Safeguarding Personal Data in the Digital Banking era in Kenya
DOI:
https://doi.org/10.66563/aqpe6z32Abstract
In the algorithm - driven era, data is the spark that powers the engine of the banking sector, driving transactions and decisions. In Kenya, safeguarding personal data is key in building trust especially in the banking sector. Data is invaluable and its mishandling has put the banking sector under scrutiny with hefty penalties imposed on its mishandling by the Data Commissioner. While proliferation of Artificial intelligence (AI), cloud computing, big data and blockchain is driving financial inclusion, enhancing accessibility and efficiency in the banking sector, it poses privacy risks. This paper examines the relationship between data and the banking sector, emphasizing on the urgency of safeguarding personal data. By highlighting the key data infringement patterns in the banking sector, focusing on determined cases and highlighting loopholes in banking practices in Kenya that make personal data in their control vulnerable, it identifies the causes of the infringements. This paper delves into the consequences of mishandling personal data and emphasises on the need of protecting personal data as Kenya continues to embrace technology to enhance customer trust, gain competitive advantage and avoid financial and reputational harm. The paper then offers recommendations such as adoption of stringent policy, use of technology to build resistant systems and advocates for balanced approach between progressive and innovative banking and privacy protection. In conclusion the paper envisions a banking sector that integrates innovation with privacy at its core. The future of banking in Kenya hinges on striking a balance between progress, innovation and privacy.
References
Published
Issue
Section
License
Copyright (c) 2026 University of Nairobi Law Journal

This work is licensed under a Creative Commons Attribution-NonCommercial-ShareAlike 4.0 International License.
© Copyright
University of Nairobi Law Journal. All rights reserved. No part of this publication may be reproduced, stored in retrieval system or transmitted in any form or by any means, electronic, mechanical or photocopying, recording, or otherwise without the prior permission of the University of Nairobi Law Journal.
The University of Nairobi Law Journal believes in the strength of due diligence exercised, that this work does not contain any material that is the subject of copyright held by another person. In the alternative, they believe that any protected pre-existing material that may be comprised in it has been used with appropriate authority or has been used in such circumstances that make such use permissible under the law.
Although every care is taken to ensure the accuracy of this publication, supplements, updates and replacement material, the authors, editors, publishers and printers do not accept responsibility for any act, omission, loss, damage or the consequences thereof occasioned by a reliance by any person upon the contents hereof.