The passing of Kenya’s Data Protection Act (No. 24 of 2019) (hereinafter “the Act”) on 25th November 2019 breathed life to the pre-existing right to privacy guaranteed under Article 31 of the Constitution, 2010, by providing for regulation of the processing of personal data. In the employment sphere, the Act and its subsidiary regulations set out the requirements to be…