Understanding National Biometric Databases Under the ODPC Act

As digitalization moves center stage across African governments, protecting citizen identity from third-party advertising algorithms presents an urgent regulatory task.

Kenya's proactive stance in passing the Data Protection Act (2019) was celebrated as a milestone for human rights. However, our direct review of corporate contracts linked to unified payment APIs indicates that basic safeguards are frequently bypassed under experimental technology initiatives.

Biometric information, ranging from facial landmarks to iris data, represents absolute, non-custodial identification markers. If compromised or traded, the user has zero recourse to change their authentication credentials, laying down systemic concerns for digital inclusion.

The Challenge of Enforcement

While the Office of the Data Protection Commissioner (ODPC) in Nairobi remains deeply dedicated to holding private corporations liable, budget ceilings and structural hurdles have impacted operational efficacy. Real investigations require that our public bodies remain independent from commercial lobbies.