DATA PROTECTION AND PRIVACY

In today’s data-driven financial environment, personal data is one of the most valuable — and most vulnerable — assets. Financial institutions, including microfinance institutions and banks, handle large volumes of sensitive customer information daily, making them prime targets for data breaches, fraud, and regulatory scrutiny.

This course provides a practical, Kenya-focused understanding of data protection and privacy, grounded in the Data Protection Act, 2019 and relevant regulatory frameworks. It is designed to equip branch managers, sector managers, and financial services professionals with the knowledge and tools needed to handle customer data responsibly, lawfully, and securely.

Participants will explore key concepts such as personal data, sensitive data, data subject rights, and lawful processing, while gaining a clear understanding of their roles as data controllers or processors. The course goes beyond theory by focusing on real-world scenarios, including credit processes, CRB interactions, digital lending risks, and day-to-day branch operations.

Through practical case studies, activities, and assessments, learners will develop the ability to:

• Apply the 7 data protection principles in operational settings
• Manage customer consent and data subject rights effectively
• Identify and mitigate data protection risks in lending and digital finance
• Implement secure data handling practices across teams
• Respond appropriately to data breaches and incidents