President William Ruto has nominated Lydia Sitienei Chelagat as the new Data Commissioner, following a recommendation by the Public Service Commission (PSC). The nomination was announced by Government Spokesperson Charles Owino in a press release on Monday, November 9, 2026. Chelagat, currently the Communications Authority's legal director, will take over from Immaculate Kassait, whose six-year tenure as Kenya's first Data Commissioner is ending.
Chelagat was among 13 candidates shortlisted by the PSC for interviews, out of 152 applicants. The Data Commissioner serves a single, non-renewable six-year term. As Data Commissioner, Chelagat will head the Office of the Data Protection Commissioner (ODPC), which oversees the implementation and enforcement of data protection laws in Kenya. The ODPC regulates how public and private institutions collect, process, store, and use personal information.
The Data Commissioner has significant responsibilities, including investigating complaints involving misuse of personal data, inspecting organisations to establish compliance with the law, and maintaining a register of data controllers and data processors. The commissioner also has powers to take enforcement action against organisations that violate data protection requirements. This affects businesses, government agencies, and other institutions that handle personal information.
Chelagat has over 15 years of professional experience in legal services, corporate governance, and regulatory matters. She joined the Communications Authority in December 2023 and previously served as General Manager of Legal Services and Company Secretary at the Kenya Electricity Transmission Company (KETRACO) and as Group Company Secretary and Head of Legal Services at CPF Financial Services.
Chelagat holds a Bachelor of Laws degree from the University of Buckingham in the United Kingdom and a master's degree in Public Policy and Management from Strathmore University Business School. Her nomination now awaits consideration by the National Assembly, in accordance with the Data Protection Act, 2019.
The Data Protection Act, 2019, established the ODPC as an independent institution to safeguard personal information and enforce privacy rights. Individuals have rights over their personal data, including the right to know how their information is being used and to seek redress where their privacy rights are violated. The ODPC's work ensures that these rights are protected.
With Chelagat's nomination, Kenya's data protection landscape is set to have new leadership. Her experience in legal services and regulatory matters will be crucial in overseeing the implementation of data protection laws. The National Assembly's approval will determine whether Chelagat will take up the position, pending which, the country waits for a new Data Commissioner to take the helm.
Key points
- President Ruto's nomination of Lydia Chelagat as Data Commissioner aims to ensure continuity in Kenya's data protection oversight.
Reporting sources
- Ruto nominates Lydia Chelagat as new Data Commissioner · The Standard