The complainant signed a consent form for a background check by Faulu Microfinance Bank Limited and later exercised his right of access to the resulting report, which he believed was adverse to him. The bank did not provide it. The Office held that having processed his personal data in the background check, the bank was obliged to honour the access request, and found his right of access violated.
Orders and outcome
The respondent was directed to send the complainant the requested report within seven days and notify the Office, failing which an enforcement notice would be issued. Dated July 2023.
BANKING · UNLAWFUL-PROCESSING · UPHELD
Cite this decision
ODPC (Kenya), Faulu Microfinance Bank Limited, ODPC Complaint No. 0586 of 2023, determination of 7 July 2023. African Data Protection Enforcement Tracker, Law Lab Africa Research, https://research.lawlab.africa/tracker/kenya/odpc/2023/faulu-microfinance-bank-limited/ (accessed 30 August 2026).