

Data Protection in the Civic Space: Training on the Data Protection Act for CSOs in Kenya
The realization of fundamental freedoms and rights promised in Chapter 4 of the constitution are dependent on evidence-based policy, budget-making and programming that targets the marginalized and poorest communities in line with our national values. Article 31 of the Constitution of Kenya provides for the right to privacy, which includes the right not to have information relating to their family or private affairs revealed and the privacy of their communications infringed. The Data Protection Act, 2019 was enacted to give effect to Article 31(c) and (d) and establish the Office of the Data Commissioner to oversee the implementation and enforcement of the right to privacy.
The Data Protection Act (DPA) in Kenya is a law that was enacted to regulate the collection, use, processing, storage, and sharing of personal data in Kenya. The DPA was signed into law in November 2019 and became operational in November 2020. The DPA establishes the Office of the Data Protection Commissioner (ODPC) as the regulatory body responsible for enforcing the provisions of the Act.
Amnesty International Kenya is collaborating with Maono Space to implement a six-month engagement that aim at scaling up data governance and the right to privacy campaigns. The main objective of this project is to promote locally-led awareness on Digital Rights and Data Protection among CSOs in Kilifi County. The specific objectives of this project include;
- To capacity build 20 local CSOs working in different thematic areas in Kilifi County, Kenya on digital rights and data protection.
- To support the trained 20 local CSOs in kick starting their compliance journey with the Kenya Data Protection Act, 2019 within their organizations.
- To strengthen peer-peer implementation learning for the 20 organizations.
CRITERIA
Eligible organizations include;
- Organizations that are legally registered and have an operational history of at least 6 months in Kilifi county
- Organizations operating and serving citizens of Kilifi County.
- Organizations willing to assign a representative to the project for a minimum of 5 months (May-September). The tentative schedule for the engagement is as below:
- 1st Session 1-25th-27th May 2026
- 2nd Session 2-8th-9th June 2026
- 3rd Session 3-11th-13th August 2026
- 4th Session 4-1st-3rd September 2026
- 5th Session 22nd-25th September 2026
- Organizations willing to start their compliance with the Office of the Data Protection Commissioner and register as data handlers at the end of the project.
NOTE: This engagement is on voluntary basis and therefore no monetary benefits will be gained from participation.
INSTRUCTIONS FOR APPLICATION
Interested organizations should provide their details via the link provided below stating their responses as accurate as possible.
Data Protection in the Civic Space-Kilifi County – Fill out form
SUBMISSION AND TIMELINE
All interested organizations should submit their interest on or before 8th May 2026. No applications will be accepted after the deadline. We will review applications on an ongoing basis.
Specific questions and inquiries with regard to this project request for applications should be directed to the project team via [email protected] and/or [email protected] at least 3 days before the stated closing date.

