A trusted partner in data protection and privacy
Scarlet Dhahabu helps organisations across Kenya turn data protection from an obligation into something they can stand behind.
Data protection, built around your business
Kenya's data protection landscape has moved quickly. The Data Protection Act, 2019 gave individuals real rights over their personal data and gave organisations real obligations — registration, lawful basis, impact assessments, breach notification, and the duty to keep only what they can justify keeping.
Most organisations we meet are not resisting any of that. They simply have not had anyone map what it means for their systems, their contracts and their people. That is the gap we exist to close.
We work across finance, healthcare, education, government, saccos, NGOs and beyond — sectors that look very different on paper but face the same underlying question: can you show, on demand, that the personal data in your care is handled lawfully and held securely?
A method, not a template
Every engagement runs through the same four movements — scaled to the size of the organisation, never skipped.
Understand
We start with your business, not a checklist. What data you hold, why you hold it, who touches it, and what would actually hurt if it went wrong.
Assess
We measure the gap between where you are and what the Data Protection Act asks of you, then rank it by real risk rather than by ease of fixing.
Implement
Policies, controls and training that fit how your people already work — because a control nobody follows protects nobody.
Sustain
Compliance is not a project with an end date. We put review cycles, access reviews and refresher training in place so it holds.
What you can hold us to
Industry expertise
Our consultants are industry experts, well-versed in the intricacies of data protection regulations and the ever-evolving digital landscape.
Tailored solutions
We understand that one size does not fit all. Our solutions are custom-tailored to meet the unique needs and challenges of your organisation.
Aligned to your goals
Your goals are our goals. We take the time to understand your business, ensuring that our strategies align with your vision and objectives.
Proactive, not reactive
We don't just react to threats; we help you prevent them. Our proactive approach minimises risks and ensures you're always one step ahead.
Always current
Data protection is a dynamic field. We stay up to date with the latest trends, best practices and regulations to provide you with cutting-edge solutions.
Want to see this applied to your organisation? Start a conversation.
Let's make things happen
Tell us what you're working with and we'll tell you, plainly, what it would take to get it right.