Suo Motu Nala Maternity Nursing Home Limited

Complaint upheld; enforcement notice issued. ODPC, 18 December 2024.

Record ID

ke-odpc-2024-0113

Jurisdiction

Kenya

Regulator

ODPC

Type

determination

Date decided

18 December 2024

Respondent type

private

Sector

general

Violations

unlawful data disclosure, failure to prevent data breach, failure to conduct dpia, unlawful processing, failure to register with odpc, failure to implement security measures

Provisions cited

s.25(G) DPA 2019, s.25(b) DPA 2019, s.25 DPA 2019, s.25(D) DPA 2019, s.26 DPA 2019, s.29 DPA 2019, s.30(1)(b) DPA 2019, s.30(1) DPA 2019, s.41 DPA 2019

Outcome

complaint upheld; enforcement notice issued

Status

final

Source

Official document ↗

Source integrity

SHA-256 ebbe555ba84ded63…

Record verified

30 July 2026

The facts

The ODPC opened a suo motu investigation on 13 May 2024 into the personal data processing practices of Nala Maternity and Nursing Home Limited, taking cognizance of the public interest they had generated. Investigations found the respondent had not implemented appropriate technical and organisational measures to give effect to the data protection principles, and that the system installed at its premises did not meet the requirements of the Act and the General Regulations.

Orders and outcome

The respondent was found liable in respect of the suo motu investigation and an enforcement notice was issued against it. Dated December 2024.

DATA-BREACH · DATA-SECURITY · DISCLOSURE · GENERAL · UNLAWFUL-PROCESSING · UPHELD

Cite this decision

Track Kenya enforcement

Get decision alerts by email

Tell us your jurisdictions and we email you when a regulator's decision passes verification. Privacy.