Phyllis Nyaboke v Grola Tech Ltd T.A Lion Cash

Complaint upheld; enforcement notice issued. ODPC, 24 October 2023.

Record ID

ke-odpc-2023-0026

Case reference

ODPC Complaint No. 1335 of 2023

Jurisdiction

Kenya

Regulator

ODPC

Type

determination

Complainant

Phyllis Nyaboke

Date decided

24 October 2023

Respondent type

private

Sector

technology

Violations

unlawful data disclosure, unlawful debt collection, failure to respond to erasure request, unlawful processing

Provisions cited

s.25 DPA 2019, s.26 DPA 2019, s.28 DPA 2019, s.29 DPA 2019, s.30 DPA 2019, s.56 DPA 2019

Outcome

complaint upheld; enforcement notice issued

Status

final

Source

Official document ↗

Source integrity

SHA-256 5a6f2b2f3330137b…

Record verified

30 July 2026

The facts

A digital lender, Grola Tech Limited trading as Lion Cash, obtained the complainant's mobile phone number from one of its loan clients and used it for debt recovery contact without ever informing her or obtaining her consent. When she objected to the processing, she was met with threats, shown in screenshots of the respondent's messages. The ODPC found the respondent violated her right to be informed at the point of collection, her right to object, and the requirement to collect personal data directly from the data subject.

Orders and outcome

The respondent was found liable and an enforcement notice was issued against it. No compensation was ordered. Parties have the right to appeal to the High Court of Kenya. Dated October 2023.

DEBT-COLLECTION · DISCLOSURE · RIGHT-TO-ERASURE · TECHNOLOGY · UNLAWFUL-PROCESSING · UPHELD

Cite this decision

Track Kenya enforcement

Get decision alerts by email

Tell us your jurisdictions and we email you when a regulator's decision passes verification. Privacy.