Policies & Legal Framework

Data Protection and Access Requirements

Draft for consultation: this follows the draft NFMS/FIP Data Sharing Protocol and Governance Structure, which take effect when approved by the Principal Secretary, State Department for Forestry.

• All data sharing and processing on the NFMS/FIP complies with the Data Protection Act, 2019 and the Office of the Data Protection Commissioner.
• Personal or sensitive information is processed only where lawful, necessary and proportionate to NFMS/FIP monitoring and reporting.
• Access is given at three levels (public, internal, restricted); restricted data needs prior authorisation by KFS.
• Terms are read in line with the Constitution of Kenya, the Data Protection Act, 2019 and other applicable laws.
• The platform follows national cybersecurity policy, including the Kenya National Cybersecurity Strategy, and the national e-Government information exchange frameworks.

• Data classification and access levels