ODPC to Audit SHA’s Digital Health System Amid Security Concerns
The Office of the Data Protection Commissioner (ODPC) is set to conduct a comprehensive review of all digital data managed by the Social Health Authority (SHA) due to increasing worries about data security.
This decision comes after an earlier audit revealed that the government does not own the system operating SHA, raising concerns about the safety of Kenyans’ personal information.
ODPC’s Plan to Audit SHA’s Digital Health System
Data Commissioner Immaculate Kassait confirmed that her office would carry out a formal assessment of the digital health system managed by SHA.
“One of the places we have identified to do an audit is on the digital health information. That one is something we have undertaken as an office to do an audit on,” Kassait stated.
She further emphasized the importance of obtaining patient consent when handling data through third parties.
“One of the things we have insisted to them is that when it comes to third party, they must get consent. They really must get it from the patient,” she added.
SHA Had Requested Data Protection Assessment
Despite the concerns, Kassait revealed that SHA had previously reached out to the ODPC, requesting a data protection assessment. While an earlier audit had been conducted, it did not fully consider issues related to third-party data—information processed by external organizations rather than SHA itself.
“They have written to us in the case of data protection assessment which we have assessed and identified the gaps and what we have insisted to them is they must get consent,” Kassait explained.
Government Stands by Its Digital Health Strategy
Kassait’s statement comes shortly after President William Ruto reaffirmed that the government would continue with its plan to have a consortium of technology firms manage the digital health system.
According to Ruto, this approach aims to safeguard citizen contributions to SHA and prevent fraudulent claims.
“We said we are going to have a consortium of technology companies that is going to make sure that no fraudulent claims in SHA and they are going to make sure that the system is not going to be paid for by the government of Kenya,” Ruto asserted.
He further clarified that the system would operate on a fee-for-service basis to ensure public funds are not misused.
“It is going to be a fee-for-service facility that will make sure that we protect citizen contribution. There will be no misuse of public money even if you feel those newspapers,” he added.
Spending Concerns Over SHA’s System
Fears over the security of Kenyans’ digital health data escalated after Controller of Budget Margret Nyakango disclosed that the government had spent Ksh104.8 billion on the SHA system, despite not owning it.
In Other News: MPs Set Strict Terms for IEBC Over KIEMS Kit Replacement Budget
ODPC to Audit SHA’s Digital Health System Amid Security Concerns
