The complainant alleged she was constantly contacted by Asapkash, a product of Zerox Technology Limited, demanding that she contact a relative responsible for a defaulted mobile loan she was not involved in. The ODPC found she had been listed as an emergency contact without express consent and without being informed, and noted the respondent is a repeat offender with prior enforcement notices whose measures it has yet to implement.
Orders and outcome
The respondent was found liable and ordered to pay the complainant Kshs. 500,000 as compensation, and was directed to comply with the specified measures of the earlier enforcement notice against it within thirty days of receiving the determination. Dated June 2024.
ODPC (Kenya), Sandra Bonareri Ongaki v Zerox Technology Limited, ODPC Complaint No. 0381 of 2024, determination of 3 June 2024. African Data Protection Enforcement Tracker, Law Lab Africa Research, https://research.lawlab.africa/tracker/kenya/odpc/2024/zerox-technology-limited-2/ (accessed 30 August 2026).