The Office of the Data Protection Commissioner (ODPC) has proposed new draft guidelines that will significantly impact how Kenya's transport industry handles passenger and operational data, aiming to align operators with the Data Protection Act 2019.

• The proposed rules will affect matatu Saccos, bus companies, logistics firms, and ride-hailing platforms that collect personal data.
• Key requirements include clear definitions for data collection, storage, processing, and sharing, alongside stronger consent mechanisms for commuters.
• The ODPC also calls for stricter rules on cross-border data transfers and may require transport firms to appoint Data Protection Officers.