The complainant sent demand letters to both respondents, a beauty business trading as Glam by Cess and a photography studio trading as Veejaystudios, asking them to remove photographs of her from their Instagram pages, and provided screenshots of her requests and of the images still posted. The ODPC found both respondents liable and directed them to put in place clear consent mechanisms, including for withdrawal of consent, for publishing data subjects' images on their social media pages.
Orders and outcome
The respondents were found liable and each ordered to pay the complainant Kshs. 25,000, and were guided to adhere to the data protection principles and data protection by design and by default. Dated 2 February 2024.
CONSENT · MEDIA · RIGHT-TO-ERASURE · UNLAWFUL-PROCESSING · UPHELD
Cite this decision
ODPC (Kenya), Grace Mwende Chambi v Cecilia Munyoro Ta Glam Bt Cess John Irungu Ta Veejaystudios, ODPC Complaint No. 2295 of 2023, determination of 2 February 2024. African Data Protection Enforcement Tracker, Law Lab Africa Research, https://research.lawlab.africa/tracker/kenya/odpc/2024/cecilia-munyoro-ta-glam-bt-cess-john-irungu-ta-veejaystudios/ (accessed 30 August 2026).