Ceres Tech Limited Ta Rocketpesa

Complaint upheld; enforcement notice issued. ODPC, 5 January 2024.

Record ID: ke-odpc-2024-0004
Case reference: ODPC Complaint No. 1994 of 2023
Jurisdiction: Kenya
Regulator: ODPC
Type: determination
Date decided: 5 January 2024
Respondent type: private
Sector: digital lending
Violations: commercial use of personal data, unlawful processing
Provisions cited: s.25 DPA 2019, s.26 DPA 2019, s.29 DPA 2019, s.30 DPA 2019, s.32 DPA 2019, s.37 DPA 2019, s.56 DPA 2019, s.58 DPA 2019, s.65 DPA 2019
Outcome: complaint upheld; enforcement notice issued
Status: final
Source: Official document ↗
Record verified: 12 March 2026

Summary

The ODPC upheld a complaint against Ceres Tech Limited Ta Rocketpesa in the digital lending sector concerning commercial use of personal data, unlawful processing. The determination considers s.25 DPA 2019, s.26 DPA 2019, s.29 DPA 2019, s.30 DPA 2019. An enforcement notice was issued against the respondent.

FINTECH · MOBILE-LENDING · UNLAWFUL-PROCESSING · UPHELD

Cite this decision

ODPC (Kenya), ODPC Complaint No. 1994 of 2023, determination of 5 January 2024. African Data Protection Enforcement Tracker, Law Lab Africa Research, https://research.lawlab.africa/tracker/kenya/odpc/2024/ceres-tech-limited-ta-rocketpesa/ (accessed 22 July 2026).

Same respondent

15 January 2025 · complaint upheld

Track Kenya enforcement

Get decision alerts by email

Tell us your jurisdictions and we email you when a regulator's decision passes verification. Privacy.