Two years ago, the European Union General Data Protection Regulation (GDPR) came into operation. In this article I discuss the impact the GDPR has had on privacy and data protection regulation in Kenya and lessons we may draw from its two years of existence. Continue reading