Ncba Bank Plc

Complaint upheld; enforcement notice issued. ODPC, 30 October 2024.

Record ID

ke-odpc-2024-0099

Case reference

ODPC Complaint No. 1178 of 2024

Jurisdiction

Kenya

Regulator

ODPC

Type

determination

Date decided

30 October 2024

Respondent type

private

Sector

banking

Violations

lack of consent, unlawful data disclosure, failure to prevent data breach, unlawful processing, failure to implement security measures

Provisions cited

s.25(a) DPA 2019, s.25 DPA 2019, s.41(1) DPA 2019, s.43(a) DPA 2019, s.56 DPA 2019, s.58 DPA 2019, s.65 DPA 2019

Outcome

complaint upheld; enforcement notice issued

Status

final

Source

Official document ↗

Record verified

12 March 2026

Summary

The ODPC upheld a complaint against Ncba Bank Plc in the banking sector concerning lack of consent, unlawful data disclosure, failure to prevent data breach. The determination considers s.25(a) DPA 2019, s.25 DPA 2019, s.41(1) DPA 2019, s.43(a) DPA 2019. An enforcement notice was issued against the respondent.

BANKING · CONSENT · DATA-BREACH · DATA-SECURITY · DISCLOSURE · UNLAWFUL-PROCESSING · UPHELD

Cite this decision

Same respondent

• 11 December 2024 · complaint upheld

Track Kenya enforcement

Get decision alerts by email

Tell us your jurisdictions and we email you when a regulator's decision passes verification. Privacy.