Kenya Data Protection Act 2019
Kenyan coverage is delivered as aggregated regional intelligence, which keeps producer-level personal data out of the pipeline by design. Where a client's own supply-chain records include producers, transfer conditions and retention are documented before ingest.
- Kenya
- Processing of personal data relating to Kenyan producers, including transfer outside Kenya for analysis or reporting.
- 3
- 0
Register as a data controller or processor where required.
Establish a lawful basis and document transfer outside Kenya.
Honour data-subject rights and retention limits.
Who it applies to#
Processing of personal data relating to Kenyan producers, including transfer outside Kenya for analysis or reporting.
Core obligations#
- Register as a data controller or processor where required.
- Establish a lawful basis and document transfer outside Kenya.
- Honour data-subject rights and retention limits.
What Phoeniks contributes#
- Aggregated delivery as the default for Kenyan coverage.
- Documented transfer position before any producer-level record is ingested.
- Retention and masking rules applied per client contract.
Frequently asked
- Can Phoeniks process Kenyan producer records?
- Only under a documented lawful basis and transfer position agreed with the client. The default delivery is aggregated and contains no producer-level personal data.
Related pages
EUDR — EU Deforestation Regulation
Operators and traders placing cattle, cocoa, coffee, oil palm, rubber, soya or wood on the EU market. How Phoeniks supplies source-attributed farmland and yield evidence against EUDR obligations.
CSRD — Corporate Sustainability Reporting Directive
Large EU companies and listed SMEs reporting under ESRS, including value-chain impacts on land use. How Phoeniks supplies source-attributed farmland and yield evidence against CSRD obligations.
SFDR and PCAF — sustainability disclosure and financed emissions
Financial market participants disclosing principal adverse impacts, and lenders measuring financed emissions in agriculture. How Phoeniks supplies source-attributed farmland and yield evidence against SFDR / PCAF obligations.
GDPR and the EU AI Act
Processing of personal data in land records, and transparency duties where model output informs decisions about people. How Phoeniks supplies source-attributed farmland and yield evidence against GDPR / EU AI Act obligations.
SOC 2 — security and availability controls
Vendor security review for institutions procuring a data or analytics platform. How Phoeniks supplies source-attributed farmland and yield evidence against SOC 2 obligations.
LGPD — Brazilian data protection law
Processing of personal data relating to Brazilian rural properties and their holders. How Phoeniks supplies source-attributed farmland and yield evidence against LGPD obligations.
PDPA — Thai Personal Data Protection Act
Personal data processing tied to Thai agricultural land and rice production records. How Phoeniks supplies source-attributed farmland and yield evidence against PDPA obligations.
DPDP — India Digital Personal Data Protection Act
Personal data of Indian data principals in land and production records. How Phoeniks supplies source-attributed farmland and yield evidence against DPDP obligations.
CSDDD — Corporate Sustainability Due Diligence Directive
Large EU and non-EU companies required to identify, prevent and account for adverse environmental and human-rights impacts across their chain of activities. How Phoeniks supplies source-attributed farmland and yield evidence against CSDDD obligations.
TNFD — nature-related financial disclosures
Financial institutions and corporates disclosing nature-related dependencies, impacts, risks and opportunities under the LEAP approach. How Phoeniks supplies source-attributed farmland and yield evidence against TNFD obligations.
EU Taxonomy — environmentally sustainable activities
Financial and non-financial undertakings reporting the share of turnover, capex and opex aligned with the taxonomy's technical screening criteria. How Phoeniks supplies source-attributed farmland and yield evidence against EU Taxonomy obligations.
IFRS S2 — climate-related disclosures (ISSB)
Entities applying ISSB standards to disclose climate-related risks, opportunities, metrics and scenario resilience. How Phoeniks supplies source-attributed farmland and yield evidence against IFRS S2 / ISSB obligations.
Bank climate risk — Basel and ECB supervisory expectations
Banks integrating climate and environmental risk into credit granting, ICAAP, stress testing and Pillar 3 disclosure. How Phoeniks supplies source-attributed farmland and yield evidence against Bank climate risk obligations.
Solvency II — insurer model governance
Insurers and reinsurers whose technical provisions or internal models rely on external data and third-party model output. How Phoeniks supplies source-attributed farmland and yield evidence against Solvency II obligations.
EU AI Act — transparency and model governance
Providers and deployers of AI systems used in decisions affecting access to credit, insurance or other essential services. How Phoeniks supplies source-attributed farmland and yield evidence against EU AI Act obligations.
ISO 27001 — information security management
Institutional buyers whose vendor onboarding requires a certified information security management system alongside SOC 2 evidence. How Phoeniks supplies source-attributed farmland and yield evidence against ISO 27001 obligations.
Carbon MRV — Verra, Gold Standard and market integrity rules
Project developers and buyers needing monitoring, reporting and verification evidence for agricultural soil-carbon and land-use claims. How Phoeniks supplies source-attributed farmland and yield evidence against Carbon MRV obligations.
Privacy Act 1988 — Australian agricultural data
Handling of personal information about Australian landholders, alongside national agricultural data standards. How Phoeniks supplies source-attributed farmland and yield evidence against Privacy Act 1988 obligations.
EUDR vs CSRD
EUDR and CSRD side by side: who is in scope, what evidence each demands, and where the two regimes overlap.
EUDR vs SFDR
Compare the EU Deforestation Regulation with the Sustainable Finance Disclosure Regulation: scope, obligated party, evidence, and how farmland data serves both.
See also
Request access
Institutional access. No self-serve trial.