Reference
Guides for Kenyan businesses
Four reference articles, written for an owner or an IT manager rather than for a lawyer or a security conference. Every legal claim is traced to the instrument it comes from, every figure to the body that published it, and each guide says plainly where its usefulness ends.
Contents
The library
-
01
ODPC registration in Kenya: who must register, what it costs, and how
The twelve purposes that make registration mandatory regardless of size, the turnover-and-headcount exemption, the fee bands, and the application itself.
-
02
Kenya’s Data Protection Act 2019: what it actually requires of a small business
The principles, the security measures the Regulations spell out, breach notification, data-subject deadlines, and what a fine can actually come to.
-
03
How to stop criminals sending email as your business: SPF, DKIM and DMARC
What each of the three records does, annotated examples you can copy, the five mistakes we see most, and a staged rollout to enforcement.
-
04
What a stranger can already see about your business online
The four public records anyone can read about your domain, what each one gives away, and how to check yours in about ten minutes.
The reasoning
Why we publish these
Most of what a small Kenyan business needs to know about data protection and email security is public, free and badly explained. Writing it down properly costs us a few days and earns the right to be taken seriously by people who have no reason yet to trust a new company. If a guide is enough for you to fix the problem yourself and never speak to us, that is a good outcome, and it is the one they were written for.
What we sell sits alongside them and is described the same way. The free snapshot is one domain, one report, written by a person and sent by email in one to two business days. We read public records — DNS, mail records, certificate transparency logs and the domain registry. We never connect to your website or servers, never log in, and never test your defences. It is not a penetration test, it includes no monitoring or alerting, and it does not make your business compliant with the Data Protection Act.
The guides are general information about Kenyan law and public internet records. They are not legal advice and are no substitute for advice on your own circumstances.