Becton Dickinson And Company Ta Bd East Africa Safaricom Plc

Complaint upheld; enforcement notice issued; prosecution recommended. ODPC, March 2025. month-precision date

Record ID

ke-odpc-2025-0002

Case reference

ODPC Complaint No. 1958 of 2024

Jurisdiction

Kenya

Regulator

ODPC

Type

determination

Date decided

March 2025

Respondent type

private

Sector

healthcare

Violations

unauthorised image/photo use, lack of consent, unlawful data disclosure, failure to prevent data breach, failure to notify data breach, unlawful processing, failure to register with odpc

Provisions cited

s.23 DPA 2019, s.25(E) DPA 2019, s.25(H) DPA 2019, s.25 DPA 2019, s.26(a) DPA 2019, s.26 DPA 2019, s.29 DPA 2019, s.30 DPA 2019, s.30(1)(b) DPA 2019, s.30(1) DPA 2019, s.40(1)(b) DPA 2019, s.43 DPA 2019, s.48(c) DPA 2019, s.56(1) DPA 2019, s.56 DPA 2019, s.65 DPA 2019

Outcome

complaint upheld; enforcement notice issued; prosecution recommended

Status

final

Source

Official document ↗

Record verified

12 March 2026

Summary

The ODPC upheld a complaint against Becton Dickinson And Company Ta Bd East Africa Safaricom Plc in the healthcare sector concerning unauthorised image/photo use, lack of consent, unlawful data disclosure. The determination considers s.23 DPA 2019, s.25(E) DPA 2019, s.25(H) DPA 2019, s.25 DPA 2019. An enforcement notice was issued against the respondent. A recommendation for prosecution was made.

CONSENT · DATA-BREACH · DISCLOSURE · HEALTHCARE · UNLAWFUL-PROCESSING · UPHELD

Cite this decision

Track Kenya enforcement

Get decision alerts by email

Tell us your jurisdictions and we email you when a regulator's decision passes verification. Privacy.