Mugambi Laibuta

PhD (Law) · Advocate of the High Court of Kenya · CIPM Certified Privacy Manager

Privacy. Data Protection. AI Governance. Constitutions.

Specialised advisory and compliance services for public institutions, businesses, international organisations, civil society and academic institutions; managing legal, regulatory and ethical risks arising from data use, artificial intelligence and emerging technologies.

17+
Years in Practice
5
Constitutional Reviews
CIPM
Certified Privacy Manager
Insights

Insights

Categories
pexels-pavel-danilyuk-8112201
The 90-Day Rule Under Kenya's Data Protection Act
Section 56(5) of Kenya's Data Protection Act provides that a complaint made…
chatgpt-image-jun-9-2026-06_41_45-pm
Moving Data Beyond Borders
When President William Ruto met the European Commission's Executive Vice-President for Tech…
the-betrayal-in-the-garden
Data Protection Enforcement Against Judas
[vc_row][vc_column][vc_column_text]This Enforcement Notice uses a familiar historical story of Judas to explain…
chatgpt-image-feb-10-2026-11_27_16-am
Can You Escape Data Scraping on the Internet? Can You Really Hide from AI?
In an age increasingly defined by artificial intelligence, large-scale data analytics, and…
chatgpt-image-jan-23-2026-11_08_33-pm
Data: Kenya’s quiet infrastructure for the 2027 election
As Kenya moves through 2026 toward the 2027 General Election, the most…
pexels-cottonbro-8382611
How Much Data Is Too Much?
In Kenya’s fast-growing digital economy, personal data has become the invisible currency…
pexels-markus-winkler-1430818-12220470
KDPA and OSINT: Where Public Intelligence Meets Private Rights
Open-source intelligence (OSINT) claims to offer all-seeing insight without invading privacy, the…
pexels-pixabay-261679
Why Data Protection Officers Must Master Technology Contracts
When people think of a Data Protection Officer (DPO), they often imagine…
pexels-cottonbro-8371715
Are Data Protection Officers in Kenya Bound by Confidentiality Like Lawyers?
When an organisation appoints a Data Protection Officer (DPO) in Kenya, one…
pexels-ferarcosn-211151
Understanding Data Privacy and Protection
In this episode of The Nitpicker Podcast, host Carol Musyoka engages with…
pexels-keszthelyit-4198074
Is your phone listening to you?
When Albert Ojwang’ was traced to his father’s home in Homabay, one…
pexels-471572265-16658257
What if you lose your phone?
It happened in a flash. One minute your phone is in your…
pexels-stasham-494674291-16013478
Gen Z, right to privacy, and a revolution
June 2024 shall be remembered as the month Kenyans tested the limits…
kenya-flag
Adequacy in Data Protection Regulation in Kenya
[vc_row][vc_column][vc_column_text margin_bottom="0" css=".vc_custom_1775320748501{margin-bottom: 0px !important;}"]Thesis title: Adequacy in Data Protection Regulation in…
pexels-bryants-juarez-5565396
Disinformation, platform regulation, and freedom of expression: My IVLP Experience
Over the last few years, I have been working in freedom of…
pexels-ron-lach-9783813
Digitisation of government services and the unique personal identifier
With the digitisation of government services and unique personal identifier (UPI) projects…
pexels-engin-akyurt-13088176
Data Protection Compliance in 2023
Is compliance with the Data Protection Act, 2019 worth it? This is…
pexels-cottonbro-4753879
Podcast: Image Rights in Kenya
Nomalanga Mashinini and Mugambi Laibuta discuss the Image Rights legal framework in…
pexels-markus-spiske-1089440
Podcast: Data Protection Regulations In Kenya
Strathmore's CIPIT Acting Director, Dr. Melissa Omino and Mugambi Laibuta discuss the…
pexels-pixabay-355948
Data Protection Act, 2019 Compliance Strategy
[googlepdf url="https://www.laibuta.com/wp-content/uploads/2022/05/data-protection-act-2019-compliance-strategy.pptx" download="Download" width="100%" height="800"]…
Practice Areas

Counsel where the law meets the digital economy.

Advisory built for organisations navigating regulation, reform and rapid technological change, from data protection audits to AI governance frameworks and constitutional design.

01

Privacy & Data Protection

Compliance assessments, audits, data mapping, DPIAs, breach management and cross-border transfers.

Learn more →
02

AI Policy and Governance

AI policies, impact assessments, responsible AI, automated decision-making and vendor governance.

Learn more →
03

Technology and the Law

Digital and data governance, cybersecurity governance, cloud, biometrics and technology procurement.

Learn more →
04

Policy and Legislative Drafting

Privacy notices, data agreements, retention policies, AI acceptable-use and technology contracts.

Learn more →
05

Constitutional Reforms and Architecture

Constitutional design, governance structures, institutional reforms, and legal frameworks.

Learn more →
06

Capacity Building

Customised training for boards, management, DPOs, legal, compliance and ICT teams.

Learn more →
About

Rethinking the law in a digitized world.

Mugambi Laibuta is an Advocate of the High Court of Kenya, a trained mediator, legislative and policy analyst, technology compliance professional, and a Certified Information Privacy Manager.

He has extensive expertise in data protection, technology governance, AI policy and compliance, cybersecurity governance, digital rights, and the regulation of emerging technologies. He currently teaches Legal Writing and Legislative Drafting at the Kenya School of Law.

Portrait of Mugambi Laibuta
“Idealism is fine, but as it approaches reality, the costs become prohibitive.”
William F. Buckley
Consultations

Ready to strengthen your organisation's compliance?

Book a confidential consultation on privacy, AI governance, technology compliance or legislative drafting.