The Data Protection Bill, 2012

Commission or any other person in the exercise of their powers
under this Act;
(b) makes any statement or gives any information to the
Commission or any other person exercising powers under this
Act, knowing that the statement or information is false or
misleading;
(c) represents directly or indirectly that he or she holds any
authority under this Act when he or she does not hold that
authority,
commits an offence and is liable, on conviction, to a fine not
exceeding Kshs 100,000 and to a term of imprisonment not
exceeding two years, or to both.

Regulations.

29. (1)The Cabinet Secretary may, after consultation with the
Commission, make regulations prescribing anything required by
this Act to be prescribed or generally for the better carrying out of
the provisions of this Act.
(2) Without prejudice to the generality of subsection (1), the
regulations may provide for—
(a) the manner in which applications under this Act are
to be made;
(b) the form in which information requested under this
Act is to be supplied;
(c) the procedure for the service of notices and
documents under this Act; or
(d) providing for such matters as are contemplated by or
necessary for giving full effect to this Act and for its
due administration.

18

Select target paragraph3