2018 alle ore 11:10 Alex Comninos via kictanet <kictanet@lists.kictanet.or.ke <mailto:kictanet@lists.kictanet.or.ke>> ha scritto:
> Data has a personal aspect as well as commercial aspect, among others. It is property which upon the demise of the "owner" should pass to his/ her estate just as is the case with other assets. The "how" of administration of data after death ought to be covered in the data law in the making, the law to apply alongside the law of succession.
I think its a great idea that data protection laws could enable the execution of how private data and personal information is handled according to the deceased last will and testament. This should be seen in the sense of executing the last will and testament of the deceased though, not treating ones data as property.
When I die, there is a LOT of personal information and private information I should like to the grave, some of which I would like to be shared. I would not like all my private and memories and personal memories to become “property” of my next of kin when I am dead, solely because they left a digital footprint. _______________________________________________ kictanet mailing list kictanet@lists.kictanet.or.ke <mailto:kictanet@lists.kictanet.or.ke> https://lists.kictanet.or.ke/mailman/listinfo/kictanet Twitter: http://twitter.com/kictanet Facebook: https://www.facebook.com/KICTANet/ Domain Registration sponsored by www.eacdirectory.co.ke <http://www.eacdirectory.co.ke>
Unsubscribe or change your options at
https://lists.kictanet.or.ke/mailman/options/kictanet/nmutungu%40gmail.com
The Kenya ICT Action Network (KICTANet) is a multi-stakeholder platform for people and institutions interested and involved in ICT policy and regulation. The network aims to act as a catalyst for reform in the ICT sector in support of the national aim of ICT enabled growth and development.
KICTANetiquette : Adhere to the same standards of acceptable behaviors online that you follow in real life: respect people's times and bandwidth, share knowledge, don't flame or abuse or personalize, respect privacy, do not spam, do not market your wares or qualifications.
-- Grace Mutung'u Skype: gracebomu @Bomu PGP ID : 0x33A3450F
_______________________________________________ kictanet mailing list kictanet@lists.kictanet.or.ke https://lists.kictanet.or.ke/mailman/listinfo/kictanet Twitter: http://twitter.com/kictanet Facebook: https://www.facebook.com/KICTANet/ Domain Registration sponsored by www.eacdirectory.co.ke
Unsubscribe or change your options at
https://lists.kictanet.or.ke/mailman/options/kictanet/mallory%40mayfirst.org
The Kenya ICT Action Network (KICTANet) is a multi-stakeholder platform
for people and institutions interested and involved in ICT policy and regulation. The network aims to act as a catalyst for reform in the ICT sector in support of the national aim of ICT enabled growth and development.
KICTANetiquette : Adhere to the same standards of acceptable behaviors
online that you follow in real life: respect people's times and bandwidth, share knowledge, don't flame or abuse or personalize, respect privacy, do not spam, do not market your wares or qualifications.
-- Mallory Knodel May First/People Link :: mayfirst.org gpg fingerprint :: E3EB 63E0 65A3 B240 BCD9 B071 0C32 A271 BD3C C780
_______________________________________________ kictanet mailing list kictanet@lists.kictanet.or.ke https://lists.kictanet.or.ke/mailman/listinfo/kictanet Twitter: http://twitter.com/kictanet Facebook: https://www.facebook.com/KICTANet/ Domain Registration sponsored by www.eacdirectory.co.ke
Unsubscribe or change your options at https://lists.kictanet.or.ke/mailman/options/kictanet/nmutungu%40gmail.com
The Kenya ICT Action Network (KICTANet) is a multi-stakeholder platform for people and institutions interested and involved in ICT policy and regulation. The network aims to act as a catalyst for reform in the ICT sector in support of the national aim of ICT enabled growth and development.
KICTANetiquette : Adhere to the same standards of acceptable behaviors online that you follow in real life: respect people's times and bandwidth, share knowledge, don't flame or abuse or personalize, respect privacy, do not spam, do not market your wares or qualifications.
-- Grace Mutung'u Skype: gracebomu @Bomu PGP ID : 0x33A3450F

So in the absence of explicit consent, the data cannot be mutable. And hopefully the data protection guidelines have maximum retention so that after some years it simply disappears altogether from the records of data controllers. -Mallory On 14/09/18 13:04, Grace Bomu wrote:
True Mallory,wills could be one avenue for consenting to succession of data. Our reality however is that majority of the population do not make wills for cultural and other reasons.
