The complainant alleged that Zerox Technology Limited, a digital lender, listed her as an emergency contact for a loan without her consent and failed to inform her of the use of her personal data. The ODPC noted the respondent is a repeat offender with complaints of a similar nature and enforcement notice measures still unimplemented.
Orders and outcome
The respondent was found liable and ordered to pay the complainant Kenya Shillings Five Hundred Thousand (Kshs. 500,000) as compensation for the infringement of the rights to be informed and to object, and was directed to comply with specified measures of an earlier enforcement notice within thirty days of receipt of the determination. Dated June 2024.
DIGITAL LENDING · THIRD PARTY DATA · CONSENT · FINTECH · EMERGENCY CONTACT
Cite this decision
ODPC (Kenya), Sandra Bonareri Ongaki v Zerox Technology Limited, ODPC Complaint No. 0381 of 2024, determination of July 2024. African Data Protection Enforcement Tracker, Law Lab Africa Research, https://research.lawlab.africa/tracker/kenya/odpc/2024/zerox-technology-limited-3/ (accessed 30 August 2026).