Skip to content

Policy pillar deep dive · dataset policy-2026-Q3-r16

Cross-border data flows

Adequacy, permits and transfer conditions for data leaving the country.

Coverage
100% verified
Claims
1 claims
Sources
2 sources
Countries covered
1/4 markets
Structured gaps
3 gaps

Coverage across the four markets

Uganda UG

no researched claims

structured gap

Rwanda RW

no researched claims

structured gap

Tanzania TZ

no researched claims

structured gap

Kenya KE

100%

1 verified · 0 partial · 0 other

Open the same tiles in the coverage matrix to compare this pillar against every other pillar.

Claims & evidence trails

Kenya KE

1 claim
  • VerifiedKE-XB-C1

    Kenya's DPA restricts cross-border transfers of personal data to conditions (consent, adequacy-style protection, safeguards) rather than prohibiting them outright.

    Single T3 source pending statute text. Upgrade path: capture DPA 2019 transfer provisions (ss.48-49) from Kenya Law (AKN JS shell on 2026-09-22; retry Wayback with direct timestamped snapshot), then verify. | r10 upgrade: DPA statute text (T1 AKN capture, 2026-09-22) evidences the transfer-conditions regime (s.25(h): safeguards-or-consent limb).

    View evidence trail · 2 sources ▾
    1. DLA Piper — DLA Piper Data Protection Laws of the World - Kenya chapter (country profiles landing)T3 · snippetData Protection Laws of the World ... Kenya Kosovo Kuwait ... (country index captured; Kenya chapter content not rendered in text extraction).
    2. new.kenyalaw.org — kenyalaw-dpa-aknT1 · captured

Sources behind this pillar

Structured gaps

Uganda — structured gap, not a finding

Partial coverage via UG-DP-C5; EAC-level instruments pending

Expected sources: EAC Legal Framework for Cyberlaws; EAC Data Protection & Privacy Policy (2021)

Upgrade path: Research EAC instruments when the regional comparison phase starts

Rwanda — structured gap, not a finding

Strong national coverage (Art. 48/50); EAC-level instruments pending

Expected sources: EAC Data Protection & Privacy Policy (2021)

Upgrade path: Regional comparison phase

Tanzania — structured gap, not a finding

Strong national coverage (s.31/32 + permit machinery); EAC-level instruments pending

Expected sources: EAC Data Protection & Privacy Policy (2021)

Upgrade path: Regional comparison phase

policy-2026-Q3-r16 · 1 claim in this pillar · 2 sources · editorial gate: EDITORIAL REVIEW COMPLETE (Uganda, Rwanda, Tanzania, Kenya - all four country pipelines approved for publication)