Check if an organisation is registered with the ODPC (data handler register)
Office of the Data Protection Commissioner · sources read 3 Oct 2026
Open the Register of Data Handlers on the ODPC website (odpc.go.ke/registered-data-handlers) and look for the organisation's name. It shows whether it is a data controller or processor, its registration number, county and whether it is Active, Expired or Deregistered.
- Fee
- We couldn't confirm a fee from the official page. Check it there before you pay.
- Where
- Online on the ODPC website (odpc.go.ke/registered-data-handlers)
Steps
- Go to the Registration Status of Data Handlers page on odpc.go.ke.
- Find the organisation's name in the list and check its type (controller or processor), registration number and status.
- If it is not under Active, check the Expired and Deregistered tabs too.
- If an organisation that should be registered is handling your data without registering, you can complain to the ODPC.
Watch out
- Registration lasts 24 months and must be renewed, so an organisation can drop to Expired.
- Not every business must register: those with turnover below KSh 5 million and fewer than 10 staff are exempt, unless they are in a sector that must register anyway.
- An organisation that is both a controller and a processor registers twice, so it can appear twice in the list.
Official sources (2)
- Registration Status of Data Handlers odpc.go.ke · read 3 Oct 2026
- FAQs odpc.go.ke · read 3 Oct 2026