Il giorno ven 14 set 2018 alle ore 12:41 Mallory Knodel via kictanet <kictanet@lists.kictanet.or.ke <mailto:kictanet@lists.kictanet.or.ke>> ha scritto:
It seems that a will and testament is a form of consent. So if we look at this issue as one of consent, we assume that unless it is expressed in perpetuity, eg through a last will and testament, that the consent has not been granted, nor will it ever be.
-Mallory
On 14/09/18 11:49, Grace Bomu via kictanet wrote: > So what should determine the data should be available to successors? It > is easy to see how DNA data would be useful for proving kinship or for > health reasons. But how far should we go? And wouldn't someone else (the > data processor or controller) still have access to the deceased's data > anyway? > > Il giorno ven 14 set 2018 alle ore 11:10 Alex Comninos via kictanet > <kictanet@lists.kictanet.or.ke <mailto:kictanet@lists.kictanet.or.ke> <mailto:kictanet@lists.kictanet.or.ke <mailto:kictanet@lists.kictanet.or.ke>>> > ha scritto: > > > Data has a personal aspect as well as commercial aspect, among > others. It is property which upon the demise of the "owner" should > pass to his/ her estate just as is the case with other assets. The > "how" of administration of data after death ought to be covered in > the data law in the making, the law to apply alongside the law of > succession. > > I think its a great idea that data protection laws could enable the > execution of how private data and personal information is handled > according to the deceased last will and testament. This should be > seen in the sense of executing the last will and testament of the > deceased though, not treating ones data as property. > > When I die, there is a LOT of personal information and private > information I should like to the grave, some of which I would like > to be shared. I would not like all my private and memories and > personal memories to become “property” of my next of kin when I am > dead, solely because they left a digital footprint. > _______________________________________________ > kictanet mailing list > kictanet@lists.kictanet.or.ke <mailto:kictanet@lists.kictanet.or.ke> <mailto:kictanet@lists.kictanet.or.ke <mailto:kictanet@lists.kictanet.or.ke>> > https://lists.kictanet.or.ke/mailman/listinfo/kictanet > Twitter: http://twitter.com/kictanet > Facebook: https://www.facebook.com/KICTANet/ > Domain Registration sponsored by www.eacdirectory.co.ke <http://www.eacdirectory.co.ke> > <http://www.eacdirectory.co.ke> > > Unsubscribe or change your options at > https://lists.kictanet.or.ke/mailman/options/kictanet/nmutungu%40gmail.com > > The Kenya ICT Action Network (KICTANet) is a multi-stakeholder > platform for people and institutions interested and involved in ICT > policy and regulation. The network aims to act as a catalyst for > reform in the ICT sector in support of the national aim of ICT > enabled growth and development. > > KICTANetiquette : Adhere to the same standards of acceptable > behaviors online that you follow in real life: respect people's > times and bandwidth, share knowledge, don't flame or abuse or > personalize, respect privacy, do not spam, do not market your wares > or qualifications. > > > > -- > Grace Mutung'u > Skype: gracebomu > @Bomu > PGP ID : 0x33A3450F > > > > _______________________________________________ > kictanet mailing list > kictanet@lists.kictanet.or.ke <mailto:kictanet@lists.kictanet.or.ke> > https://lists.kictanet.or.ke/mailman/listinfo/kictanet > Twitter: http://twitter.com/kictanet > Facebook: https://www.facebook.com/KICTANet/ > Domain Registration sponsored by www.eacdirectory.co.ke <http://www.eacdirectory.co.ke> > > Unsubscribe or change your options at https://lists.kictanet.or.ke/mailman/options/kictanet/mallory%40mayfirst.org > > The Kenya ICT Action Network (KICTANet) is a multi-stakeholder platform for people and institutions interested and involved in ICT policy and regulation. The network aims to act as a catalyst for reform in the ICT sector in support of the national aim of ICT enabled growth and development. > > KICTANetiquette : Adhere to the same standards of acceptable behaviors online that you follow in real life: respect people's times and bandwidth, share knowledge, don't flame or abuse or personalize, respect privacy, do not spam, do not market your wares or qualifications. >
-- Mallory Knodel May First/People Link :: mayfirst.org <http://mayfirst.org> gpg fingerprint :: E3EB 63E0 65A3 B240 BCD9 B071 0C32 A271 BD3C C780
_______________________________________________ kictanet mailing list kictanet@lists.kictanet.or.ke <mailto:kictanet@lists.kictanet.or.ke> https://lists.kictanet.or.ke/mailman/listinfo/kictanet Twitter: http://twitter.com/kictanet Facebook: https://www.facebook.com/KICTANet/ Domain Registration sponsored by www.eacdirectory.co.ke <http://www.eacdirectory.co.ke>
Unsubscribe or change your options at https://lists.kictanet.or.ke/mailman/options/kictanet/nmutungu%40gmail.com
The Kenya ICT Action Network (KICTANet) is a multi-stakeholder platform for people and institutions interested and involved in ICT policy and regulation. The network aims to act as a catalyst for reform in the ICT sector in support of the national aim of ICT enabled growth and development.
