A camera system records personal data the moment it can identify someone. In Kenya, that brings it within the Data Protection Act, 2019, so privacy belongs in the design stage, alongside lenses and storage.
This is a planning guide, not legal advice. Your legal or data protection adviser should confirm what applies to your organization.
Start with a written purpose
Write down why each camera exists: protecting a store room, recording who passes a gate, monitoring a car park. A clear purpose helps you choose the right coverage and gives you an answer when staff or visitors ask why they are being recorded.
Point cameras only where they are needed
The further a camera's view reaches beyond your premises, the harder it is to justify. Reports on Kenyan court decisions highlight the risk of cameras aimed at a neighbour's property. Good design helps:
- Set each camera's field of view during commissioning and document it.
- Use privacy masking to block neighbouring windows and compounds.
- Avoid private areas such as washrooms and changing rooms.
Tell people they are being recorded
Place clear notices at entrances and before people reach the covered area. Say who operates the system and how to contact them. Your adviser can confirm the wording and whether your organization must register with the Office of the Data Protection Commissioner.
Control storage and access
Security footage needs security of its own:
- Keep recordings only as long as your stated purpose requires.
- Give each operator their own login, with only the permissions they need.
- Keep recorders and storage in a locked room or cabinet.
- Place cameras on a separate network or VLAN.
- Log every export of footage.
Design it in from the start
These choices are cheaper during design than after installation. For related planning, read our guide to IP cameras and video analytics.
