The Capital Markets (Investment-Based Crowdfunding) Regulations

33. Data protection and privacy

Edition: 2022-12-31 · In force

33. Data protection and privacy

A crowdfunding platform operator—

(a)shall establish appropriate safeguards for ensuring the integrity of the information received and published;

(b)shall ensure security and confidentiality of information collected from both the issuers and investor to facilitate a crowdfunding transaction;

(c)shall maintain reliable and secure operating systems;

(d)shall install and ensure the operation of suitable backup facilities;

(e)shall develop and implement a written identity theft prevention program;

(f)shall provide detailed information on the data privacy rights of users and a description of the technical and organizational security measure taken to ensure integrity and confidentiality of the data; and

(g)shall comply with the Data Protection Act (Cap. 411C), to the extent applicable.

← Previous provision Next provision →

Source: Kenya Law