KICTANetiquette : Adhere to the same standards of acceptable behaviors online that you follow in real life: respect people's times and bandwidth, share knowledge, don't flame or abuse or personalize, respect privacy, do not spam, do not market your wares or qualifications.
-- Grace Mutung'u Skype: gracebomu @Bomu PGP ID : 0x33A3450F
-- Mallory Knodel May First/People Link :: mayfirst.org gpg fingerprint :: E3EB 63E0 65A3 B240 BCD9 B071 0C32 A271 BD3C C780

Hello Bomu. Privacy, Consent and the Right to be forgotten. Personally, I would like my data kept private unless I have given express permission in my will for it to be accessed by a particular person or there is sufficient reason to believe that access to the data would enhance some legal process. I would further like the data to be held for a maximum of a decade after I am gone after which it should be deleted. I would prefer if this was within the law and not wait for interpretation. Cheers On Thu, Sep 13, 2018 at 3:10 AM Grace Bomu via kictanet < kictanet@lists.kictanet.or.ke> wrote:
Listers, As we continue to discuss the data protection bill, an issue that has come up and is not captured in the proposed laws is the issue of legacy. For example, a viral clipping in social media has a newspaper report stating that a woman who was recently murdered was HIV positive. Normally, HIV status is sensitive personal information that would not be disclosed. Which begs the question, what should happen to personal data on the death of a person? Should we treat data as property that is transferred during succession or should anyone with a legitimate interest be able to access it? Should data processors/controllers have to delete such data?
Is this something that should be addressed in the proposed law or should we wait for judicial interpretation?
-- Grace Mutung'u Skype: gracebomu @Bomu PGP ID : 0x33A3450F
_______________________________________________ kictanet mailing list kictanet@lists.kictanet.or.ke https://lists.kictanet.or.ke/mailman/listinfo/kictanet Twitter: http://twitter.com/kictanet Facebook: https://www.facebook.com/KICTANet/ Domain Registration sponsored by www.eacdirectory.co.ke
Unsubscribe or change your options at https://lists.kictanet.or.ke/mailman/options/kictanet/mpodhiambo%40yahoo.com
The Kenya ICT Action Network (KICTANet) is a multi-stakeholder platform for people and institutions interested and involved in ICT policy and regulation. The network aims to act as a catalyst for reform in the ICT sector in support of the national aim of ICT enabled growth and development.
KICTANetiquette : Adhere to the same standards of acceptable behaviors online that you follow in real life: respect people's times and bandwidth, share knowledge, don't flame or abuse or personalize, respect privacy, do not spam, do not market your wares or qualifications.

Good morning - My view is that it should be addressed in the proposed law and rederve judicial interpretation to the judiciary when such a need arises. For the case in point, the data is personal and can best be treated as such and only accessed by people with legitimate interest...this 'legitimate interest' should be unambiguously defined in the law. Further, I suggest that the data be treated under "succession" such that the request to access the information be made to the party to the successor. Just some thoughts Senaji On Wed, 12 Sep 2018, 23:58 Grace Bomu via kictanet, < kictanet@lists.kictanet.or.ke> wrote:
Listers, As we continue to discuss the data protection bill, an issue that has come up and is not captured in the proposed laws is the issue of legacy. For example, a viral clipping in social media has a newspaper report stating that a woman who was recently murdered was HIV positive. Normally, HIV status is sensitive personal information that would not be disclosed. Which begs the question, what should happen to personal data on the death of a person? Should we treat data as property that is transferred during succession or should anyone with a legitimate interest be able to access it? Should data processors/controllers have to delete such data?
Is this something that should be addressed in the proposed law or should we wait for judicial interpretation?
