Davies Kiarie Chege v Whitepath Company Limited

Complaint upheld; enforcement notice issued. ODPC, 19 November 2024.

Record ID: ke-odpc-2024-0102
Case reference: ODPC Complaint No. 1261 of 2024
Jurisdiction: Kenya
Regulator: ODPC
Type: determination
Complainant: Davies Kiarie Chege
Date decided: 19 November 2024
Respondent type: private
Sector: digital lending
Violations: unlawful data disclosure, unlawful processing
Provisions cited: s.25 DPA 2019, s.26 DPA 2019, s.29 DPA 2019, s.30 DPA 2019, s.56 DPA 2019, s.58 DPA 2019
Outcome: complaint upheld; enforcement notice issued
Status: final
Source: Official document ↗
Source integrity: SHA-256 4f801023a546f281…
Record verified: 30 July 2026

The facts

The complainant alleged that Whitepath Company Limited unlawfully collected and processed his telephone number, without consent or lawful basis, for the purpose of recovering a loan he neither took out nor was associated with in any way. The ODPC found the respondent did not fulfil its obligations under the Act.

Orders and outcome

The respondent was found liable and an enforcement notice was issued against it. Dated 19 November 2024.

DISCLOSURE · FINTECH · MOBILE-LENDING · UNLAWFUL-PROCESSING · UPHELD

Cite this decision

ODPC (Kenya), Davies Kiarie Chege v Whitepath Company Limited, ODPC Complaint No. 1261 of 2024, determination of 19 November 2024. African Data Protection Enforcement Tracker, Law Lab Africa Research, https://research.lawlab.africa/tracker/kenya/odpc/2024/whitepath-company-limited/ (accessed 30 August 2026).

Same respondent

Track Kenya enforcement

Get decision alerts by email

Tell us your jurisdictions and we email you when a regulator's decision passes verification. Privacy.