The Data Protection (Civil Registration) Regulations

8. Collection of personal data.

Edition: 2022-12-31 · In force

8. Collection of personal data.

(1)A civil registration entity shall have regard to the following during the data collection—

(a)collect personal data which it is permitted to collect by the data subject;

(b)undertake steps to ensure the quality of personal data; and

(c)undertake processes to secure personal data.

(2)Where a civil registration entity intends to use personal data for a new purpose, it shall ensure that the new purpose is compatible with the initial purpose.

(3)Where the new purpose is not compatible with the initial purpose, the civil registration entity shall seek fresh consent from the data subject.

(4)Subject to section 32(2) and (3) of the Act, the data subject shall be informed of the implications of providing, withholding or withdrawing consent for the new purpose by the civil registration entity.

← Previous provision Next provision →

Source: Kenya Law