Tracker / Kenya / 2023 / Roma School Uthiru
§ Tracker · Kenya · ODPC · 2023

Christine Wairimu Muturi v Roma School Uthiru

Complaint upheld; enforcement notice issued. ODPC, 11 August 2023.

Record ID
ke-odpc-2023-0017
Jurisdiction
Kenya
Regulator
ODPC
Type
determination
Complainant
Christine Wairimu Muturi
Date decided
11 August 2023
Respondent type
private
Sector
education
Violations
unlawful processing
Provisions cited
s.25 DPA 2019, s.26 DPA 2019, s.27 DPA 2019, s.32 DPA 2019, s.33 DPA 2019, s.34 DPA 2019, s.56 DPA 2019
Outcome
complaint upheld; enforcement notice issued
Status
final
Source
Official document ↗
Source integrity
SHA-256 1d2ecbab19d3ff8c…
Record verified
30 July 2026

The facts

A parent complained that Roma School, Uthiru processed images of minors on its social media platforms, particularly TikTok, for marketing purposes without the express consent of parents or guardians. Parents had objected in the school's WhatsApp group to the posting of their children's images and videos, and the school provided no valid explanation. The Office found multiple violations of the Act, including of the restriction-of-processing obligation after the parents objected.

Orders and outcome

The respondent was found liable on multiple violations and an enforcement notice was issued, including for failure to cooperate with the Office, requiring steps within a period specified in the notice. Dated 2023.

EDUCATION · UNLAWFUL-PROCESSING · UPHELD

Cite this decision

ODPC (Kenya), Christine Wairimu Muturi v Roma School Uthiru, determination of 11 August 2023. African Data Protection Enforcement Tracker, Law Lab Africa Research, https://research.lawlab.africa/tracker/kenya/odpc/2023/roma-school-uthiru/ (accessed 30 August 2026).

Track Kenya enforcement

Get decision alerts by email

Tell us your jurisdictions and we email you when a regulator's decision passes verification. Privacy.