Miruka Daniel v Trident Insurance Company Ltd

Complaint upheld; enforcement notice issued. ODPC, 14 February 2024.

Record ID: ke-odpc-2024-0022
Case reference: ODPC Complaint No. 2379 of 2023
Jurisdiction: Kenya
Regulator: ODPC
Type: determination
Complainant: Miruka Daniel
Date decided: 14 February 2024
Respondent type: private
Sector: banking
Violations: unlawful data disclosure, failure to respond to erasure request, unlawful processing
Provisions cited: s.25 DPA 2019, s.26 DPA 2019, s.30 DPA 2019, s.56 DPA 2019, s.58 DPA 2019
Outcome: complaint upheld; enforcement notice issued
Status: final
Source: Official document ↗
Source integrity: SHA-256 fa49c563bd83dee4…
Record verified: 30 July 2026

The facts

The complainant received an email in November 2023 showing he had purportedly taken out an insurance policy with the respondent for a tuk-tuk. The policy contained all his personal details, yet he had never bought a tuk-tuk or given the respondent his details. The ODPC found his claim uncontroverted and the respondent liable.

Orders and outcome

The respondent was directed to revoke the insurance policy containing the complainant's particulars and to erase his personal data from its systems, and an enforcement notice was issued against it. Dated February 2024.

BANKING · DISCLOSURE · RIGHT-TO-ERASURE · UNLAWFUL-PROCESSING · UPHELD

Cite this decision

ODPC (Kenya), Miruka Daniel v Trident Insurance Company Ltd, ODPC Complaint No. 2379 of 2023, determination of 14 February 2024. African Data Protection Enforcement Tracker, Law Lab Africa Research, https://research.lawlab.africa/tracker/kenya/odpc/2024/trident-insurance-company-ltd/ (accessed 30 August 2026).

Track Kenya enforcement

Get decision alerts by email

Tell us your jurisdictions and we email you when a regulator's decision passes verification. Privacy.