Basic details about your organization. These appear in the header of your privacy policy.
What personal data does your business collect? Select all that apply. This determines Sections 2 and 3 of your privacy policy.
What are your purposes for processing personal data? The DPA 2019 requires you to state these explicitly (Section 25(c), Section 29(c)).
Who do you share data with, and does any data leave Kenya? Section 48 of the DPA 2019 governs cross-border transfers.
Section 41 of the DPA 2019 requires data protection by design. Tell us about your security measures.