National Health Insurance Fund

Complaint upheld; enforcement notice issued. ODPC, 11 December 2023.

Record ID: ke-odpc-2023-0034
Case reference: ODPC Complaint No. 1685 of 2023
Jurisdiction: Kenya
Regulator: ODPC
Type: determination
Date decided: 11 December 2023
Respondent type: public
Sector: banking
Violations: failure to respond to erasure request, unlawful processing, failure to implement security measures
Provisions cited: s.25 DPA 2019, s.26 DPA 2019, s.40 DPA 2019, s.41 DPA 2019, s.56 DPA 2019, s.58 DPA 2019
Outcome: complaint upheld; enforcement notice issued
Status: final
Source: Official document ↗
Record verified: 12 March 2026

Summary

The ODPC upheld a complaint against National Health Insurance Fund in the banking sector concerning failure to respond to erasure request, unlawful processing, failure to implement security measures. The determination considers s.25 DPA 2019, s.26 DPA 2019, s.40 DPA 2019, s.41 DPA 2019. An enforcement notice was issued against the respondent.

BANKING · DATA-SECURITY · RIGHT-TO-ERASURE · UNLAWFUL-PROCESSING · UPHELD

Cite this decision

ODPC (Kenya), ODPC Complaint No. 1685 of 2023, determination of 11 December 2023. African Data Protection Enforcement Tracker, Law Lab Africa Research, https://research.lawlab.africa/tracker/kenya/odpc/2023/national-health-insurance-fund/ (accessed 22 July 2026).

Track Kenya enforcement

Get decision alerts by email

Tell us your jurisdictions and we email you when a regulator's decision passes verification. Privacy.