Processing inventory
List people, fields, sensitive categories, purpose, source, recipients, systems, vendors, locations, access, retention event, and deletion method.
Data controls / ODPC-aware engineering
Make every Kenya data role and safeguard inspectable.
ODPC guidance explains regulatory responsibilities, but a project still needs an operational record showing which entity decides each purpose, who handles the data, where it moves, what protects it, and how a person can exercise rights.
Operating lanes
Treat registration as a question to resolve, not a badge to claim.
Thresholds, exemptions, sectors, processing roles, and cross-border facts matter. Faith Forge Labs exposes the technical evidence; the organization and qualified reviewer determine the obligation.Controller and processor map
Record who chooses purposes and means, who acts on instructions, contract owners, sub-processors, and the evidence supporting each classification.
Safeguards and requests
Implement least access, authentication, logs, backups, secure changes, and practical routes for information, access, correction, objection, deletion, and complaints where applicable.
Transfers and incidents
Document data leaving Kenya, hosting/support access, safeguards, notification decision owners, investigation evidence, containment, recovery, and lessons.
Runbook
Build controls from verified decisions.
- 01
Map
Trace browser, API, database, analytics, messages, logs, exports, support tools, backups, and providers.
- 02
Resolve
Have the client confirm purposes, roles, registration, notices, lawful processing, transfers, retention, requests, and incident responsibilities.
- 03
Implement
Limit fields and access, make administrative actions auditable, protect secrets, and keep failures from leaking personal information.
- 04
Prove
Exercise access, correction, export, deletion, retention, restore, revoked access, provider exit, and an incident tabletop before launch.
ODPC material is authoritative; this site is not.
Use the linked Office of the Data Protection Commissioner sources and qualified review for the real organization. Faith Forge Labs does not certify registration or compliance.