Ncba Bank Kenya Plc

Complaint upheld; compensation ordered. ODPC, 24 April 2024.

Record ID: ke-odpc-2024-0042
Case reference: ODPC Complaint No. 169 of 2024
Jurisdiction: Kenya
Regulator: ODPC
Type: determination
Date decided: 24 April 2024
Respondent type: private
Sector: banking
Violations: unauthorised image/photo use, failure to respond to erasure request, unlawful processing
Provisions cited: s.25(F) DPA 2019, s.25 DPA 2019, s.26(c) DPA 2019, s.30 DPA 2019, s.30(1)(b) DPA 2019, s.40(1)(b) DPA 2019, s.40 DPA 2019, s.56(1) DPA 2019, s.56 DPA 2019, s.65 DPA 2019
Outcome: complaint upheld; compensation ordered
Compensation: KES 9,043,407 (≈ USD 68,500 at the decision date)
Status: final
Source: Official document ↗
Record verified: 12 March 2026

Summary

The ODPC upheld a complaint against Ncba Bank Kenya Plc in the banking sector concerning unauthorised image/photo use, failure to respond to erasure request, unlawful processing. The determination considers s.25(F) DPA 2019, s.25 DPA 2019, s.26(c) DPA 2019, s.30 DPA 2019. The Office ordered KES 9,043,407 in compensation.

BANKING · RIGHT-TO-ERASURE · UNLAWFUL-PROCESSING · UPHELD

Cite this decision

ODPC (Kenya), ODPC Complaint No. 169 of 2024, determination of 24 April 2024. African Data Protection Enforcement Tracker, Law Lab Africa Research, https://research.lawlab.africa/tracker/kenya/odpc/2024/ncba-bank-kenya-plc/ (accessed 22 July 2026).

Track Kenya enforcement

Get decision alerts by email

Tell us your jurisdictions and we email you when a regulator's decision passes verification. Privacy.