failure to register with odpc, no lawful basis for processing, failure to fulfil duty to notify, inadequate technical and organisational safeguards, no dpia conducted, no data retention policy
The ODPC opened a suo motu investigation on 13 May 2024 into the personal data processing practices of Nala Maternity and Nursing Home Limited, taking cognizance of the public interest they had generated. Investigations found the respondent had not implemented appropriate technical and organisational measures to give effect to the data protection principles, and that the system installed at its premises did not meet the requirements of the Act and the General Regulations.
Orders and outcome
The respondent was found liable in respect of the suo motu investigation and an enforcement notice was issued against it. Dated December 2024.
ODPC (Kenya), Suo Motu Nala Maternity Nursing Home Limited, ODPC Suo Motu Investigation No. 0010 of 2024, determination of 18 December 2024. African Data Protection Enforcement Tracker, Law Lab Africa Research, https://research.lawlab.africa/tracker/kenya/odpc/2024/suo-motu-nala-maternity-nursing-home-limited/ (accessed 23 October 2026).
Track Kenya enforcement
Free: a monthly digest of new verified decisions in your chosen jurisdictions. You confirm by email before anything is sent; every alert has an unsubscribe link. Privacy · Terms.