Lawrence Kiruthi v Mulla Pride Limited

Complaint upheld; enforcement notice issued. ODPC, 19 September 2024.

Record ID: ke-odpc-2024-0065
Case reference: ODPC Complaint No. 908 of 2024
Jurisdiction: Kenya
Regulator: ODPC
Type: determination
Complainant: Lawrence Kiruthi
Date decided: 19 September 2024
Respondent type: private
Sector: retail
Violations: unlawful data disclosure, unlawful processing
Provisions cited: s.25 DPA 2019, s.26(a) DPA 2019, s.26 DPA 2019, s.28(2) DPA 2019, s.28(1) DPA 2019, s.29 DPA 2019, s.30 DPA 2019, s.56(1) DPA 2019, s.56 DPA 2019
Outcome: complaint upheld; enforcement notice issued
Status: final
Source: Official document ↗
Source integrity: SHA-256 6ae5b34e2c80dff7…
Record verified: 30 July 2026

The facts

The complainant alleged that Mulla Pride Limited, a digital lender, contacted him about a loan he was not a party to and that he had never consented to being listed as a guarantor. The ODPC found the respondent processed his personal data without consent and violated his right to be informed of the use to which his data would be put.

Orders and outcome

The respondent was found liable for violating the complainant's right to be informed and for failing to fulfil its obligations under the Act, and an enforcement notice was issued against it. No compensation was ordered. Dated 19 September 2024.

DISCLOSURE · RETAIL · UNLAWFUL-PROCESSING · UPHELD

Cite this decision

ODPC (Kenya), Lawrence Kiruthi v Mulla Pride Limited, ODPC Complaint No. 908 of 2024, determination of 19 September 2024. African Data Protection Enforcement Tracker, Law Lab Africa Research, https://research.lawlab.africa/tracker/kenya/odpc/2024/mulla-pride-limited-3/ (accessed 30 August 2026).

Same respondent

Track Kenya enforcement

Get decision alerts by email

Tell us your jurisdictions and we email you when a regulator's decision passes verification. Privacy.