The recently concluded Ninth Network of African Data Protection Authorities (NADPA) conference held in Nairobi, Kenya, provided a valuable platform for Data Protection Authorities and relevant stakeholders to explore the fast-changing data governance landscape across the continent. Under the theme ‘Promoting Regional Governance for Digital Transformation’, this event gathering attracted at least 1000 data protection professionals and enthusiasts.

We at ICON Data and Learning Labs (IDL) extend our sincere appreciation to the Office of the Data Protection Commissioner and others for the meticulously organized event and the opportunity to engage in timely conversations. The discussions included critical issues such as managing cross-border data flows, safeguarding children in the digital world, establishing data sovereignty, and strengthening data protection through collaboration and digital public goods. This conference was a great reminder of our role in supporting the ODPC mandate of protecting personal data through compliance, enforcement, public awareness, and institutional capacity development.

Data sets are usually built-in territory. The challenge is having your infrastructure to be within the regional presence, so how do we make sure the data from another region being transferred out of territory into another region is being maintained and protected in the same state? — John Walubengo

Here are the key takeaways that IDL is working on within our communities:

Collaboration as a cornerstone for effective data governance

The conference underscored the role of collaboration in navigating the complexities surrounding governance, notably, cross-border data flows. As part of our collaborative networks, we are engaging at least 24 organizations working within Western Kenya to adopt responsible data sharing through partnering and promoting self-regulation within their data ecosystems; empowering these organizations to comply with the Data Protection Act and to embrace and put in place responsible data gathering and management practices.

Awareness Creation through Community and Grassroots Organizations

As a follow-up from the conference, we have also intensified our efforts to bridge the data protection and digital rights knowledge gap by providing low-intensity training to community and grassroots organizations. The training supported by various partners has enabled 12 organizations serving 60000+ community members annually to gain core data protection skills & digital rights in their programs’ implementation. In the spirit of the conference, we approach data protection as a matter of morality and dignity for the data subjects.

Raising Community Voices to Advocate for Control over their Data

Leveraging the momentum from the conference, we continue to amplify key learnings, specifically, data sovereignty, via hosting community forums such as the ‘Youth Climate and Peace Dialogues’. We engage the data subjects during these sessions to understand their concerns and perspectives on data privacy and security. Additionally, we empower the data subjects to make informed decisions about who has access to their personal information and their rights as enshrined in the Data Protection Act, 2019.

Indeed, the NADPA conference was a resounding success, with participants echoing for all stakeholders to embrace collaboration, innovation, and responsible data stewardship for a resilient and equitable digital future. By working together, we can build a data ecosystem that safeguards African citizens’ digital and data rights.