Donald Mkala Golo v Platinum Credit Limited

Complaint upheld; compensation ordered; enforcement notice issued. ODPC, 16 October 2024.

Record ID: ke-odpc-2024-0093
Case reference: ODPC Complaint No. 1090 of 2024
Jurisdiction: Kenya
Regulator: ODPC
Type: determination
Complainant: Donald Mkala Golo
Date decided: 16 October 2024
Respondent type: private
Sector: digital lending
Violations: lack of consent, commercial use of personal data, failure to respond to erasure request, unlawful processing, failure to implement security measures
Provisions cited: s.25 DPA 2019, s.26(a) DPA 2019, s.26 DPA 2019, s.37(1) DPA 2019, s.40(1)(b) DPA 2019, s.41 DPA 2019, s.42 DPA 2019, s.42(2) DPA 2019, s.42(2)(b) DPA 2019, s.56 DPA 2019, s.58 DPA 2019, s.65(4) DPA 2019, s.65(2) DPA 2019, s.65(1) DPA 2019
Outcome: complaint upheld; compensation ordered; enforcement notice issued
Compensation: KES 1,000,000 (≈ USD 7,580 at the decision date)
Status: final
Source: Official document ↗
Source integrity: SHA-256 fe301a060f8fd404…
Record verified: 30 July 2026

The facts

The complainant alleged that Platinum Credit Limited processed, and continued to process, his personal data for marketing purposes without his express consent or any other lawful basis. The ODPC found the respondent liable, taking into account the nature and extent of the unlawful processing and the conduct of the respondent.

Orders and outcome

The respondent was found liable, ordered to compensate the complainant KES 1,000,000, and an enforcement notice was issued against it. Dated 16 October 2024.

CONSENT · DATA-SECURITY · FINTECH · MOBILE-LENDING · RIGHT-TO-ERASURE · UNLAWFUL-PROCESSING · UPHELD

Cite this decision

ODPC (Kenya), Donald Mkala Golo v Platinum Credit Limited, ODPC Complaint No. 1090 of 2024, determination of 16 October 2024. African Data Protection Enforcement Tracker, Law Lab Africa Research, https://research.lawlab.africa/tracker/kenya/odpc/2024/platinum-credit-limited-2/ (accessed 30 August 2026).

Same respondent

Track Kenya enforcement

Get decision alerts by email

Tell us your jurisdictions and we email you when a regulator's decision passes verification. Privacy.