Chapeo

Complaint upheld; compensation ordered; enforcement notice issued; prosecution recommended. ODPC, July 2025. month-precision date

Record ID

ke-odpc-2025-0035

Case reference

ODPC Complaint No. 0238 of 2025

Jurisdiction

Kenya

Regulator

ODPC

Type

determination

Date decided

July 2025

Respondent type

private

Sector

general

Violations

commercial use of personal data, unlawful data disclosure, failure to prevent data breach, unlawful debt collection, failure to respond to erasure request, unlawful processing

Provisions cited

s.25 DPA 2019, s.26(a) DPA 2019, s.26 DPA 2019, s.28(2) DPA 2019, s.28(1) DPA 2019, s.28 DPA 2019, s.29 DPA 2019, s.30 DPA 2019, s.32 DPA 2019, s.56(1) DPA 2019, s.56 DPA 2019, s.58 DPA 2019, s.65 DPA 2019

Outcome

complaint upheld; compensation ordered; enforcement notice issued; prosecution recommended

Compensation

KES 2,000 (≈ USD 16 at the decision date)

Status

final

Source

Official document ↗

Record verified

12 March 2026

Summary

The ODPC upheld a complaint against Chapeo concerning commercial use of personal data, unlawful data disclosure, failure to prevent data breach. The determination considers s.25 DPA 2019, s.26(a) DPA 2019, s.26 DPA 2019, s.28(2) DPA 2019. The Office ordered KES 2,000 in compensation. An enforcement notice was issued against the respondent. A recommendation for prosecution was made.

DATA-BREACH · DEBT-COLLECTION · DISCLOSURE · GENERAL · RIGHT-TO-ERASURE · UNLAWFUL-PROCESSING · UPHELD

Cite this decision

Same respondent

• October 2025 · complaint upheld

Track Kenya enforcement

Get decision alerts by email

Tell us your jurisdictions and we email you when a regulator's decision passes verification. Privacy.