Caroline Jedidah Makau v Grola Tech Ltd Ta Lioncash

Complaint upheld; enforcement notice issued. ODPC, 18 November 2024.

Record ID: ke-odpc-2024-0101
Case reference: ODPC Complaint No. 1255 of 2024
Jurisdiction: Kenya
Regulator: ODPC
Type: determination
Complainant: Caroline Jedidah Makau
Date decided: 18 November 2024
Respondent type: private
Sector: technology
Violations: unlawful data disclosure, unlawful debt collection, unlawful processing
Provisions cited: s.25 DPA 2019, s.26(a) DPA 2019, s.26 DPA 2019, s.28(2) DPA 2019, s.28(1) DPA 2019, s.29 DPA 2019, s.30 DPA 2019, s.56(1) DPA 2019, s.56 DPA 2019, s.58 DPA 2019
Outcome: complaint upheld; enforcement notice issued
Status: final
Source: Official document ↗
Source integrity: SHA-256 187fcfc806f7670c…
Record verified: 30 July 2026

The facts

The complainant alleged that Grola Tech Limited, trading as LionCash, kept calling her demanding payment of a loan she was not party to, having been enlisted as a referee or contact person without her consent. The ODPC found the respondent violated her right to be informed of the use to which her personal data would be put and failed to comply with its obligations under the Act.

Orders and outcome

The respondent was found liable and an enforcement notice was issued against it. Dated 18 November 2024.

DEBT-COLLECTION · DISCLOSURE · TECHNOLOGY · UNLAWFUL-PROCESSING · UPHELD

Cite this decision

ODPC (Kenya), Caroline Jedidah Makau v Grola Tech Ltd Ta Lioncash, ODPC Complaint No. 1255 of 2024, determination of 18 November 2024. African Data Protection Enforcement Tracker, Law Lab Africa Research, https://research.lawlab.africa/tracker/kenya/odpc/2024/grola-tech-ltd-ta-lioncash/ (accessed 30 August 2026).

Track Kenya enforcement

Get decision alerts by email

Tell us your jurisdictions and we email you when a regulator's decision passes verification. Privacy.