As discussed in last week’s article, Kenya does not have a data protection law. As such the collection of sensitive personal data without any protection measures in place is a gross violation of citizens' right to privacy. International best practices on data protection require that data belonging to children be treated as special and special circumstances be applied to protect that information. This clearly shows that all the personal data collected will be passed on to MasterCard, a third party. With NIIMS, public services will be paid for through the prepaid card.

Source: The Star February 25, 2019 21:11 UTC