Erick Kabuyefu Zakayo & 12 Others v Bohemian Flowers Limited

Complaint upheld; compensation ordered; enforcement notice issued. ODPC, 27 August 2025.

Record ID: ke-odpc-2025-0058
Case reference: ODPC Complaint No. 0752 of 2025
Jurisdiction: Kenya
Regulator: ODPC
Type: determination
Complainant: Erick Kabuyefu Zakayo & 12 Others
Date decided: 27 August 2025
Respondent type: private
Sector: general
Violations: unlawful data disclosure, unlawful processing
Provisions cited: s.25 DPA 2019, s.26 DPA 2019, s.56(1) DPA 2019, s.65 DPA 2019
Outcome: complaint upheld; compensation ordered; enforcement notice issued
Compensation: KES 650,000 (≈ USD 5,040 at the decision date)
Status: final
Source: Official document ↗
Source integrity: SHA-256 258039de5478be80…
Record verified: 30 July 2026

The facts

Thirteen complainants, former pensionable employees of Bohemian Flowers Limited, alleged that the company shared their personal and next-of-kin details with another insurance company without their consent. The ODPC found their right to be informed of the use to which their personal data would be put was infringed.

Orders and outcome

The respondent was found liable and ordered to pay each of the thirteen complainants Kenya Shillings Fifty Thousand (KES 50,000) as compensation, and an enforcement notice was issued against it. Dated 27 August 2025.

DISCLOSURE · GENERAL · UNLAWFUL-PROCESSING · UPHELD

Cite this decision

ODPC (Kenya), Erick Kabuyefu Zakayo & 12 Others v Bohemian Flowers Limited, ODPC Complaint No. 0752 of 2025, determination of 27 August 2025. African Data Protection Enforcement Tracker, Law Lab Africa Research, https://research.lawlab.africa/tracker/kenya/odpc/2025/bohemian-flowers/ (accessed 30 August 2026).

Track Kenya enforcement

Get decision alerts by email

Tell us your jurisdictions and we email you when a regulator's decision passes verification. Privacy.