“Our research indicates that Saccos are increasingly investing more resources in technology and security but most are still unprepared for the Data protection law”, said Mathenge.