The complainant alleged that Absa Bank Kenya unlawfully and negatively listed her with the Credit Reference Bureau over an alleged default on credit cards obtained by the Kenya Association of Manufacturers, where she was the Chief Executive Officer. The ODPC found the bank liable for violating her right to object to the processing of her personal data.
Orders and outcome
The respondent was ordered to erase the complainant's personal data as the association's authorised card user in respect of the subject credit card within fourteen days, an enforcement notice was issued against it, and it was ordered to compensate her Kenya Shillings Two Hundred and Fifty Thousand (KES 250,000). Dated December 2024.
ODPC (Kenya), Phyllis Osoro Kemunto v Absa Bank Kenya Plc, ODPC Complaint No. 1539 of 2024, determination of 19 December 2024. African Data Protection Enforcement Tracker, Law Lab Africa Research, https://research.lawlab.africa/tracker/kenya/odpc/2024/absa-bank-kenya-plc/ (accessed 30 August 2026).