Our Story
Data Safety Alliance is a legally registered nonprofit organisation based in Kenya. We help platform workers understand and exercise their data protection rights while building greater accountability around how worker data is collected and used.
Why DSA Was Founded
Data Safety Alliance was founded in 2025 in response to the persistent data privacy challenges experienced by workers in Kenya’s platform economy.
These challenges range from the collection and use of ride-hailing drivers’ personal data to the extraction of biometric information by AI training platforms and companies—sometimes without workers fully understanding what is being collected, why it is needed, how it will be used, or who may access it.
Workers also have limited access to independent data protection support. Many do not know where to begin when exercising their data rights, including submitting a Subject Access Request, and may struggle to obtain a meaningful response once a request has been made.
DSA was established to help close this gap by making data protection knowledge, practical guidance, and worker-centred support more accessible.
The Founder’s Story
The idea behind DSA grew from a personal experience.
In 2023, founder James Oyange submitted a Subject Access Request to his former employer, TikTok. After almost a month, he had not received a response. A Data Protection Officer based in the United Kingdom later offered assistance and contacted the organisation in her professional capacity.
The email was answered that same day, and some of the requested personal data was provided within a week.
The speed of that response raised an important question: why did the organisation respond so differently once a Data Protection Officer became involved?
That experience sparked James’s interest in data protection and the role it could play in helping workers exercise their rights. In 2024, he enrolled in a Data Protection Officer certification programme with PECB and successfully completed the training and certification examination.
Because he did not yet have sufficient professional experience in auditing, risk, or privacy, he initially received provisional certification. He then pursued practical experience through internships, supported fellow workers with data protection matters, and continued developing his professional knowledge.
In May 2026, he attained full certification as a Data Protection Officer.
DSA grew from this combination of lived experience, professional development, and a commitment to ensuring that workers do not have to navigate data protection challenges alone.
Worker-Led and Community-Rooted
DSA is informed by lived experience within the platform economy.
Our work begins with the recognition that platform workers are not only providing labour. Through workplace technologies, digital platforms, and AI systems, workers can also become sources of valuable personal, behavioural, and biometric data.
DSA’s work is therefore shaped by workers’ experiences, questions, and concerns. Through training sessions, community engagement, and collaboration with worker organisers, we translate complex data protection principles into practical information that workers can understand and use.
This worker-centred approach helps ensure that our programmes respond to real challenges rather than being designed without the participation of the people they are intended to serve.
How DSA Operates
DSA currently operates through a small and focused structure appropriate to its stage of development.
The founder leads the organisation’s day-to-day work, programme development, data protection training, worker engagement, and institutional development.
DSA also collaborates with community organisers who help connect the organisation with workers and support the delivery of training and community engagement activities.
Board of Directors
William Kimuhu
William brings approximately ten years of experience in data protection, risk, and audit. He has worked in Data Protection Officer, risk, and audit roles within major financial institutions in Kenya. His experience strengthens DSA’s approach to privacy governance, institutional risk, compliance, and professional data protection practice.
Stanley Mbagathi
Stanley is a Director at Guiding Systems Consult and brings extensive experience in consultancy and development programmes. His previous work includes roles with Kenya’s Ministry of Agriculture, the Common Market for Eastern and Southern Africa, and the Programme for Agriculture and Livelihoods in Western Communities. He contributes experience in strategy, institutional development, livelihoods, and working across public, regional, and community-focused programmes.
Where DSA Is Today
DSA is a young organisation that is deliberately building a strong foundation before expanding.
Our current focus is on engaging platform workers, delivering practical data protection training, learning from our early work in Nairobi, and refining an approach that can respond effectively to workers across different parts of the platform economy.
At this stage, DSA is also strengthening its internal systems, developing partnerships, documenting lessons from its activities, and building the evidence needed to guide future programmes.
Rather than claiming to have all the answers, we are committed to listening, learning, and developing our work responsibly alongside workers and community partners.
Our Foundation
Data Safety Alliance is a legally registered nonprofit organisation based in Kenya.
Our work combines lived experience in the platform economy, professional data protection knowledge, community-based engagement, and guidance from experienced strategic advisors.
As DSA grows, we are committed to responsible governance, transparency, worker privacy, and the careful handling of personal information shared through our programmes and activities.