Data Protection Policy
Compliance with the Kenyan Data Protection Act, 2019.
Data Protection Policy
Asheville Medical Training College
The College recognizes the right to privacy and shall process personal data lawfully, fairly, transparently, and in accordance with the requirements of the Kenyan Data Protection Act, 2019 and the guidelines issued by the Office of the Data Protection Commissioner.
Data Security Measures
The College shall implement appropriate security measures including password-protected information systems, restricted access to personal data, secure storage of physical records, staff confidentiality obligations, and regular monitoring of data security controls.
Data Retention
The College shall retain personal data only for the period necessary to achieve the purpose for which it was collected or as required by law, regulatory authorities, accreditation bodies, or institutional policies.
Data Breach Management
Any suspected or actual personal data breach shall be reported promptly to the College management. The College shall investigate the breach, take corrective action, and where required by law, notify the Office of the Data Protection Commissioner and affected data subjects within the prescribed timelines.
Website and Online Services
Information collected through the College website, online registration forms, and digital platforms shall be processed in accordance with this policy. Appropriate measures shall be implemented to safeguard electronic data and online transactions.
Contact for Data Protection Inquiries
Data Protection Officer
Asheville Medical Training College
MK Arcade, Kitengela
Phone: +254 722 747 058