Alpha Academy Eldoret

Suo moto investigation; non-compliance found; enforcement notice issued. ODPC, 16 December 2025.

Record ID

ke-odpc-2025-0095

Case reference

ODPC/SM/0002/2024

Jurisdiction

Kenya

Regulator

ODPC

Type

determination

Date decided

16 December 2025

Respondent type

private

Sector

general

Violations

lack of consent, commercial use of personal data, unlawful data disclosure, failure to respond to erasure request, unlawful processing, failure to implement security measures

Provisions cited

s.25(b) DPA 2019, s.25(G) DPA 2019, s.25(D) DPA 2019, s.25 DPA 2019, s.26 DPA 2019, s.27(a) DPA 2019, s.29(D) DPA 2019, s.29(H) DPA 2019, s.29(a) DPA 2019, s.29 DPA 2019, s.29(F) DPA 2019, s.30 DPA 2019, s.32(1) DPA 2019, s.32(4) DPA 2019, s.32(2) DPA 2019, s.32 DPA 2019, s.37(1) DPA 2019, s.57(3) DPA 2019, s.57(1) DPA 2019, s.58 DPA 2019

Outcome

suo moto investigation; non-compliance found; enforcement notice issued

Status

final

Source

Official document ↗

Source integrity

SHA-256 80de275a556b27af…

Record verified

30 July 2026

The facts

The ODPC opened a suo moto investigation into Alpha Academy Eldoret's processing of minors' personal data. The school failed to comply with the Office's request for information, which the determination notes constitutes an offence of failing to comply with a notice, and it failed to demonstrate that its processing activities, particularly of minors' personal data, comply with the Act. The Office found the school non-compliant.

Orders and outcome

The respondent was found non-compliant in respect of the suo moto investigation and an enforcement notice was issued against it. Dated 16 December 2025.

CONSENT · DATA-SECURITY · DISCLOSURE · GENERAL · RIGHT-TO-ERASURE · UNLAWFUL-PROCESSING

Cite this decision

Track Kenya enforcement

Get decision alerts by email

Tell us your jurisdictions and we email you when a regulator's decision passes verification. Privacy.