The complainant alleged that the respondents used her personal data for marketing without consent or a lawful basis. The ODPC found the first respondent, Mhasibu Housing Company Limited, liable for violating her right to be informed and for using her personal data for commercial purposes without express consent, and found the second respondent, Mhasibu NWDT Sacco Society Limited, did not violate her rights or use her data commercially.
Orders and outcome
The first respondent was ordered to pay the complainant KES 650,000 as compensation and an enforcement notice was issued against it; the complaint against the second respondent was dismissed. Dated May 2024.
ODPC (Kenya), Victory Owino v Mhasibu Housing Company Limited Mhasibu Nwdt Sacco Society Limited, ODPC Complaint No. 371 of 2024, determination of 31 May 2024. African Data Protection Enforcement Tracker, Law Lab Africa Research, https://research.lawlab.africa/tracker/kenya/odpc/2024/mhasibu-housing-company-limited-mhasibu-nwdt-sacco-society-l/ (accessed 30 August 2026).