Kennedy Wainaina Mbugua v Bolt Operations OU / Bolt Support Kenya Limited

Complaint upheld; compensation ordered; enforcement notice issued. ODPC, July 2024.

Record ID

ke-odpc-2024-0071

Case reference

ODPC Complaint No. 0497 of 2024

Jurisdiction

Kenya

Regulator

ODPC

Type

determination

Complainant

Kennedy Wainaina Mbugua

Date decided

July 2024

Respondent type

private

Sector

transport

Violations

unauthorised data access, failure to prevent account fraud, failure to notify data breach, failure to conduct dpia

Provisions cited

not specified in the source

Outcome

complaint upheld; compensation ordered; enforcement notice issued

Compensation

KES 500,000 (≈ USD 3,800 at the decision date)

Status

final

Source

Official document ↗

Source integrity

SHA-256 0eefa6c3e2303dad…

Record verified

30 July 2026

The facts

The complainant, a Bolt driver, alleged that in May 2023 his driver account was compromised: he was contacted about another driver using his account, then found himself locked out with his email and password no longer recognised, and discovered fraudulent rides being conducted under his identity. He reported the matter to the respondent and the police without resolution, and asserted that internal employees or agents of the respondent involved in the fraud were terminated. The ODPC found the respondent violated his rights of access to his personal data and correction of false or misleading data.

Orders and outcome

The respondent was found liable, ordered to pay the complainant Kenya Shillings Five Hundred Thousand (KES 500,000) as compensation, and an enforcement notice was issued against it. Dated June 2024.

RIDE-HAILING · ACCOUNT FRAUD · DATA BREACH · DPIA · IDENTITY VERIFICATION · TECHNOLOGY

Cite this decision

Track Kenya enforcement

Get decision alerts by email

Tell us your jurisdictions and we email you when a regulator's decision passes verification. Privacy.