Tracker / Kenya / 2023 / Casa Vera Lounge
§ Tracker · Kenya · ODPC · 2023

Perpetual Wanjiku v Casa Vera Lounge

Complaint upheld; enforcement notice issued. ODPC, 17 July 2023.

Record ID
ke-odpc-2023-0008
Jurisdiction
Kenya
Regulator
ODPC
Type
determination
Complainant
Perpetual Wanjiku
Date decided
17 July 2023
Respondent type
private
Sector
retail
Violations
unauthorised image/photo use, lack of consent, commercial use of personal data, failure to respond to erasure request, unlawful processing
Provisions cited
s.25 DPA 2019, s.26(a) DPA 2019, s.29 DPA 2019, s.32 DPA 2019, s.32(4) DPA 2019, s.32(3) DPA 2019, s.37 DPA 2019, s.56 DPA 2019, s.65 DPA 2019
Outcome
complaint upheld; enforcement notice issued
Status
final
Source
Official document ↗
Source integrity
SHA-256 c4f3cca5774abbf0…
Record verified
30 July 2026

The facts

The complainant's image was used on Casa Vera Lounge's social media pages for publicity without her consent, and no written apology followed her demand letter. The Office found the respondent violated her rights, did not demonstrate the duty to notify, and did not satisfy the conditions of consent, noting that consent is required before using a person's image for commercial purposes. In mitigation, the respondent pulled the image down once she objected.

Orders and outcome

An enforcement notice was issued against the respondent. The Office declined the compensation of Kshs. 5,000,000 the complainant sought, on account of the respondent's mitigation in pulling down the image, and found a recommendation for prosecution not applicable. Dated July 2023.

CONSENT · RETAIL · RIGHT-TO-ERASURE · UNLAWFUL-PROCESSING · UPHELD

Cite this decision

ODPC (Kenya), Perpetual Wanjiku v Casa Vera Lounge, determination of 17 July 2023. African Data Protection Enforcement Tracker, Law Lab Africa Research, https://research.lawlab.africa/tracker/kenya/odpc/2023/casa-vera-lounge/ (accessed 30 August 2026).

Track Kenya enforcement

Get decision alerts by email

Tell us your jurisdictions and we email you when a regulator's decision passes verification. Privacy.