-- Grace Mutung'u Skype: gracebomu @Bomu PGP ID : 0x33A3450F
_______________________________________________ kictanet mailing list kictanet@lists.kictanet.or.ke https://lists.kictanet.or.ke/mailman/listinfo/kictanet Twitter: http://twitter.com/kictanet Facebook: https://www.facebook.com/KICTANet/ Domain Registration sponsored by www.eacdirectory.co.ke
Unsubscribe or change your options at https://lists.kictanet.or.ke/mailman/options/kictanet/tsenaji%40gmail.com
The Kenya ICT Action Network (KICTANet) is a multi-stakeholder platform for people and institutions interested and involved in ICT policy and regulation. The network aims to act as a catalyst for reform in the ICT sector in support of the national aim of ICT enabled growth and development.
KICTANetiquette : Adhere to the same standards of acceptable behaviors online that you follow in real life: respect people's times and bandwidth, share knowledge, don't flame or abuse or personalize, respect privacy, do not spam, do not market your wares or qualifications.

Thanks Grace for bringing this up. I think we can borrow from the financial laws as to how to handle the rights of accessories and handling of data as personal property. However we have to consider the following: That data is not a drainable asset. That currency is a key value aspect of data and thus immediate access may be of interest to some parties. E.g. health practitioners, Given the interconnectedness value of data, preservation and exposure of the same may have impact in other parties I. E. Close relations. On Sep 12, 2018 11:58 PM, "Grace Bomu via kictanet" < kictanet@lists.kictanet.or.ke> wrote: Listers, As we continue to discuss the data protection bill, an issue that has come up and is not captured in the proposed laws is the issue of legacy. For example, a viral clipping in social media has a newspaper report stating that a woman who was recently murdered was HIV positive. Normally, HIV status is sensitive personal information that would not be disclosed. Which begs the question, what should happen to personal data on the death of a person? Should we treat data as property that is transferred during succession or should anyone with a legitimate interest be able to access it? Should data processors/controllers have to delete such data? Is this something that should be addressed in the proposed law or should we wait for judicial interpretation? -- Grace Mutung'u Skype: gracebomu @Bomu PGP ID : 0x33A3450F _______________________________________________ kictanet mailing list kictanet@lists.kictanet.or.ke https://lists.kictanet.or.ke/mailman/listinfo/kictanet Twitter: http://twitter.com/kictanet Facebook: https://www.facebook.com/KICTANet/ Domain Registration sponsored by www.eacdirectory.co.ke Unsubscribe or change your options at https://lists.kictanet.or.ke/mailman/options/kictanet/thomaskaberi%40gmail.c... The Kenya ICT Action Network (KICTANet) is a multi-stakeholder platform for people and institutions interested and involved in ICT policy and regulation. The network aims to act as a catalyst for reform in the ICT sector in support of the national aim of ICT enabled growth and development. KICTANetiquette : Adhere to the same standards of acceptable behaviors online that you follow in real life: respect people's times and bandwidth, share knowledge, don't flame or abuse or personalize, respect privacy, do not spam, do not market your wares or qualifications.

Good question Grace. I propose– Data protection should not die with the person. This does not mean that the data subjects rights should be transferred to executors or administrators. 1. Some rights should be attached to the person. e.g. access and consent . This right should die with the person. 2. Retention of data should be subject to the Limitation of Actions Act to allow executors and administrators to bring any law suits for which that data could be used as evidence. I am uncomfortable with dealing with data as inheritable property generally. Using the example of land- once land is transferred to heirs, they own it- they could do anything with it. Including lease it out to your sworn enemies. Imagine what they could do with your entire digital footprint. Right to privacy goes hand in hand with the right to dignity. The question should be- how do we preserve the legacy of this person as they left it?
On 19 Sep 2018, at 06:21, Thomas Kaberi via kictanet <kictanet@lists.kictanet.or.ke> wrote:
Thanks Grace for bringing this up.
I think we can borrow from the financial laws as to how to handle the rights of accessories and handling of data as personal property.
However we have to consider the following:
That data is not a drainable asset.
That currency is a key value aspect of data and thus immediate access may be of interest to some parties. E.g. health practitioners,
Given the interconnectedness value of data, preservation and exposure of the same may have impact in other parties I. E. Close relations.
