The complainant received an email in November 2023 showing he had purportedly taken out an insurance policy with the respondent for a tuk-tuk. The policy contained all his personal details, yet he had never bought a tuk-tuk or given the respondent his details. The ODPC found his claim uncontroverted and the respondent liable.
Orders and outcome
The respondent was directed to revoke the insurance policy containing the complainant's particulars and to erase his personal data from its systems, and an enforcement notice was issued against it. Dated February 2024.
ODPC (Kenya), Miruka Daniel v Trident Insurance Company Ltd, ODPC Complaint No. 2379 of 2023, determination of 14 February 2024. African Data Protection Enforcement Tracker, Law Lab Africa Research, https://research.lawlab.africa/tracker/kenya/odpc/2024/trident-insurance-company-ltd/ (accessed 23 October 2026).
Track Kenya enforcement
Free: a monthly digest of new verified decisions in your chosen jurisdictions. You confirm by email before anything is sent; every alert has an unsubscribe link. Privacy · Terms.