Sarah Gichira Gathoni v Airflo Limited

Complaint upheld; compensation ordered; enforcement notice issued. ODPC, 20 August 2025.

Record ID: ke-odpc-2025-0055
Case reference: ODPC Complaint No. 0733 of 2025
Jurisdiction: Kenya
Regulator: ODPC
Type: determination
Complainant: Sarah Gichira Gathoni
Date decided: 20 August 2025
Respondent type: private
Sector: general
Violations: unlawful processing
Provisions cited: s.25 DPA 2019, s.26(D) DPA 2019, s.26 DPA 2019, s.40(1)(a) DPA 2019, s.40 DPA 2019, s.56(1) DPA 2019, s.56 DPA 2019, s.65 DPA 2019
Outcome: complaint upheld; compensation ordered; enforcement notice issued
Compensation: KES 250,000 (≈ USD 1,940 at the decision date)
Status: final
Source: Official document ↗
Source integrity: SHA-256 ddf6d67863b18694…
Record verified: 30 July 2026

The facts

The complainant's personal Safaricom line, registered in her name before her employment, was taken over and used by Airflo Limited during her employment. When she left the company she asked for its release, without success. The ODPC found her right to correction of false or misleading data was infringed.

Orders and outcome

The respondent was found liable and ordered to pay the complainant Kenya Shillings Two Hundred and Fifty Thousand (KES 250,000) as compensation, and an enforcement notice was issued against it. Dated 20 August 2025.

GENERAL · UNLAWFUL-PROCESSING · UPHELD

Cite this decision

ODPC (Kenya), Sarah Gichira Gathoni v Airflo Limited, ODPC Complaint No. 0733 of 2025, determination of 20 August 2025. African Data Protection Enforcement Tracker, Law Lab Africa Research, https://research.lawlab.africa/tracker/kenya/odpc/2025/airflo/ (accessed 30 August 2026).

Track Kenya enforcement

Get decision alerts by email

Tell us your jurisdictions and we email you when a regulator's decision passes verification. Privacy.