! 46 Data Protection No. s.27 2019 Adding the following new subsection immediately after subsection (5) — (6) The Commission shall ensure the management of personal data is in accordance with the principles of personal data protection as set out in the Data Protection Act. Kenya National Examinations Council Act s.10(2) Employment Act, 2007. s.61 The Kenya Citizenship and Immigration Act, 2011. Insertion of new section Insert the following new paragraph immediately after paragraph (m)— (n) to align its Regulations on the collection and processing of information which consists of personal data with the Data Protection Act. Adding the following new subsection— (2) Where an employer maintains such a register, the register shall be maintained in accordance with the principles of data protection as set out in the Data Protection Act. Insert the following new section immediately after section 3— Personal data of individuals. Basic Education Act, 2013. s.79 Universities Act, s. 13 2012. 3A. Personal data of individuals obtained under this Act shall be held and maintained in accordance with the principles of data protection set out in the Data Protection Act. Add the following new sub-section immediately after sub-section (2)— (3) The Board shall deal with any relevant personal data collected and so held in the register according to the data principles set out in the Data Protection Act. Add the following new sub-section immediately after sub-section (3) —