Member Categories: Team

Mwende Mwaniki is a Partner at Mundui Murai Advocates and a certified Data Protection
Officer with extensive experience and expertise in Data Protection, Technology, Media &
Telecommunications Law, and Intellectual Property. She holds the Certified Information Privacy
Professional/Europe (CIPP/E) credential and is an Advocate of the High Court of Kenya, as well
as a member of the Law Society of Kenya Nairobi Branch ICT & IP Committee and the
International Association of Privacy Professionals (IAPP).
Currently pursuing an LLM in Technology, Media & Telecommunications Law at Queen Mary
University of London (QMUL), Mwende expertly guides organizations through the complexities
of data privacy and regulatory compliance, helping them align with Kenya’s Data Protection Act
and evolving legal standards. She combines academic rigor with practical insight to empower
businesses to manage risk, protect digital rights, and drive responsible innovation in today’s
rapidly evolving data landscape.

Kristina, the Society’s Student Representative, serves as the liaison between university students and the Data Privacy and Governance Society. Her role entails facilitating communication between the society and the students, and amplifying the students’ voices in the realm of data privacy and governance, to successfully cultivate a data-privacy-conscious student body in Kenya. She is dedicated to fostering greater awareness of data governance, particularly regarding digital rights and ethics, recognising that proactive education is key to safeguarding privacy in Kenya’s quickly developing data landscape. Kristina’s profound interest in data ethics and policy development further fuels her commitment to the rol

Mutua Mutuku is a Partner at Sisule & Associates LLP and leads the teams for Intellectual Property Law, Public Policy & Government Relations, Data Privacy, and Emerging Areas. He earned a Bachelor of Laws (LL.B.) from the University of Nairobi. He is also a registered patent agent, a qualified and experienced privacy professional, and a member of Kenya’s Data Privacy and Governance Society.

Mutua often contributes to the standard, the star, Business Daily and Daily Nation’s Opinions & Editorials (Op-eds). Mutua also hosts the popular Legal Insider radio show on Capital FM as well as the Wakili Quick One YouTube channel.

He has previously served on the boards of the Kenya Fashion Council, the Private Bikers Association of Kenya, and the Rotary Club of Muthaiga. He is President Nominee of the Rotary Club of Muthaiga and a member of Rotary District 9212’s Legal Advisory Committee (Ethiopia, Eritrea, Kenya, and South Sudan).

Mercy Barasa is the CEO and Founder of Romer Services Ltd, a firm specializing in data strategy, compliance, and digital transformation. With extensive experience across sectors such as insurance, logistics, telecommunications, and financial services, she has led numerous initiatives to enhance data literacy and ensure compliance with the Kenya Data Protection Act of 2019. As the Private Sector Professionals Representative on the DPGSK Council (2025–2027), she brings a wealth of industry knowledge and a commitment to promoting ethical data practices within the private sector.

Ben Ngunjiri is a dynamic leader in data and AI governance, privacy engineering, and cybersecurity, currently serving as Data Protection Technologist at KCB Bank Group.
With a robust background in governance, risk management and compliance, he excels at advancing privacy by design principles into scalable systems, crafting and executing strategies that safeguard data integrity and foster trust. Ben’s expertise extends to digital product development and forging strategic partnerships, ensuring that privacy considerations are integral to innovation. His leadership is evident in his recent appointment to a prominent role as the Technology Sector Rep within the Data Privacy & Governance Society of Kenya, reflecting his commitment to advancing responsible data use and protecting individual rights.
With a passion for innovation and mentorship, he shares thought leadership on emerging privacy risks and guides cross-functional teams in embedding privacy controls throughout products lifecycle while building adaptive privacy frameworks across the tech ecosystem

Maria Nambuya is a PECB Certified Provisional Data Protection Officer with a strong legal background and extensive experience in regulatory compliance and implementing data protection projects. She has been instrumental in supporting regional corporations on their data protection journeys, ensuring alignment with applicable legal standards and driving the development of customized training modules to promote a culture of privacy and compliance.

Maria was also part of the multi-stakeholder group that contributed to the development of Kenya’s data protection regulatory framework, offering expert input to help shape policies that reflect both global best practices and local realities.

Mercy Wafula is a Certified Information Privacy Professional (IAPP) and a Certified Risk Professional with the Institute of Risk Management (IRM). She has accumulated experience in Privacy and Data Protection, Legal, Risk Management, and Policy and Regulatory Compliance from various roles in a Big 4 professional services firm and in the banking and insurance services industry in East Africa.

In the era of emerging data protection laws and regulations in Africa, she has played a pivotal role in helping these organizations create and implement data protection and privacy frameworks from the ground up. She possesses a profound understanding of the ever-evolving data protection landscape and has been a catalyst for change in the region.

Philip Kisaka brings extensive expertise in global regulatory and legal compliance, coupled with a robust foundation in privacy and technology law. 

His deep understanding of the GDPR and various African Data Protection Laws architecture enables him to guide businesses & organizations towards privacy-conscious practices while ensuring strict adherence to data protection regulations and broader legal compliance standards. 

 He is also the the Organizing Secretary at the Data Privacy & Governance Society of Kenya

Dr Mugambi Laibuta is an Advocate of the High Court of Kenya, Certified Information Privacy Manager, a trained Mediator, a Legislative Counsel and Policy Analyst plus a Privacy and Data Protection Specialist. He has over 14 years’ experience as a licensed legal practitioner. He  completed his PhD at the University of the Witwatersrand, where he researched and wrote on Privacy and Data Protection in Kenya. 

He provides consulting and advisory services in policy development, governance, rule of law, constitutionalism, legislative drafting, digital rights, internet and technology law, privacy, and data protection. He teaches Legal Writing and Legislative Drafting at the Kenya School of Law.

Faith Mutune is an accomplished lawyer based in Nairobi, Kenya, and the Founding Partner of Mutune Law. She has a strong focus on technology and commercial law and has developed a deep expertise in privacy enforcement and data protection compliance. She is known for designing and implementing comprehensive compliance programs, expertly guiding clients through data breach management, and overseeing data controller/processor registrations. She also provides specialized data privacy training and serves as an external Data Protection Officer (DPO) for select organizations.

In addition to her legal practice, Faith is passionate about raising awareness on privacy rights. She is the current member of the Association’s Executive Council representing members of the legal profession. Additionally, she is an active member of the Law Society of Kenya’s ICT & IP Committee, where she contributes to discussions on privacy matters, and is involved in various associations. Faith also dedicates her time to volunteering with not-for-profit organizations and delivering educational talks.

Her dedication to advancing privacy rights and promoting data protection compliance reflects her commitment to excellence in the field.