ADVOKS GLOBAL · KENYA
The Data Protection (Civil Registration) Regulations
9. Limitation in processing of personal data.
Edition: 2022-12-31 · In force
9. Limitation in processing of personal data.
(1)A data subject may request a civil registration entity to restrict the processing of their personal data, pursuant to section 34 of the Act.(2)A request envisaged under paragraph (1) shall be in Form 1 set out in the First Schedule.(3)A civil registration entity shall upon receiving the request envisaged under paragraph (2)—(a)consider the restriction request;(b)respond in writing to the data subject within fourteen days from the date of receiving the restriction request;(c)indicate on its system that the processing of personal data has been restricted; and(d)notify any relevant third party where personal data subject to such restriction may have been shared.(4)Where a civil registration entity declines to comply with a request for restriction in processing, it shall within seven days notify the data subject of such decline giving reasons for the decision.(5)Where the application for restriction in limitation of processing of the data is declined, the data subject may appeal to the Data Commissioner.