Muthomi Mutiga & Co
Practice · Early lifecycle of the Arc

Technology & Data Law

For the Kenyan founder shipping to users before the regulation arrives. We build a company that can stand without its creator, and keep it compliant, fundable, and defensible as it scales.

Who we act for Founders, startups, scale-ups, and in-house counsel building technology products in Kenya. From incorporation to your first regulator letter. Book a consultation →
What we do
— 01

Data Protection & Privacy

/data-protection-lawyer-kenya

Compliance with the Data Protection Act 2019: ODPC registration, privacy policies, data-processing agreements, and breach response.

  • ODPC registration
  • Privacy policies
  • DPO services
  • Breach response
Read the guide →
— 02

Fintech & Virtual Assets

/fintech-lawyer-kenya

Licensing and compliance for payments, lending, and crypto, including the VASP Act 2025 and Central Bank requirements.

  • VASP Act 2025
  • Crypto licensing
  • Payments (CBK)
  • Digital credit
Read the guide →
— 03

Startups & Founders

/startup-lawyer-kenya

Incorporation, founders' and shareholders' agreements, IP vesting, and the beneficial-ownership filings investors check first.

  • Incorporation
  • Founders' agreements
  • Shareholders' agreements
  • IP vesting
Read the guide →
— 04

AI & Emerging Tech

/ai-law-kenya

The Kenya AI Bill 2026, automated-decision compliance, and the policies that keep an AI product defensible as the law lands.

  • AI Bill 2026
  • Automated decisions
  • AI policy
  • Terms & policies
Read the guide →

Technology law is not a checklist. It is the first two phases of one lifecycle.

Every enduring company solves four problems in order: can the value exist without you, will insiders destroy it, can outsiders interact with it without breaking it, and what happens when you are gone. Technology and data law answer the first two, Formation and Alignment.

That is why we do not start with a template. We start with where you are: pre-incorporation, mid-raise, or already shipping to users with a regulator about to ask questions. The work follows, a company that exists without you, agreements that keep insiders aligned, and compliance that survives diligence.

All technology insights →
Data Protection · 11 min

How to register as a data controller in Kenya (and what the ODPC actually checks).

Fintech · 8 min

The VASP Act 2025 playbook: licensing virtual assets under the new dual regulator.

Startups · 7 min

The founders' agreement every Kenyan startup signs too late.

Robin Muthomi Mutiga

Managing Advocate, Muthomi Mutiga & Co

Advocate of the High Court of Kenya (admitted 2025) advising founders and technology companies on data protection, fintech, and the agreements that let a company stand without its creator. Founder of the Continuity Arc approach to lifecycle legal planning.

Advocate of the High Court of Kenya · Regulated by the Law Society of Kenya · Full profile

Get ahead of the regulation, before it arrives.

A free thirty-minute consultation, reserved each week for founders and in-house counsel. We map where you are in the lifecycle and tell you what to instrument first.

Conversations are privileged and confidential. Regulated by the Law Society of Kenya.

Book a free consultation or call +254 799 157 696