The Kenya Medical Practitioners and Dentists Council (KMPDC) has announced that all new health facilities will be required to have a valid certificate of data handler/processor from the Office of the Data Protection Commissioner (ODPC) beginning January 2025.
In a notice on Tuesday, December 17, KMPDC noted that existing health facilities are required to obtain the new certification by March 31, 2025.
The council explained that the requirement is a new compliance under the Data Protection Act, 2019, which mandates the regulation of personal data processing to protect individuals’ privacy.
"KMPDC wishes to inform all health institutions of a new compliance requirement under the Data Protection Act, 2019. The Act, implemented through the Office of the Data Protection Commissioner (ODPC), mandates the regulation of personal data processing to protect individuals’ privacy and mitigate the risk of data misuse.
"Effective 1st January 2025, all new health facility registrations must include a valid Certificate of Data Handler/Processor issued by the ODPC. Additionally, existing facilities must obtain this certification within three (3) months, by 31st March 2025," read part of the notice.
Read More
At the same time, KMPDC emphasized that the new requirement highlights the critical importance of safeguarding patient privacy, a fundamental aspect of ethical medical practice.
"This requirement underscores the critical importance of safeguarding patient privacy, a fundamental aspect of ethical medical practice. By ensuring the responsible and lawful handling of personal data, health institutions not only adhere to regulatory standards but also strengthen patient trust and enhance safety," KMPDC stated.
The council affirmed that it remains steadfast in its mission to uphold the highest standards of professionalism, accountability and respect for individual rights in the healthcare sector.
