The complainant challenged CCTV cameras installed at the gate of Everest Park estate, alleging the respondents had failed to register as data controllers or processors and did not notify residents or provide information on data retention. After a site visit, the ODPC found gaps in transparency and demonstrable compliance but no evidence of unlawful processing, misuse of personal data, or harm from the CCTV installation, and held the documented safeguards and legitimate security purpose demonstrated substantial operational compliance.
Orders and outcome
The complaint was dismissed. The second and third respondents were nonetheless directed to comply with the Act by registering with the Office of the Data Protection Commissioner as data handlers. Dated November 2025.
DATA-BREACH · DISMISSED · GENERAL · RIGHT-TO-ERASURE · UNLAWFUL-PROCESSING
Cite this decision
ODPC (Kenya), Islim Shikunyi Imran v Everest Park Estate; Everest Park Management Ltd; Everest Park Residents' Association Mavoko, ODPC Complaint No. 1274 of 2025, determination of November 2025. African Data Protection Enforcement Tracker, Law Lab Africa Research, https://research.lawlab.africa/tracker/kenya/odpc/2025/everest-park/ (accessed 30 August 2026).