Millie Namasaka v Platinum Credit Premier Credit

Complaint upheld; enforcement notice issued. ODPC, 14 February 2024.

Record ID

ke-odpc-2024-0021

Case reference

ODPC Complaint No. 2380 of 2023

Jurisdiction

Kenya

Regulator

ODPC

Type

determination

Complainant

Millie Namasaka

Date decided

14 February 2024

Respondent type

private

Sector

digital lending

Violations

commercial use of personal data, unlawful data disclosure, unlawful processing, failure to implement security measures

Provisions cited

s.25 DPA 2019, s.26 DPA 2019, s.28 DPA 2019, s.29 DPA 2019, s.30 DPA 2019, s.32 DPA 2019, s.37 DPA 2019, s.41(1) DPA 2019, s.42 DPA 2019, s.56 DPA 2019

Outcome

complaint upheld; enforcement notice issued

Status

final

Source

Official document ↗

Source integrity

SHA-256 17b1641b9702d912…

Record verified

30 July 2026

The facts

The complainant did not know how the respondents, two credit providers, obtained her phone number. Their agents kept calling her about loan products despite her declining the offers and visiting their offices to complain. The ODPC found the first respondent liable: unlike the second respondent, it provided no proof of consent, and its independent sales agents' agreements had no provision requiring agents to stop calling people who had not consented to their numbers being processed.

Orders and outcome

The first respondent was found liable, an enforcement notice was issued against it, and it was directed to put in place clear consent mechanisms for processing phone numbers for promotional messages and calls. The complaint against the second respondent was dismissed. The determination date is not legible in the scan.

DATA-SECURITY · DISCLOSURE · DISMISSED · FINTECH · MOBILE-LENDING · UNLAWFUL-PROCESSING

Cite this decision

Track Kenya enforcement

Free: a monthly digest of new verified decisions in your chosen jurisdictions. You confirm by email before anything is sent; every alert has an unsubscribe link. Privacy · Terms.