Do we need to register with the Data Commissioner?

It depends on turnover, staff numbers and the nature of the processing. Some activities require registration regardless of size, including processing on a large scale, and processing health, financial or children’s data.

We had a data breach. What are the deadlines?

Notification to the Office of the Data Protection Commissioner is required without undue delay and within seventy-two hours where the breach presents a real risk to the rights of the people affected, with communication to those people where that risk is high.

Is a climate commitment legally binding?

A public statement can create exposure under consumer, securities and contract law even where no climate statute applies. Before a target is announced we look at what has been promised, to whom, and what evidence will support it.

Can IVIO Advocates act as our outsourced compliance function?

Yes. We take on fractional compliance management with a defined scope, a reporting line to the board, and an agreed monthly fee.

Should I sue or settle?

It depends on what you can prove, what the other side can pay, and what the delay costs you. We give you the merits and the recovery prospects separately.

Do we need a shareholders’ agreement if we have articles?

Usually yes. The articles govern the company; the shareholders’ agreement governs the relationship between the owners.

Is a handwritten will valid in Kenya?

A written will must be signed by the maker and attested by at least two competent witnesses who are not beneficiaries. Oral wills are recognised in narrow circumstances only.

How long does probate take?

An uncontested grant, with complete documents and a clear asset schedule, commonly takes several months including the statutory period before confirmation.

Innovations by IVIO Advocates

Firm innovations.

IVIO Advocates builds products: platforms, databases and advisory programmes for organisations whose compliance obligations have outgrown a folder of policies.

Firm Verti

A product of IVIO Advocates

DataHub | Data Protection Africa

A data-protection repository for practitioners, with a fines and awards database that makes enforcement comparable across sectors, years and countries, and an Africa Country Reporter Network. Nominated "Most Impactful Data Privacy Product" by the PICCASO Awards Africa 2025.

900+ users24,000+ itemsKSh 85.6M+ in penalties tracked

dataprotectionafrica.com

A product of IVIO Advocates

Wosia

A lawyer-backed platform for making a structured Kenyan will online, in about thirty minutes. Start free and pay to download the finished will. Organisations can offer access to members and staff.

wosia.co.ke

A product by IVIO Advocates

The Village

A network of lawyers and business leaders working on climate action and a just transition in Africa. It supports the Chancery Lane Project, publishes free climate-conscious contract clauses, and organises into working groups — the Tribes — on governance, supply chain, investments, insurance, construction, government, and gender and youth.

zerocarbonvillage.africa

A product of IVIO Advocates

Data Governance

MZIZI Africa works on data governance - the systems, institutions, people and data that decide whether an organisation can be trusted with information. Our flagship is the health sector, where data is most sensitive and the cost of weak governance is highest. Through advisory, the DataHub intelligence platform, and practical compliance tooling, we help health institutions move from box-ticking to data they — and their patients — can actually rely on.

A DataHub | Data Protection Africa imprint · Available now

Data Protection in Kenya

The Law, the Cases, and the Compliance Playbook

An annotated guide to the Data Protection Act 2019 as it has actually been applied, written for in-house counsel and compliance officers by Margaret A. Odhiambo, Partner at IVIO Advocates and Data Protection Officer for the firm.

32
Cases: Annotated
Throughout

Buy the bookSecure checkout on Pesapal — M-Pesa or card