Griffins Wekesa v My Boda Limited

Complaint upheld; enforcement notice issued. ODPC, 18 December 2024.

Record ID: ke-odpc-2024-0112
Case reference: ODPC Complaint No. 1506 of 2024
Jurisdiction: Kenya
Regulator: ODPC
Type: determination
Complainant: Griffins Wekesa
Date decided: 18 December 2024
Respondent type: private
Sector: general
Violations: unlawful data disclosure, unlawful processing
Provisions cited: s.25 DPA 2019, s.30 DPA 2019, s.56 DPA 2019, s.58 DPA 2019
Outcome: complaint upheld; enforcement notice issued
Status: final
Source: Official document ↗
Source integrity: SHA-256 d659a1c8db8a4886…
Record verified: 30 July 2026

The facts

The complainant alleged that My Boda Limited kept sending him promotional messages although he had never given the company his contacts or allowed their use. He tried to reach the respondent directly to no avail before complaining to the ODPC. The Office found the respondent liable.

Orders and outcome

The respondent was ordered to delete the complainant's personal data from its systems, stop contacting him, and provide proof to the Office within 7 days of the determination. An enforcement notice was issued against it. Dated 18 December 2024.

DISCLOSURE · GENERAL · UNLAWFUL-PROCESSING · UPHELD

Cite this decision

ODPC (Kenya), Griffins Wekesa v My Boda Limited, ODPC Complaint No. 1506 of 2024, determination of 18 December 2024. African Data Protection Enforcement Tracker, Law Lab Africa Research, https://research.lawlab.africa/tracker/kenya/odpc/2024/my-boda-limited/ (accessed 30 August 2026).

Track Kenya enforcement

Get decision alerts by email

Tell us your jurisdictions and we email you when a regulator's decision passes verification. Privacy.