Are Ramon Gitau financial calculators compliant with 2026 Kenyan tax laws?

Yes. All financial calculators incorporate the latest 2026 statutory rates including PAYE tax bands, SHIF (2.75%), NSSF Tier I/II contributions, Affordable Housing Levy (1.5%), and SASRA regulatory limits.

Is user data stored when using online financial tools?

No. All mathematical computations, PDF generation, and scenario simulations run 100% locally inside your browser using client-side JavaScript. No private data is logged or transmitted.

Data Protection Act 2019 & ODPC Audit Engine

ODPC Data Privacy & Member PII Auditor

Audit your SACCO or Fintech data residency, explicit consent logs, DPIA filings, and 72-hour breach SLA against Kenya's Data Protection Commissioner mandates.

Institution Name

Moderate Privacy Risk (60%)

5 Statutory ODPC Compliance Pillars

Data Localization

Data Protection Act Sec 48 - Transfers Outside Kenya

Kenyan Cloud Data Residency & Primary Infrastructure

Are member PII, core financial ledger data, and transaction logs hosted on infrastructure physically located within Kenya or compliant cross-border jurisdictions with explicit ODPC approval?

Consent Management

Data Protection Act Sec 32 - Conditions for Consent

Explicit Opt-In Consent & Immutable Audit Trail

Does your application collect unambiguous, affirmative consent before processing member PII, accompanied by immutable timestamped consent logs?

Breach Reporting SLA

Data Protection Act Sec 43 - Notification of Personal Data Breach

Mandatory < 72-Hour ODPC Breach Notification Protocol

Does your organization maintain a documented Incident Response Plan that mandates notifying the ODPC within 72 hours of detecting a PII data breach?

DPIA Compliance

Data Protection Act Sec 31 - Data Protection Impact Assessment

Data Protection Impact Assessment (DPIA) Filing

Has your SACCO or Fintech conducted and filed a formal DPIA report with the ODPC for all high-risk processing operations (e.g. mobile lending apps, AI scoring)?

Data Subject Rights

Data Protection Act Sec 26 & 40 - Rights of Data Subjects

Right to Erasure ('Right to be Forgotten') & Access API

Do members have a clear mechanism to request a copy of their PII or demand data deletion when closing their SACCO accounts?

Statutory Gap Analysis & Technical Remediations

•[DPIA Compliance] Implement Data Protection Impact Assessment (DPIA) Filing (Data Protection Act Sec 31 - Data Protection Impact Assessment) to close regulatory exposure.
•[Data Subject Rights] Implement Right to Erasure ('Right to be Forgotten') & Access API (Data Protection Act Sec 26 & 40 - Rights of Data Subjects) to close regulatory exposure.