Selling citizens’ personal information would likely violate several core principles of data protection, including purpose limitation, fairness and lawful processing.

A proposed policy seeks to create a State-run marketplace for datasets collected through platforms such as eCitizen and government agencies.

Kenya’s Data Protection Act has changed how organisations think about accountability for personal information.

Selling citizens’ personal information would likely violate several core principles of data protection, including purpose limitation, fairness and lawful processing.