The complainant, a customer of the Co-operative Bank of Kenya, alleged that the bank shared his credit reference bureau report with a third party who was not a member of the bank's staff, and that she submitted the report as evidence against him in an ongoing case at the children's court. The ODPC found the bank liable for violating his personal data. The third party accessed his personal data contrary to the Act and failed to appear before the Office when summoned.
Orders and outcome
An enforcement notice was issued against the bank, and the Office recommended the prosecution of the third party under the Act for failing to appear when summoned. Dated 24 November 2023.
ODPC (Kenya), Victor Akidiva v Co Operative Bank Of Kenya Limited, ODPC Complaint No. 1557 of 2023, determination of 24 November 2023. African Data Protection Enforcement Tracker, Law Lab Africa Research, https://research.lawlab.africa/tracker/kenya/odpc/2023/co-operative-bank-of-kenya-limited/ (accessed 30 August 2026).