Islim Shikunyi Imran v Everest Park Estate; Everest Park Management Ltd; Everest Park Residents' Association Mavoko
Complaint dismissed. ODPC, November 2025.
The facts
The complainant challenged CCTV cameras installed at the gate of Everest Park estate, alleging the respondents had failed to register as data controllers or processors and did not notify residents or provide information on data retention. After a site visit, the ODPC found gaps in transparency and demonstrable compliance but no evidence of unlawful processing, misuse of personal data, or harm from the CCTV installation, and held the documented safeguards and legitimate security purpose demonstrated substantial operational compliance.
Orders and outcome
The complaint was dismissed. The second and third respondents were nonetheless directed to comply with the Act by registering with the Office of the Data Protection Commissioner as data handlers. Dated November 2025.
Cite this decision
Track Kenya enforcement
Free: a monthly digest of new verified decisions in your chosen jurisdictions. You confirm by email before anything is sent; every alert has an unsubscribe link. Privacy · Terms.