The complainant kept receiving email statements from Family Bank purporting to relate to his bank account although he holds no account with the bank; his email address had been erroneously captured in the bank's database against another customer. The ODPC found the bank violated his right of erasure by failing to correct the error and stop the emails, noting it took the Office's intervention for the issue to be addressed.
Orders and outcome
The respondent was found liable and ordered to compensate the complainant Kenya Shillings Two Hundred and Fifty Thousand (KES 250,000), and was directed to keep customer data accurate and up to date and to erase or rectify inaccurate personal data without delay. Dated 23 July 2024.
ODPC (Kenya), Maina Jackson Irungu v Family Bank Limited, ODPC Complaint No. 616 of 2024, determination of 23 July 2024. African Data Protection Enforcement Tracker, Law Lab Africa Research, https://research.lawlab.africa/tracker/kenya/odpc/2024/family-bank-limited/ (accessed 30 August 2026).