Consultancy & Audits
Data Protection Consultancy & Audits – Risk assessment, gap analysis, remediation
A practical data protection consultancy and independent audit.
We partner with organizations to identify gaps, manage risks and demonstrate compliance with the Kenya Data Protection Act (2019) and International best practice.
What we offer
End to End advisory and assurance services for data protection.
Data Protection Gap Assessment
Comprehensive reviews of policies, processes, systems and evidence mapped to the Kenya Data Protection Act (2019) and best practices controls.
Executive summary and Heat map.
Prioritized remediation plan.
Board ready Report
Independent Data Protection Audit
Third party audits to evidence, compliance, prepare for regulatory engagement or support bids and tenders
Control testing and sample checks
Findings, observations and remediation tracking.
Audit Certificate..
Data Protection Impact Assessment (DPIAs)
Risk-based assessments for high risk processing with practical mitigations and residual risk scoring.
Risk registers and control recommendations.
Stakeholders briefings
Template DPIA documentation
Vendor and Processor Due Diligence
Assessment of third party risks, DPIs and transfer mechanisms to secure data sharing arrangements.
Breach Preparedness and Response.
Incident playbooks, table top exercises and notification templates aligned to ODPC expectations.
Policy, Process and Training
Custom policies, staff training, (including frontline guards and reception) and awareness materials.
Our Approach
01 Assess – Interviews, document review and sample testing to map maturity and risks
02 Design – Control design, policies and remediation planning tailored to your environment.
03 Implement – Support for technical and organizational remediation and training delivery.
04 Monitor– Outgoing assurance, KPIs and audit readiness checks
Deliverables
- Audit report with findings, risk ratings and remediation roadmap.
- Board ready executive summary.
- DPIA reports and templates.
- Policy suite and training materials.
- Remediation support and verification.
Delivery
Packages
Starter
Basic gap assessment + Executive summary
Corporate
Audit, controls testing and ongoing support.
SME
Full assessment + remediation plan + training
Enterprise (custom)
Tailored scope with SLA and retainer options
Contact
Tel. +254 718 770 959
Email: info@cadtech-services.co.ke
Nairobi, Kenya
Email us and tell us about your needs.
Quick facts
Jurisdiction
Kenya Data Protection Act (2019)
Regulator
Office of the Data Protection Commissioner (ODPC)
Delivery
On-Site/Remote
Output
Audit Report, Remediation Plan

Cadtech Training [Training and Coaching Solutions]
Empowering teams with skills to manage information, ensure compliance, and drive digital transformation.

Cadtech Advisory [Consultancy and Audit Solutions]
Strategic expertise to ensure compliance, efficiency, and competitive advantage

Cadtech Digital
Smart, scalable digital systems for managing and securing your information assets..

Cadtech Disposal
Certified destruction to safeguard confidentiality, compliance, and peace of mind.
@2025CadtechServicesLtdKenya