Kennedy Wainaina Mbugua v Bolt Operations Ou And Bolt Support Kenya Limited

Complaint upheld; compensation ordered; enforcement notice issued. ODPC, 17 June 2024.

Record ID

ke-odpc-2024-0062

Case reference

ODPC Complaint No. 0497 of 2024

Jurisdiction

Kenya

Regulator

ODPC

Type

determination

Complainant

Kennedy Wainaina Mbugua

Date decided

17 June 2024

Respondent type

private

Sector

transport

Violations

unlawful data disclosure, failure to prevent data breach, failure to conduct dpia, unlawful processing, failure to implement security measures

Provisions cited

s.25 DPA 2019, s.26(b) DPA 2019, s.26(D) DPA 2019, s.26 DPA 2019, s.31 DPA 2019, s.41 DPA 2019, s.43(1) DPA 2019, s.43 DPA 2019, s.56(1) DPA 2019, s.56 DPA 2019, s.65(4) DPA 2019, s.65 DPA 2019

Outcome

complaint upheld; compensation ordered; enforcement notice issued

Compensation

KES 500,000 (≈ USD 3,790 at the decision date)

Status

final

Source

Official document ↗

Source integrity

SHA-256 170cc44c11946557…

Record verified

30 July 2026

The facts

The complainant, a Bolt driver, alleged the respondent unlawfully accessed and processed his personal information, resulting in the disclosure of his personal data to third parties who used his driver account information for fraudulent purposes, beginning around 15 May 2023. The ODPC found the respondent violated his right of access to his personal data and his right to correction of false or misleading data, and failed to fulfil its obligations under the Act.

Orders and outcome

The respondent was found liable, ordered to pay the complainant KES 500,000 as compensation, and an enforcement notice was issued against it. Dated 17 June 2024.

DATA-BREACH · DATA-SECURITY · DISCLOSURE · RIDE-HAILING · TRANSPORT · UNLAWFUL-PROCESSING · UPHELD

Cite this decision

Track Kenya enforcement

Get decision alerts by email

Tell us your jurisdictions and we email you when a regulator's decision passes verification. Privacy.