On Sep 12, 2018 11:58 PM, "Grace Bomu via kictanet" <kictanet@lists.kictanet.or.ke <mailto:kictanet@lists.kictanet.or.ke>> wrote: Listers, As we continue to discuss the data protection bill, an issue that has come up and is not captured in the proposed laws is the issue of legacy. For example, a viral clipping in social media has a newspaper report stating that a woman who was recently murdered was HIV positive. Normally, HIV status is sensitive personal information that would not be disclosed. Which begs the question, what should happen to personal data on the death of a person? Should we treat data as property that is transferred during succession or should anyone with a legitimate interest be able to access it? Should data processors/controllers have to delete such data?
Is this something that should be addressed in the proposed law or should we wait for judicial interpretation?
-- Grace Mutung'u Skype: gracebomu @Bomu PGP ID : 0x33A3450F
_______________________________________________ kictanet mailing list kictanet@lists.kictanet.or.ke <mailto:kictanet@lists.kictanet.or.ke> https://lists.kictanet.or.ke/mailman/listinfo/kictanet <https://lists.kictanet.or.ke/mailman/listinfo/kictanet> Twitter: http://twitter.com/kictanet <http://twitter.com/kictanet> Facebook: https://www.facebook.com/KICTANet/ <https://www.facebook.com/KICTANet/> Domain Registration sponsored by www.eacdirectory.co.ke <http://www.eacdirectory.co.ke/>
Unsubscribe or change your options at https://lists.kictanet.or.ke/mailman/options/kictanet/thomaskaberi%40gmail.c... <https://lists.kictanet.or.ke/mailman/options/kictanet/thomaskaberi%40gmail.com>
The Kenya ICT Action Network (KICTANet) is a multi-stakeholder platform for people and institutions interested and involved in ICT policy and regulation. The network aims to act as a catalyst for reform in the ICT sector in support of the national aim of ICT enabled growth and development.
KICTANetiquette : Adhere to the same standards of acceptable behaviors online that you follow in real life: respect people's times and bandwidth, share knowledge, don't flame or abuse or personalize, respect privacy, do not spam, do not market your wares or qualifications.
_______________________________________________ kictanet mailing list kictanet@lists.kictanet.or.ke <mailto:kictanet@lists.kictanet.or.ke> https://lists.kictanet.or.ke/mailman/listinfo/kictanet <https://lists.kictanet.or.ke/mailman/listinfo/kictanet> Twitter: http://twitter.com/kictanet <http://twitter.com/kictanet> Facebook: https://www.facebook.com/KICTANet/ <https://www.facebook.com/KICTANet/> Domain Registration sponsored by www.eacdirectory.co.ke <http://www.eacdirectory.co.ke/>
Unsubscribe or change your options at https://lists.kictanet.or.ke/mailman/options/kictanet/kaninimutemi%40gmail.c...
The Kenya ICT Action Network (KICTANet) is a multi-stakeholder platform for people and institutions interested and involved in ICT policy and regulation. The network aims to act as a catalyst for reform in the ICT sector in support of the national aim of ICT enabled growth and development.
KICTANetiquette : Adhere to the same standards of acceptable behaviors online that you follow in real life: respect people's times and bandwidth, share knowledge, don't flame or abuse or personalize, respect privacy, do not spam, do not market your wares or qualifications.

