The complainant alleged NCBA Bank Kenya PLC sent him false and misleading information about his loan statements and simultaneously sent it to a third party, despite his numerous requests to remove the third party's contact as an alternate contact on his account. The Office found the bank liable for violating his right to object and his right of erasure.
Orders and outcome
The Office declined the Kenya Shillings fifty million the complainant prayed for as inordinately high, and ordered the bank to pay Kenya Shillings Seven Hundred Thousand (KES 700,000), itemised as KES 200,000 for unlawful processing, KES 250,000 for infringing the right to object and KES 250,000 for infringing the right to erasure. The bank was also ordered to ensure the information it sends the complainant about his bank balances is accurate and kept up to date. No order as to costs. Dated 24 April 2024.
ODPC (Kenya), Dr. Bernard Shiaunda Aete v Ncba Bank Kenya Plc, ODPC Complaint No. 169 of 2024, determination of 24 April 2024. African Data Protection Enforcement Tracker, Law Lab Africa Research, https://research.lawlab.africa/tracker/kenya/odpc/2024/ncba-bank-kenya-plc/ (accessed 30 August 2026).