Kenyan data protection regulator issues monetary penalties to multiple firms for improper handling of personal data.