Your working materials

A05-S1 — Inspect one actual statutory provision

This is a bounded Kenya-specific source-reading exercise, not advice about a real processing activity or permission to upload information. It broadens the research practice beyond the SRA example. Use it within AI05's existing practice block: about ten minutes to inspect and five to record, after the short guided example. Extend the time if needed; the estimate is unvalidated.

Choose the correct record

Actual-inspection route: personally open the source or an authorised faithful copy and inspect the identified provisions. Record this as self-reported actual inspection unless a named reviewer examines the evidence and gives feedback. AI access is not necessary.

Method-only route: if the source is inaccessible, identify the questions you would ask and use the feedback below to practise the distinction. Record the access gap. This completes method practice, not actual or observed authority verification.

Before recording observed source verification, there must be at least one actual bounded inspection, its evidence, a named reviewer, a review date and feedback. Neither this webpage, a quiz score nor a learner's selection of a label certifies that an observation occurred.

Open the source

Use the Kenya Law Data Protection Act, version dated 31 December 2022. Check the title, publisher, jurisdiction and version on the page itself. Locate section 25(d) and section 25(g), reading the opening words of section 25 as well. Record your actual access date, separately from the version date. KEDPA

An authorised supplied copy can support an actual inspection if its identity and provenance are recorded. This packet does not silently substitute an AI paraphrase for that copy. Do not download an untrusted file or bypass access restrictions.

Test two propositions

  1. Proposition A: Section 25(d) connects how much personal data is collected/processed to what is necessary for its purposes; it does not support indiscriminately gathering extra details simply because they might be useful someday.
  2. Proposition B: Section 25(g) itself imposes one fixed 30-day retention limit for all personal data.

For each, decide whether the identified text supports the proposition. Give the precise locator and a short source-based explanation. Separate your own application or inference from the provision's wording. Do not turn the result into a conclusion about a particular client's lawful basis, retention period or upload approval.

Record your evidence

Complete A05 in the workbook. Include:

No live client scenario or full copied statute is needed. Record a brief paraphrase and locator, not unnecessary screenshots containing account or personal information. If access fails, write what failed and the authorised next step; leave the finding unverified by you.

Compare after your attempt

In the pinned teaching version, section 25(d) supports a purpose-related necessity/minimisation principle. Proposition A is a bounded paraphrase and inference from that provision, not a complete legal assessment. Section 25(g) ties identifiable retention to necessity for the collection purposes; it does not itself specify a universal 30-day period. Proposition B adds a number not stated there.

The source-reading result does not establish the correct retention period for a real file or resolve every applicable requirement. If you read only this feedback, your record remains method practice. An actual inspection should be supported by your own precise locator and explanation; observed verification additionally requires a named review.

Next action

Save A05, including any remaining access gap. Continue to AI06. If no reviewer is arranged, keep an actual inspection self-reported; do not invent faculty feedback or delay ordinary self-study while waiting for a service that has not been offered.