The complainant complained against Ceres Tech Limited, a digital credit provider lending through its Chapaa Loan mobile application. The respondent could not prove it had obtained the complainant's consent before processing his personal data. The ODPC noted the respondent is a repeat offender, found liable for similar violations in an earlier complaint where an enforcement notice was issued and not complied with.
Orders and outcome
The respondent was found liable and a penalty notice was ordered to issue against it, following non-compliance with the enforcement notice issued in the earlier matter. Dated 24 January 2024.
ODPC (Kenya), Abubakar Hussein v Ceres Tech Ltd Ta Chapaa Loan, ODPC Complaint No. 2194 of 2023, determination of 24 January 2024. African Data Protection Enforcement Tracker, Law Lab Africa Research, https://research.lawlab.africa/tracker/kenya/odpc/2024/ceres-tech-ltd-ta-chapaa-loan/ (accessed 30 August 2026).