The complainant alleged that My Boda Limited kept sending him promotional messages although he had never given the company his contacts or allowed their use. He tried to reach the respondent directly to no avail before complaining to the ODPC. The Office found the respondent liable.
Orders and outcome
The respondent was ordered to delete the complainant's personal data from its systems, stop contacting him, and provide proof to the Office within 7 days of the determination. An enforcement notice was issued against it. Dated 18 December 2024.
DISCLOSURE · GENERAL · UNLAWFUL-PROCESSING · UPHELD
Cite this decision
ODPC (Kenya), Griffins Wekesa v My Boda Limited, ODPC Complaint No. 1506 of 2024, determination of 18 December 2024. African Data Protection Enforcement Tracker, Law Lab Africa Research, https://research.lawlab.africa/tracker/kenya/odpc/2024/my-boda-limited/ (accessed 23 October 2026).
Track Kenya enforcement
Free: a monthly digest of new verified decisions in your chosen jurisdictions. You confirm by email before anything is sent; every alert has an unsubscribe link. Privacy · Terms.