Mugambi Laibuta

PhD (Law) · Advocate of the High Court of Kenya · CIPM Certified Privacy Manager

Privacy. Data Protection. AI Governance. Constitutions.

Specialised advisory and compliance services for public institutions, businesses, international organisations, civil society and academic institutions; managing legal, regulatory and ethical risks arising from data use, artificial intelligence and emerging technologies.

17+
Years in Practice
5
Constitutional Reviews
CIPM
Certified Privacy Manager
Insights

Insights

Categories
pexels-pavel-danilyuk-8112201
The 90-Day Rule Under Kenya's Data Protection Act
Section 56(5) of Kenya's Data Protection Act provides that a complaint made…
chatgpt-image-jun-9-2026-06_41_45-pm
Moving Data Beyond Borders
When President William Ruto met the European Commission's Executive Vice-President for Tech…
the-betrayal-in-the-garden
Data Protection Enforcement Against Judas
Data Protection Enforcement Against Judas
chatgpt-image-feb-10-2026-11_27_16-am
Can You Escape Data Scraping on the Internet? Can You Really Hide from AI?
In an age increasingly defined by artificial intelligence, large-scale data analytics, and…
chatgpt-image-jan-23-2026-11_08_33-pm
Data: Kenya’s quiet infrastructure for the 2027 election
As Kenya moves through 2026 toward the 2027 General Election, the most…
pexels-cottonbro-8382611
How Much Data Is Too Much?
In Kenya’s fast-growing digital economy, personal data has become the invisible currency…
Practice Areas

Counsel where the law meets the digital economy.

Advisory built for organisations navigating regulation, reform and rapid technological change, from data protection audits to AI governance frameworks and constitutional design.

01

Privacy & Data Protection

Compliance assessments, audits, data mapping, DPIAs, breach management and cross-border transfers.

Learn more →
02

AI Policy and Governance

AI policies, impact assessments, responsible AI, automated decision-making and vendor governance.

Learn more →
03

Technology and the Law

Digital and data governance, cybersecurity governance, cloud, biometrics and technology procurement.

Learn more →
04

Policy and Legislative Drafting

Privacy notices, data agreements, retention policies, AI acceptable-use and technology contracts.

Learn more →
05

Constitutional Reforms and Architecture

Constitutional design, governance structures, institutional reforms, and legal frameworks.

Learn more →
06

Capacity Building

Customised training for boards, management, DPOs, legal, compliance and ICT teams.

Learn more →
About

Rethinking the law in a digitized world.

Mugambi Laibuta is an Advocate of the High Court of Kenya, a trained mediator, legislative and policy analyst, technology compliance professional, and a Certified Information Privacy Manager.

He has extensive expertise in data protection, technology governance, AI policy and compliance, cybersecurity governance, digital rights, and the regulation of emerging technologies. He currently teaches Legal Writing and Legislative Drafting at the Kenya School of Law.

Portrait of Mugambi Laibuta
“Idealism is fine, but as it approaches reality, the costs become prohibitive.”
William F. Buckley
Consultations

Ready to strengthen your organisation's compliance?

Book a confidential consultation on privacy, AI governance, technology compliance or legislative drafting.