Abstract
Data privacy is a hot button issue that is being discussed by people all over the world. Vast amounts of personal data are being collected, transmitted and stored globally by ever growing computing and communication technologies. Hand in hand with this, large scale data breaches are also happening all over the world making consumers lose trust of the companies that they have entrusted their data with. Although there is no specific legislation on data protection in Kenya, corporate governance principles can be applied to ensure consumer data protection in Kenya. This can be done with the Board of directors recognizing that their duty of care also extends to ensuring that there is data privacy within the company.