John Thuo Kamau v The Board of Kenya Motor Sports Federation Ltd; Maina Muturi

Complaint upheld; enforcement notice issued. ODPC, 19 October 2024.

Record ID: ke-odpc-2024-0094
Case reference: ODPC Complaint No. 1099 of 2024
Jurisdiction: Kenya
Regulator: ODPC
Type: determination
Complainant: John Thuo Kamau
Date decided: 19 October 2024
Respondent type: private
Sector: general
Violations: unlawful data disclosure, failure to prevent data breach, failure to notify data breach, unlawful processing
Provisions cited: s.25 DPA 2019, s.43 DPA 2019, s.56 DPA 2019, s.58 DPA 2019
Outcome: complaint upheld; enforcement notice issued
Status: final
Source: Official document ↗
Source integrity: SHA-256 45048e0395769032…
Record verified: 30 July 2026

The facts

The complainant alleged that the second respondent, in his capacity as chairperson of the Kenya Motor Sports Federation, divulged the complainant's personal data to third parties without his knowledge, authority or consent. The ODPC found the respondents did not fulfil their obligations under the Act.

Orders and outcome

The respondents were found liable and an enforcement notice was issued against them. Dated 19 October 2024.

DATA-BREACH · DISCLOSURE · GENERAL · UNLAWFUL-PROCESSING · UPHELD

Cite this decision

ODPC (Kenya), John Thuo Kamau v The Board of Kenya Motor Sports Federation Ltd; Maina Muturi, ODPC Complaint No. 1099 of 2024, determination of 19 October 2024. African Data Protection Enforcement Tracker, Law Lab Africa Research, https://research.lawlab.africa/tracker/kenya/odpc/2024/the-board-of-kenya-sports-federation-ltd-maina-muturi/ (accessed 30 August 2026).

Track Kenya enforcement

Get decision alerts by email

Tell us your jurisdictions and we email you when a regulator's decision passes verification. Privacy.