Many Kenyan organizations are yet to register as data controllers or processors, posing risks to data privacy. Only 2,200+ processors/controllers have since been documented.