By Njeri Kagwe
Public relations professionals in Kenya are operating in a far more demanding environment than ever before, where reputational risk is shaped not only by headlines and public sentiment, but also by the law.
Beyond the familiar guardrails of the PR Code of Ethics, the Media Council Act and the Consumer Protection Act, communications leaders must contend with two fast-rising areas of exposure: data protection and intellectual property.
These are no longer issues to address after a campaign has gone live or once a crisis erupts, but governance priorities that determine whether an organization can build trust, protect the brand and sustain credibility. Even as the industry awaits the full shape of the proposed Public Relations and Communication Management Bill, accountability is already rising.
This shift is playing out in our daily decisions as communication teams; what content is published, which stakeholders are profiled, how customer and employee stories are told, and how organizations respond when controversy erupts. In an era where a single screenshot can escalate into a national debate, compliance is no longer a back-office process but an executive responsibility at the heart of reputation management.
The Data Protection Act of 2019 has become a defining framework for corporate communications. Data once treated as routine campaign material is now protected, with enforceable rights attached. As Kenyans grow more privacy-conscious, mishandling personal data can trigger rapid backlash through social and mainstream media with an immediate reputational cost that can be greater than the legal exposure.
PR leaders must recognize that communication is fundamentally data work. Teams collect, store and process personal information through stakeholder engagement, media and influencer databases, event registrations, analytics reporting, and photo and video production. They also develop testimonials, case studies and impact stories with sensitive details, and manage crises where individuals may be named or linked to events. Every step carries legal expectations on purpose, security, transparency and accountability.
Strong communications functions embed privacy compliance into day-to-day operations without slowing down responsiveness. This means collecting only what is necessary, keeping information accurate, using it for legitimate purposes, and processing it lawfully and transparently. As PR practitioners, we must be able to explain why specific data is held, who can access it, how long it will be retained, and what safeguards are in place to prevent misuse or breaches.
Consent remains one of the most misunderstood but critical requirements. It cannot be assumed simply because someone attended an event or participated in a programme. Consent must be clear, specific and informed, given through an affirmative action. In Kenya’s current environment, careless use of images or personal stories can quickly escalate into public disputes, undermining trust and raising ethical concerns.
Beyond privacy, intellectual property is a key compliance risk for PR teams. Digital communication has accelerated content creation and sharing, increasing exposure to unauthorized use of creative work, brand assets and campaign ideas. As Kenya’s creator economy grows, IP disputes escalate quickly and can seriously damage brand credibility.
Copyright is a common risk area because it protects original written, visual and audio works. For PR teams, this includes photographs, videos, design assets, articles and music used across campaigns, press kits, websites and social platforms. Republishing creative work without permission, using unlicensed audio, or adapting third-party content can trigger legal claims. Often, reputational damage is greater, especially when the organization appears to exploit creators.
Trademarks require disciplined handling because they protect brand identity and prevent consumer confusion. Misuse can trigger disputes where communication implies endorsement, partnership or sponsorship without authorization. Risk often arises in partnership announcements, event branding and social media. Poor wording or visuals can spark backlash, legal scrutiny and trust loss.
Managing privacy and IP compliance is not about slowing communication, but making it defensible. As PR leaders today, we must act as governance partners, ensuring campaigns and crisis responses withstand legal scrutiny, stakeholder expectations and public accountability. The key question is no longer whether a message can be published, but whether it can be defended legally, ethically and reputationally. In Kenya’s high-scrutiny environment, organizations that respect privacy and protect IP build lasting trust and safeguard reputation as a core business asset.
Njeri is the Director, Public Relations at TBWA Ascent | Email: Njeri.kagwe@ascentgroup.co.ke
