Data commissioner has powers to mandate certain data be stored locally.This is contained in section 44, 44,46,47,48 and 49 of the Data Protection Act of 2019.Article 26(1) of the The Data Protection (General) Regulations states that a data controller or data processor who processes personal data for the purpose of strategic interest of the state should process such personal data through a server and data centre located in Kenya; or store at least one serving copy of the concerned personal data  in a data centre located in Kenya.  