Robert aka "Authentic Bales" v Zerox Technology Comany Limited

Complaint upheld; compensation ordered; enforcement notice issued. ODPC, 11 December 2023.

Record ID: ke-odpc-2023-0036
Case reference: ODPC Complaint No. 1728 of 2023
Jurisdiction: Kenya
Regulator: ODPC
Type: determination
Complainant: Robert aka "Authentic Bales"
Date decided: 11 December 2023
Respondent type: private
Sector: technology
Violations: unlawful processing, failure to implement security measures
Provisions cited: s.25 DPA 2019, s.26 DPA 2019, s.28 DPA 2019, s.29 DPA 2019, s.30 DPA 2019, s.32 DPA 2019, s.41 DPA 2019, s.56 DPA 2019, s.58 DPA 2019, s.65 DPA 2019
Outcome: complaint upheld; compensation ordered; enforcement notice issued
Compensation: KES 20,000 (≈ USD 140 at the decision date)
Status: final
Source: Official document ↗
Source integrity: SHA-256 fa50468881300ca0…
Record verified: 30 July 2026

The facts

The complainant was added to a fundraising WhatsApp group after being listed as guarantor for a loanee he did not know and was not aware of. The ODPC found Zerox Technology Company Ltd liable for violating his rights and failing to fulfil its obligations under the Act.

Orders and outcome

An enforcement notice was issued against the respondent and it was ordered to pay the complainant nominal damages of Kshs. 20,000. Dated December 2023.

DATA-SECURITY · TECHNOLOGY · UNLAWFUL-PROCESSING · UPHELD

Cite this decision

ODPC (Kenya), Robert aka "Authentic Bales" v Zerox Technology Comany Limited, ODPC Complaint No. 1728 of 2023, determination of 11 December 2023. African Data Protection Enforcement Tracker, Law Lab Africa Research, https://research.lawlab.africa/tracker/kenya/odpc/2023/zerox-technology-comany-limited/ (accessed 30 August 2026).

Track Kenya enforcement

Get decision alerts by email

Tell us your jurisdictions and we email you when a regulator's decision passes verification. Privacy.