Privacy
Privacy and data protection
OGETAR is an internal bank operations platform. It should process only the information required for an authorized operational, audit, risk or compliance purpose.
How the portal handles data
Branch dashboards use masked references and operational metadata. Broad management views must not expose national ID, passport, KRA PIN, full account numbers, screening results or unnecessary customer documents.
Access and accountability
Access is role- and branch-scoped. Administrative changes, workflow decisions, evidence uploads and exports are monitored and auditable.
Retention and rights
The deploying bank must approve processing purposes, lawful bases, retention schedules, data-subject request procedures, processor arrangements and cross-border transfer controls with its Data Protection Officer.
Deployment requirementThe bank’s approved privacy notice and DPO contact must replace this implementation summary before production launch.