CA Celebrates Immaculate Kassait’s Legacy in Advancing Data Protection in Kenya
The Communications Authority of Kenya (CA) yesterday joined stakeholders in the data protection and governance sector in celebrating the legacy of Ms. Immaculate Kassait, Kenya’s inaugural Data Commissioner, following the conclusion of her tenure at the Office of the Data Protection Commissioner (ODPC).
In a speech delivered on his behalf by Mr. Samwel Rambo, Deputy Director, Legal Services, during a farewell celebration organised by Amnesty International Kenya, CA Director General Mr. David Mugonyi commended Ms. Kassait for her pioneering leadership in establishing and strengthening the ODPC as an independent institution responsible for safeguarding the privacy rights of Kenyans.
Mr. Mugonyi noted that Ms. Kassait’s appointment in 2020 came at a defining moment in Kenya’s digital transformation, following the enactment of the Data Protection Act, 2019. While the legislation provided the foundation for protecting personal information, he observed that translating the legal framework into a fully operational institution required strategic leadership, resilience and sustained stakeholder engagement.
Recalling the early days of the ODPC, Mr. Mugonyi highlighted the support extended by the CA, which hosted the newly established office at the CA Centre in a modest office space. At the time, the institution began operations with fewer than ten employees, most of whom were on secondment.
He observed that, under Ms. Kassait’s leadership, the ODPC had grown into an established institution with its own headquarters and six regional offices.
He described these milestones as a significant institutional achievement, noting that building a public institution from the ground up requires more than technical expertise; it calls for vision, resilience, strategic direction and the ability to mobilise stakeholders towards a shared goal.
The CA Director General further underscored the importance of collaboration between the two institutions, noting that their respective mandates increasingly intersect amid the rapid growth of digital platforms, electronic communications, mobile financial services, artificial intelligence and other emerging technologies.
He observed that although the CA and ODPC have distinct statutory mandates, both institutions share a responsibility to foster a safe, secure, trusted and inclusive digital environment.
Over the years, the two institutions have strengthened their cooperation through various digital governance, regulatory and multi-agency initiatives. These include participation in technical review workshops convened by UNESCO to support the development of a unified, human rights-centred governance framework for digital platforms, internet integrity and online risk mitigation in Kenya.
The institutions have also worked together through national cybersecurity coordination frameworks, including the National Kenya Computer Incident Response Team Coordination Centre (National KE-CIRT/CC), alongside public awareness initiatives promoting responsible data practices, data hygiene and privacy in electronic communications.
Another notable area of cooperation was the joint regulatory engagement concerning the Worldcoin cryptocurrency project in Kenya. The CA and ODPC issued joint regulatory advisories and participated in a multi-agency task force established to examine the project's operations, data protection practices and mechanisms for obtaining informed consumer consent.
On behalf of the CA Board, Management and staff, Mr. Mugonyi expressed appreciation for the cordial working relationship and spirit of collaboration that had characterised the engagement between the two institutions.