The ORPP is duly licensed as data controller and handler by Office of the Data Protection Commissioner.
Some of the ORPP institutional measures in place on data protection are: continued consultations/guidance by the Office of the Data Protection Commissioner, requiring citizens to grant consent before being recruited as political parties members, instituting personal data measures across Office operational processes, being subject to regulatory data protection audits, and mainstreaming personal data protection through the 2025/28 Strategic Plan. The Plan sets aside Digital Transformation and Data Management as one of the pillars.
To build on these efforts, an ORPP team, with the support of officials from the Office of the Data Protection Commissioner officials held a review session of the draft Data Protection Policy, 9th to 11th December 2025.
Registrar J C Lorionokou, in a virtual address to the team, noted,
“Personal data protection is a subject for us all as corporates and individuals. We must therefore, embrace it and implement all necessary measures as the data protection law, regulations, and raft of guidance notes require”.
The policy under development should therefore, not just be operational but also must address emerging technological and other evolving issues that come with the data protection phenomenon, now gaining traction across spheres of life”, noted the Registrar as he expressed gratitude to the Data Commissioner and her team for the continued guidance to ORPP.
“The insights the ORPP has gained in the implementation of its data protection measures and findings of an audit carried out, give the impetus to improve and spark continuous learning and research on this critical subject”, Assistant Registrar, CS Agatha Wahome observed.
Assistant Registrar, CPA Florence Birya, recollected the ORPP mutual engagement with ODPC, key one being in 2021, when the ORPP enlisted and rolled out, for the first time in the history of Kenya, the online platforms for citizens to access and interact with political parties’ membership services.
“The Data Protection Policy will further crystallize and provide a structured framework to already existing ORPP data protection initiatives through the progressive motions provided in the policy.”
CPA Birya said while appreciating the ODPC’s continued involvement of the ORPP to its engagements, including a past stakeholders’ input on the Data Protection Regulations, already in force.
The policy review meeting was coordinated by the ICT departmental team with staff representation of staff from various departments.