Easy Coach Limited
Complaint dismissed; enforcement notice conditional. ODPC, 7 July 2023.
The facts
The complainant travelled on one of Easy Coach Limited's buses on 10 April 2023 and afterwards began receiving phone calls from a stranger who addressed her by name and accused her of stealing his luggage. When she visited the respondent's office, staff reportedly admitted the caller had likely accessed her details from the passengers' manifest. In its response the respondent provided its data protection and privacy policies, complaints handling procedures and a staff training schedule, which the Office found to be sufficient organisational measures.
Orders and outcome
The Office found the respondent had demonstrated lawful collection, storage and processing, the duty to notify, and a legal basis for processing, and directed it to provide proof of the scheduled staff training within seven days of receipt of the determination, failing which an enforcement notice would issue.
Cite this decision
Track Kenya enforcement
Tell us your jurisdictions and we email you when a regulator's decision passes verification. Privacy.