President William Ruto has nominated Lydia Sitienei Chelagat as the country’s next Data Protection Commissioner, placing an experienced legal and regulatory professional in line to lead the Office of the Data Protection Commissioner (ODPC).
Chelagat currently serves as the Director of Legal Services and Corporation Secretary at the Communications Authority of Kenya (CA). Her nomination, announced on November 9, 2026, follows the completion of the six-year term of Immaculate Kassait, Kenya’s first Data Protection Commissioner.
The nomination is now before the National Assembly for consideration and approval.
If confirmed, Chelagat will become the second woman to lead the ODPC since its establishment under the Data Protection Act, 2019.
Who is Lydia Chelagat?
Chelagat brings more than 15 years of experience in legal services, corporate governance and regulatory affairs.
Before joining the Communications Authority in December 2023, she held senior positions at the Kenya Electricity Transmission Company (KETRACO), where she served as General Manager of Legal Services and Company Secretary.
She also previously worked as Group Company Secretary and Head of Legal Services at CPF Financial Services.
Her academic background includes a Bachelor of Laws degree from the University of Buckingham in the United Kingdom and a master’s degree in Public Policy and Management from Strathmore University Business School.
Her professional experience places her at the intersection of law, corporate governance, public policy and technology regulation.
Women taking up leadership in technology regulation
Chelagat’s nomination comes at a time when women’s participation in technology leadership and decision-making remains an important conversation across Africa.
As African economies accelerate digital transformation, women need to be represented not only as technology consumers and entrepreneurs but also among the professionals shaping digital policies, regulatory frameworks and institutional leadership.
Data protection is particularly important because digital platforms increasingly influence how people access financial services, healthcare, education, employment and business opportunities.
Strong privacy protections help build trust in digital services and protect individuals from the misuse of their personal information.
For women, who increasingly participate in digital banking, mobile commerce, entrepreneurship and online platforms, effective data protection is an essential part of digital inclusion.
The responsibility awaiting Kenya’s next Data Protection Commissioner
If approved, Chelagat will inherit an institution whose responsibilities have expanded significantly since its establishment.
The ODPC has more than 15,000 registered data controllers and processors, including organisations in banking, telecommunications, healthcare, technology and government.
The regulator is responsible for investigating privacy complaints, supervising compliance with data protection laws and taking action against organisations that misuse personal information.
The next commissioner will also face emerging challenges involving artificial intelligence, biometric identification, digital financial services and international transfers of personal data.
One of the regulator’s most prominent cases involved Worldcoin, the cryptocurrency-linked digital identity project that collected biometric information from Kenyans.
In May 2025, the High Court ordered the deletion of biometric data unlawfully collected through the project. The ODPC later confirmed that the deletion process had been completed.
These developments demonstrate why independent and effective data protection oversight matters as technology becomes more deeply embedded in everyday life.
Building on Immaculate Kassait’s legacy
Chelagat’s nomination follows the departure of Immaculate Kassait, who served as Kenya’s inaugural Data Protection Commissioner for six years.
During Kassait’s tenure, the ODPC established registration requirements for data controllers and processors, developed mechanisms for handling complaints and investigations, and began imposing administrative penalties for data protection violations.
Kenya was also selected to host the 2027 Global Privacy Assembly in Nairobi, bringing international attention to the country’s growing role in data protection regulation.
The incoming commissioner will be expected to build on this foundation while strengthening enforcement and public confidence in the regulator.
Why Chelagat’s nomination matters
Beyond the leadership transition, Chelagat’s nomination is another important opportunity to recognise women’s professional expertise in legal services, corporate governance and technology policy.
Women across Africa continue to build careers in sectors where leadership opportunities have historically been limited. Their participation in public institutions and regulatory bodies is important because decisions made in these spaces influence economic opportunities, individual rights and the future of digital societies.
However, representation must also be accompanied by effective leadership, accountability and measurable institutional progress.
For Kenya, the coming parliamentary vetting process will determine whether Chelagat takes up the role and leads the ODPC through its next six-year chapter.
Her potential appointment places her at the centre of an increasingly important national conversation: how to protect people’s privacy while allowing technology and innovation to grow.
African Women Network celebrates women’s professional leadership and the growing contribution of women to Africa’s technology, governance and public policy landscape.
About the Author
