In November 2019, Kenya enacted the Data Protection Act (DPA). The Act sets up a framework for data processing activities in the country and creates obligations for data processors and controllers. Although...