The Office of the Data Protection Commissioner (ODPC) in Kenya has given data controllers and processors 14 days to renew expired data certificates or face enforcement action. The regulator issued a public notice on August 28, 2026, reminding organizations handling personal data to regularize their registration status. The deadline applies to entities that have not renewed their data protection certificates. The ODPC emphasized the importance of compliance with data protection laws to ensure the security and privacy of personal information. Organizations are required to apply for renewal to avoid penalties. The notice highlights ongoing efforts to strengthen data governance in the country.