ODPC lane
Use the regulator for processing roles, registration guidance, safeguards, requests, transfers, complaints, and current data-protection material.
Source desk / official before secondary
Open the Kenya authority that owns the unresolved part of the system.
A search summary is not a requirement. Save the official page or document, review date, relevant passage, actual project decision, owner, and the trigger that will cause it to be checked again.
Operating lanes
Four source lanes cover different decisions.
Do not use a communications statistic to settle a privacy question or a data FAQ to infer payment-provider access.Communications lane
Use CA quarterly reports to test device, network, broadband, feature-phone, mobile-money, and cybersecurity assumptions.
Business-service lane
Use BRS for the current registry owner and digital service route; the client supplies its actual entity and authority.
Policy lane
Use the Ministry policy library for current ICT, cloud, AI, cybersecurity, and digital-government context.
Runbook
Maintain sources as dependencies.
- 01
Capture
Record authority, title, URL, publication or update date, access date, language, and the exact question being answered.
- 02
Classify
Mark the item as published fact, client fact, professional conclusion, provider requirement, implementation choice, or unresolved question.
- 03
Apply
Attach the evidence to a field, flow, test, content statement, provider boundary, release control, or decision owner.
- 04
Recheck
Review again when the provider, data, users, transaction, service area, authority guidance, or product scope changes.
Official-source board
Open the regulator or service owner before fixing a requirement.
Office of the Data Protection Commissioner
Use ODPC material to frame data roles, registration questions, safeguards, rights, transfers, and current compliance guidance.
Recheck this authority when scope or release facts change.Communications Authority statistics
Use current quarterly reporting to test assumptions about devices, mobile broadband, feature phones, networks, and digital-service access.
Recheck this authority when scope or release facts change.Business Registration Service
Use BRS to verify the current registry service owner and client responsibilities; never embed guessed registry requirements.
Recheck this authority when scope or release facts change.Ministry ICT policy documents
Use the maintained policy library for current digital, cloud, AI, cybersecurity, and communications context.
Recheck this authority when scope or release facts change.The official source still needs interpretation.
Applicability belongs to the Kenya organization, provider, authority, and qualified advisers. Faith Forge Labs turns approved decisions into technical controls.