Which one would apply where a platform/service provider has got their own policy? Meetup Member Restrictions "Deceased Member Policy If a member or organizer passes away, Meetup cannot provide access to their account, even to family members or people acting on the behalf of the estate. Meetup will work with families and honor their wishes if they choose to close accounts or Meetup groups, or transfer them to another member." Be blessed.Regards/Wangari --- Pray God Bless. 2013Wangari circa - "Being of the Light, We are Restored Through Faith in Mind, Body and Spirit; We Manifest The Kingdom of God on Earth". On Thursday, 20 September 2018, 11:52:03 GMT+3, kanini mutemi via kictanet <kictanet@lists.kictanet.or.ke> wrote: Good question Grace. I propose– Data protection should not die with the person. This does not mean that the data subjects rights should be transferred to executors or administrators. 1. Some rights should be attached to the person. e.g. access and consent . This right should die with the person. 2. Retention of data should be subject to the Limitation of Actions Act to allow executors and administrators to bring any law suits for which that data could be used as evidence. I am uncomfortable with dealing with data as inheritable property generally. Using the example of land- once land is transferred to heirs, they own it- they could do anything with it. Including lease it out to your sworn enemies. Imagine what they could do with your entire digital footprint. Right to privacy goes hand in hand with the right to dignity. The question should be- how do we preserve the legacy of this person as they left it? On 19 Sep 2018, at 06:21, Thomas Kaberi via kictanet <kictanet@lists.kictanet.or.ke> wrote: Thanks Grace for bringing this up. I think we can borrow from the financial laws as to how to handle the rights of accessories and handling of data as personal property. However we have to consider the following: That data is not a drainable asset. That currency is a key value aspect of data and thus immediate access may be of interest to some parties. E.g. health practitioners, Given the interconnectedness value of data, preservation and exposure of the same may have impact in other parties I. E. Close relations. On Sep 12, 2018 11:58 PM, "Grace Bomu via kictanet" <kictanet@lists.kictanet.or.ke> wrote: Listers, As we continue to discuss the data protection bill, an issue that has come up and is not captured in the proposed laws is the issue of legacy. For example, a viral clipping in social media has a newspaper report stating that a woman who was recently murdered was HIV positive. Normally, HIV status is sensitive personal information that would not be disclosed. Which begs the question, what should happen to personal data on the death of a person? Should we treat data as property that is transferred during succession or should anyone with a legitimate interest be able to access it? Should data processors/controllers have to delete such data? Is this something that should be addressed in the proposed law or should we wait for judicial interpretation? -- Grace Mutung'u Skype: gracebomu @Bomu PGP ID : 0x33A3450F _______________________________________________ kictanet mailing list kictanet@lists.kictanet.or.ke https://lists.kictanet.or.ke/mailman/listinfo/kictanet Twitter: http://twitter.com/kictanet Facebook: https://www.facebook.com/KICTANet/ Domain Registration sponsored by www.eacdirectory.co.ke Unsubscribe or change your options at https://lists.kictanet.or.ke/mailman/options/kictanet/thomaskaberi%40gmail.c... The Kenya ICT Action Network (KICTANet) is a multi-stakeholder platform for people and institutions interested and involved in ICT policy and regulation. The network aims to act as a catalyst for reform in the ICT sector in support of the national aim of ICT enabled growth and development. KICTANetiquette : Adhere to the same standards of acceptable behaviors online that you follow in real life: respect people's times and bandwidth, share knowledge, don't flame or abuse or personalize, respect privacy, do not spam, do not market your wares or qualifications. _______________________________________________ kictanet mailing list kictanet@lists.kictanet.or.ke https://lists.kictanet.or.ke/mailman/listinfo/kictanet Twitter: http://twitter.com/kictanet Facebook: https://www.facebook.com/KICTANet/ Domain Registration sponsored by www.eacdirectory.co.ke Unsubscribe or change your options at https://lists.kictanet.or.ke/mailman/options/kictanet/kaninimutemi%40gmail.c... The Kenya ICT Action Network (KICTANet) is a multi-stakeholder platform for people and institutions interested and involved in ICT policy and regulation. The network aims to act as a catalyst for reform in the ICT sector in support of the national aim of ICT enabled growth and development. KICTANetiquette : Adhere to the same standards of acceptable behaviors online that you follow in real life: respect people's times and bandwidth, share knowledge, don't flame or abuse or personalize, respect privacy, do not spam, do not market your wares or qualifications. _______________________________________________ kictanet mailing list kictanet@lists.kictanet.or.ke https://lists.kictanet.or.ke/mailman/listinfo/kictanet Twitter: http://twitter.com/kictanet Facebook: https://www.facebook.com/KICTANet/ Domain Registration sponsored by www.eacdirectory.co.ke Unsubscribe or change your options at https://lists.kictanet.or.ke/mailman/options/kictanet/wangarikabiru%40yahoo.... The Kenya ICT Action Network (KICTANet) is a multi-stakeholder platform for people and institutions interested and involved in ICT policy and regulation. The network aims to act as a catalyst for reform in the ICT sector in support of the national aim of ICT enabled growth and development. KICTANetiquette : Adhere to the same standards of acceptable behaviors online that you follow in real life: respect people's times and bandwidth, share knowledge, don't flame or abuse or personalize, respect privacy, do not spam, do not market your wares or qualifications.
participants (10)
-
Alex Comninos
-
Baba Jambo Owino
-
Dr. Thomas A. Senaji
-
florence mwangangi
-
Grace Bomu
-
kanini mutemi
-
Mallory Knodel
-
Martha Muriuki
-
Thomas Kaberi
-
WANGARI KABIRU