This document defines key terms from the Kenya Data Protection Act of 2019 in order to help achieve compliance. It explains personal data, data subjects, processing, data controllers, data processors, personal data breaches, lawful basis, individual rights, sensitive personal data, the Office of Data Protection Commissioner, registration requirements, and the role of the Data Protection Officer. The overall goal is to lay out the steps needed to comply with the Data Protection Act of 2019, which regulates the processing of personal data and provides rights and obligations related to data protection in Kenya.