Shillah T.M.K. & 2 others v Platinum Credit Limited

Complaint upheld; enforcement notice issued. ODPC, 26 June 2023.

Record ID: ke-odpc-2023-0002
Case reference: ODPC Complaint No. 0456 of 2023
Jurisdiction: Kenya
Regulator: ODPC
Type: determination
Complainant: Shillah T.M.K., Michael Kangethe and Elijah Njoroge
Date decided: 26 June 2023
Respondent type: private
Sector: digital lending
Violations: unlawful processing
Provisions cited: s.25 DPA 2019, s.26 DPA 2019, s.56(1) DPA 2019
Outcome: complaint upheld; enforcement notice issued
Status: final
Source: Official document ↗
Source integrity: SHA-256 9988a27849ae4bbb…
Record verified: 30 July 2026

The facts

Three consolidated complaints alleged that Platinum Credit Limited stored the complainants' phone numbers in its database and that its sales representatives made incessant marketing calls despite the complainants visiting its offices, lodging complaints, and writing e-mails, messages and letters objecting to any communication. The respondent filed no response, so the allegations stood undisputed and proven. The Office noted the respondent had data protection policies on paper but had not operationalised them.

Orders and outcome

The respondent was found liable and ordered to give effect to and implement the data protection policies, frameworks, procedures and plans it had already established.

FINTECH · MOBILE-LENDING · UNLAWFUL-PROCESSING · UPHELD

Cite this decision

ODPC (Kenya), Shillah T.M.K. & 2 others v Platinum Credit Limited, ODPC Complaint No. 0456 of 2023, determination of 26 June 2023. African Data Protection Enforcement Tracker, Law Lab Africa Research, https://research.lawlab.africa/tracker/kenya/odpc/2023/platinum-credit-lymited/ (accessed 30 August 2026).

Same respondent

Track Kenya enforcement

Get decision alerts by email

Tell us your jurisdictions and we email you when a regulator's decision passes verification. Privacy.