Mugambi Laibuta

PhD (Law) · Advocate of the High Court of Kenya · CIPM Certified Privacy Manager

Privacy. Data Protection. AI Governance. Constitutions.

Specialised advisory and compliance services for public institutions, businesses, international organisations, civil society and academic institutions; managing legal, regulatory and ethical risks arising from data use, artificial intelligence and emerging technologies.

17+
Years in Practice
5
Constitutional Reviews
CIPM
Certified Privacy Manager
Insights

Insights

Categories
pexels-pavel-danilyuk-8112201
The 90-Day Rule Under Kenya's Data Protection Act
chatgpt-image-jun-9-2026-06_41_45-pm
Moving Data Beyond Borders
the-betrayal-in-the-garden
Data Protection Enforcement Against Judas
chatgpt-image-feb-10-2026-11_27_16-am
Can You Escape Data Scraping on the Internet? Can You Really Hide from AI?
chatgpt-image-jan-23-2026-11_08_33-pm
Data: Kenya’s quiet infrastructure for the 2027 election
pexels-cottonbro-8382611
How Much Data Is Too Much?
pexels-markus-winkler-1430818-12220470
KDPA and OSINT: Where Public Intelligence Meets Private Rights
pexels-pixabay-261679
Why Data Protection Officers Must Master Technology Contracts
pexels-cottonbro-8371715
Are Data Protection Officers in Kenya Bound by Confidentiality Like Lawyers?
pexels-ferarcosn-211151
Understanding Data Privacy and Protection
pexels-471572265-16658257
What if you lose your phone?
pexels-stasham-494674291-16013478
Gen Z, right to privacy, and a revolution
kenya-flag
Adequacy in Data Protection Regulation in Kenya
pexels-bryants-juarez-5565396
Disinformation, platform regulation, and freedom of expression: My IVLP Experience
pexels-ron-lach-9783813
Digitisation of government services and the unique personal identifier
pexels-engin-akyurt-13088176
Data Protection Compliance in 2023
pexels-cottonbro-4753879
Podcast: Image Rights in Kenya
pexels-markus-spiske-1089440
Podcast: Data Protection Regulations In Kenya
pexels-pixabay-355948
Data Protection Act, 2019 Compliance Strategy
Practice Areas

Counsel where the law meets the digital economy.

Advisory built for organisations navigating regulation, reform and rapid technological change, from data protection audits to AI governance frameworks and constitutional design.

01

Privacy & Data Protection

Compliance assessments, audits, data mapping, DPIAs, breach management and cross-border transfers.

Learn more →
02

AI Policy and Governance

AI policies, impact assessments, responsible AI, automated decision-making and vendor governance.

Learn more →
03

Technology and the Law

Digital and data governance, cybersecurity governance, cloud, biometrics and technology procurement.

Learn more →
04

Policy and Legislative Drafting

Privacy notices, data agreements, retention policies, AI acceptable-use and technology contracts.

Learn more →
05

Constitutional Reforms and Architecture

Constitutional design, governance structures, institutional reforms, and legal frameworks.

Learn more →
06

Capacity Building

Customised training for boards, management, DPOs, legal, compliance and ICT teams.

Learn more →
About

Rethinking the law in a digitized world.

Mugambi Laibuta is an Advocate of the High Court of Kenya, a trained mediator, legislative and policy analyst, technology compliance professional, and a Certified Information Privacy Manager.

He has extensive expertise in data protection, technology governance, AI policy and compliance, cybersecurity governance, digital rights, and the regulation of emerging technologies. He currently teaches Legal Writing and Legislative Drafting at the Kenya School of Law.

Portrait of Mugambi Laibuta
“Idealism is fine, but as it approaches reality, the costs become prohibitive.”
William F. Buckley
Consultations

Ready to strengthen your organisation's compliance?

Book a confidential consultation on privacy, AI governance, technology compliance or legislative drafting.