MZIZI Compliance Bites

  MZIZI Africa works with organizations to set up compliance systems rooted in ethics.  Our Data Privacy Library is 1 of 16 law libraries containing easy to deploy employee Learning & Communication resources and through which we help set up Data Protection Act, 2019 (DPA,19) compliant processes.  This requires that we document our client's data processing inventory to include HR processes.  75% of the respondents to our DPA,19 Self Assessment Survey admit to not having an employee Privacy policy.  Data Privacy & Recruitment When we hold training or consultancy sessions we define personal data simply: Any data that allows you to identify a person is personal data. This includes names, photos, vehicle registration numbers, addresses, company names of sole traders or in the context of a venue “the gentleman with one red shoe” if there is only one male person wearing a red shoe.   CV Applicant data is personal data. An applicant’s CV, whether rando...

  Organizations collect employee data for purposes of managing the relationship and to facilitate decision making. The Kenyan Data Protection Act, 2019 (DPA,19) is built around 7 principles, we will use those principles to set up a framework for reviewing the lawful use of employee data. But first: Anonymized and pseudonymized data is not covered by the DPA,19. DPA,19 does not extend to a deceased person's data. Special category data (trade union membership, sex, religion, health, criminality etc) are considered sensitive and the law extends particular protections to them. employees have 7 rights under data protection laws This will require additional processes to be in place which is out of scope for this article. 1. Lawfulness, fairness & transparency  Have a valid reason(s) for processing employee data.  You can use different reasons for different contexts (recruitment, on-boarding, performance management, succession planning, discipline, separation) and in respect...